Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa
File: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (raw, json)
Hash identifier: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=
Subject key identifier: 91:9C:CD:5F:2A:9D:3D:DF:DA:0B:27:DD:79:30:38:F9:5B:7F:79:A8
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 0194228D79A71295F35B868C032F7671A785
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa
Signing time: Wed 01 Jan 2025 15:48:04 +0000
ROA not before: Wed 01 Jan 2025 15:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7473
IP address blocks: 185.84.218.0/24 maxlen: 24
185.84.219.0/24 maxlen: 24
193.103.148.0/24 maxlen: 24
2a05:a884:de10::/48 maxlen: 48
2a05:a884:de20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:79:a7:12:95:f3:5b:86:8c:03:2f:76:71:a7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Jan 1 15:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=919ccd5f2a9d3ddfda0b27dd793038f95b7f79a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:9f:80:93:df:8f:97:65:db:07:c4:5e:af:
e9:3f:4f:2d:0e:d6:b2:75:e0:6a:f4:0d:bc:fa:0a:
f5:22:77:eb:d3:46:a2:98:63:79:58:94:51:c5:e6:
1c:f3:0f:1c:16:ad:dd:d8:ab:32:3c:2a:6c:7f:32:
64:a9:5a:8b:d2:5d:5d:bd:7c:ca:51:31:7e:b7:fb:
44:2e:a2:3b:2e:54:02:25:05:b4:75:42:b9:eb:c1:
a6:8e:2c:91:e8:92:df:47:bf:e5:36:2d:b1:c4:31:
52:87:0a:1b:a0:bd:32:75:8e:b0:ac:20:25:30:57:
f1:61:ae:cb:e3:35:d8:a2:9c:0d:57:41:f8:68:b5:
7e:1b:1a:83:91:1b:e8:1d:33:1a:8a:40:b6:67:5e:
ff:fb:12:82:4b:f3:a3:08:cd:d1:5a:60:35:1c:8a:
15:a9:9a:60:77:82:68:e5:ea:49:55:f2:32:d8:0d:
98:17:b3:98:ba:3e:d6:3e:a3:0f:c8:e6:ab:b7:88:
b2:25:c1:7e:e1:52:29:29:e6:11:30:bf:64:32:47:
3c:43:d5:f5:f2:cd:4c:2a:72:e2:bc:d1:be:a3:af:
a9:cc:31:b1:47:8a:9f:94:89:e0:a2:9e:a7:b5:46:
05:9a:d5:cb:8c:25:54:2f:63:72:6e:c6:6f:09:91:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:CD:5F:2A:9D:3D:DF:DA:0B:27:DD:79:30:38:F9:5B:7F:79:A8
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.218.0/23
193.103.148.0/24
IPv6:
2a05:a884:de10::/48
2a05:a884:de20::/48
Signature Algorithm: sha256WithRSAEncryption
bf:a3:66:a9:26:cb:e4:7b:fb:aa:9c:42:78:3c:34:87:07:27:
68:56:3a:fb:96:bf:a2:e8:94:e1:ea:e2:24:88:ad:37:b3:a4:
95:89:93:d8:20:4e:05:f0:e4:5d:f3:05:c6:33:f7:29:f6:28:
ee:7c:3b:68:dc:47:a4:80:73:78:ab:ae:d4:15:7e:7d:e1:b1:
5b:06:95:27:64:d3:23:66:a2:70:33:f0:9c:11:47:cb:c9:b2:
98:18:a5:5c:24:c1:61:be:ab:1d:4e:48:cd:dc:54:22:23:fd:
47:56:a8:d1:ed:a0:bd:98:9e:48:28:2b:6b:96:e8:40:57:45:
9c:ef:5b:8c:73:8c:fd:8f:51:d9:53:68:02:8a:ea:b7:f6:40:
7d:93:ff:6a:be:c0:dd:b8:57:5b:73:64:43:95:64:19:92:6b:
e1:21:86:d6:f3:f4:3a:17:03:7b:a3:0f:6a:af:d9:97:b1:db:
44:1e:b0:f3:64:80:53:4d:94:7d:b0:27:9a:1d:e8:57:f4:a8:
f1:a4:60:2e:52:08:82:61:b9:ca:85:79:e4:33:0f:af:2c:c8:
e2:2f:fc:57:d7:3a:4e:31:3e:ec:dc:84:8a:ee:ed:11:df:11:
56:80:f6:f8:a9:ff:59:14:9c:56:03:54:2d:89:f5:4e:3e:ad:
c7:3d:94:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:16 2025 by rpki-client