Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa
File: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (raw, json)
Hash identifier: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=
Subject key identifier: 65:F2:A6:80:20:B9:B2:1A:9D:88:9E:28:1B:85:90:53:62:25:00:9B
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 0195D8DD3367A45F63440357C675D64102C0
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa
Signing time: Thu 27 Mar 2025 18:28:49 +0000
ROA not before: Thu 27 Mar 2025 18:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47274
IP address blocks: 91.204.8.0/22 maxlen: 22
195.62.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:dd:33:67:a4:5f:63:44:03:57:c6:75:d6:41:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Mar 27 18:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65f2a68020b9b21a9d889e281b8590536225009b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:f2:5f:ec:e1:d1:b9:b6:4a:7e:ca:c5:1c:
6a:30:55:66:e4:e2:04:2e:8c:cd:5f:fc:5b:f1:6e:
3b:7c:4a:55:9c:31:2f:34:f4:df:d4:5f:d6:ce:65:
30:53:26:0c:c8:70:70:72:07:f4:30:2a:01:b4:7e:
7a:68:43:e8:d1:ed:00:25:c7:90:55:22:21:47:aa:
8e:8a:11:81:a6:ae:b5:67:ff:40:b9:e4:d2:01:69:
1e:01:d3:27:b5:36:8e:84:47:21:81:b0:9c:2e:eb:
20:f6:94:44:b4:5e:87:a9:5d:9a:8e:05:c0:9b:f4:
b7:ff:86:ba:10:b0:b7:e2:d6:4c:27:35:11:51:b2:
df:99:70:7f:a3:a2:e4:af:da:89:86:f1:15:e2:1e:
2c:56:e4:1d:58:da:08:b0:fc:8e:9f:c4:2a:c4:c2:
bb:b5:a7:c8:b1:dc:4a:c3:7d:b7:80:3b:61:ce:32:
3a:30:95:4c:f0:7f:68:f5:f2:1c:c2:b4:6a:b0:9e:
1e:19:99:73:a7:c5:ab:99:93:24:ad:90:65:b5:64:
91:30:fd:bb:17:68:4b:ed:7b:ed:1b:82:f6:90:62:
0e:13:b6:53:a7:7d:d3:c7:a6:00:c6:68:15:5f:90:
4e:cc:48:de:c5:2b:bc:01:94:d0:f5:a4:1a:62:c9:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F2:A6:80:20:B9:B2:1A:9D:88:9E:28:1B:85:90:53:62:25:00:9B
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.8.0/22
195.62.80.0/23
Signature Algorithm: sha256WithRSAEncryption
31:38:0c:7d:e6:83:12:64:c7:6d:51:e1:63:6c:3b:56:ce:9e:
41:90:0d:38:83:42:90:97:bf:d0:a0:2f:34:df:af:b2:2a:fb:
c3:ff:11:28:6e:61:04:67:c8:e8:75:31:24:34:7c:32:dd:25:
6c:a0:39:dc:1e:9c:2c:ad:15:5e:07:6c:d3:02:89:2e:4b:03:
98:ee:06:c3:c5:ac:1b:67:5b:f3:1f:1a:0a:bb:41:bc:4f:82:
3e:ad:b2:a2:9a:a5:7b:64:65:6a:d5:00:06:bd:06:10:a5:6c:
fa:e2:85:ff:0c:2c:17:d0:df:47:ce:7b:f7:94:aa:1a:88:70:
1e:2c:43:98:bc:5f:58:c0:1b:37:7d:56:5d:c4:f7:2f:97:97:
37:cc:d4:a8:40:80:44:66:76:cf:4c:62:e6:80:17:e9:64:2f:
48:84:25:ae:05:47:f5:b5:2a:32:ea:3c:23:e3:53:56:c4:72:
aa:01:14:27:50:dd:44:09:7b:f5:f4:70:21:f8:1a:bb:b5:04:
75:20:8c:ba:d7:31:16:72:12:76:f2:54:ac:e0:db:e6:ae:a0:
f9:0c:2c:80:fe:d3:2a:06:4e:e4:31:a5:9c:84:5f:6c:ea:ae:
94:69:e0:12:b5:40:79:f8:26:56:4d:04:16:c9:7c:ec:55:25:
19:b2:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:03 2025 by rpki-client on console.sobornost.net