Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Z_XRjOJ9VasX2hdyivI8LZxk0tU.roa
File: Z_XRjOJ9VasX2hdyivI8LZxk0tU.roa (raw, json)
Hash identifier: DoO/te/N3wu6QXtdua9TNn2tILihoZETbSeA20c5yd4=
Subject key identifier: 67:F5:D1:8C:E2:7D:55:AB:17:DA:17:72:8A:F2:3C:2D:9C:64:D2:D5
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 05405E0F
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Z_XRjOJ9VasX2hdyivI8LZxk0tU.roa
Signing time: Tue 17 May 2022 06:06:29 +0000
ROA not before: Tue 17 May 2022 06:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 85.239.151.0/24 maxlen: 24
85.239.148.0/24 maxlen: 24
85.239.149.0/24 maxlen: 24
85.239.150.0/24 maxlen: 24
185.95.159.0/24 maxlen: 24
185.95.156.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88104463 (0x5405e0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 17 06:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67f5d18ce27d55ab17da17728af23c2d9c64d2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:36:ed:dd:cc:89:1d:63:6e:13:83:2b:9b:
08:7f:0e:2a:96:c7:d0:b9:9d:05:3c:d6:ca:2f:97:
2f:93:cf:60:99:84:df:cb:0c:82:05:f8:b0:16:a8:
51:8b:d3:55:cb:0b:02:c4:ab:a3:31:f5:6e:78:ef:
74:b0:5e:4f:50:d0:7c:05:24:c1:b2:c0:63:de:c7:
c9:47:fa:1e:bf:d4:e7:c0:53:49:01:20:1f:63:83:
d8:ef:5e:ec:8b:a1:0d:54:0c:ab:92:09:ec:64:cf:
6e:02:e3:3b:88:83:1e:56:cf:e3:25:f1:e7:88:af:
8f:88:5d:fe:35:b7:68:39:fa:8f:97:d1:b7:54:fc:
1c:68:1f:7c:a2:b1:5c:12:44:ac:43:6c:ae:5e:45:
3d:e9:e9:89:a7:16:a0:d4:f2:00:98:ea:be:2f:86:
59:2c:8a:c5:93:cf:f0:b2:74:07:1f:92:6c:65:71:
70:5f:4d:83:04:48:2a:32:0c:86:69:68:81:5b:e9:
78:c5:71:fd:55:c1:7d:1e:c6:ca:2e:fc:6e:8e:20:
2c:b4:36:1e:84:69:20:8b:1f:1d:8b:4e:bd:95:fd:
33:5f:88:ef:5d:42:c6:a7:49:c0:1b:ca:85:ce:a4:
68:3c:76:c7:24:51:73:b9:8f:8c:2b:32:c7:a0:e2:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F5:D1:8C:E2:7D:55:AB:17:DA:17:72:8A:F2:3C:2D:9C:64:D2:D5
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Z_XRjOJ9VasX2hdyivI8LZxk0tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/22
185.95.156.0/23
185.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:dd:19:97:94:fb:6b:d3:2f:06:7c:5c:7f:01:45:72:ba:77:
bc:dc:ba:ef:79:93:e3:dc:fa:f9:cd:3f:ff:cf:18:a3:ae:48:
41:9f:27:14:d7:5a:1e:0a:4c:be:eb:48:45:af:ac:fe:fd:df:
fe:02:05:b4:b6:62:9d:c0:56:21:f2:ea:5b:65:7c:ef:8d:53:
2c:41:81:3f:8f:49:b2:42:69:ba:a1:72:b2:98:92:bd:47:ee:
8c:00:f0:a3:0c:5a:d4:d2:58:04:e6:32:2f:7b:73:d1:db:ed:
0b:a1:7b:f4:9e:3f:43:8f:68:65:d7:1d:63:8e:37:d6:1f:cf:
00:58:78:2f:92:07:e0:b7:89:c9:ef:9d:8d:5d:7c:9b:69:37:
80:c2:db:31:34:df:1d:86:83:a4:b3:e0:69:0f:23:dd:91:cc:
20:1e:f4:cb:8e:00:63:7d:6c:47:98:8d:87:b5:81:05:36:ef:
15:d4:59:af:a8:72:08:4b:50:26:b9:ab:13:e5:92:d1:dc:80:
f3:07:ea:2a:25:4a:78:4f:9f:c0:15:c2:b8:db:84:bd:a4:9a:
3e:75:a4:ab:fd:84:54:24:6f:c9:90:60:1f:2a:63:d8:89:a0:
39:e8:ff:fe:a2:de:a4:88:1c:c1:a3:d4:7f:0c:8e:84:32:44:
4e:37:38:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:36 2025 by rpki-client