Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/ZjNHAsFigzsi2kFZzbLF1MLnNZs.roa
File: ZjNHAsFigzsi2kFZzbLF1MLnNZs.roa (raw, json)
Hash identifier: W2NjtHqX2ftFCnqmVrGRJSwnpxtJPozbYxXQJv+6TDc=
Subject key identifier: 66:33:47:02:C1:62:83:3B:22:DA:41:59:CD:B2:C5:D4:C2:E7:35:9B
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0195D3BC54382026010EA236132210239C63
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/ZjNHAsFigzsi2kFZzbLF1MLnNZs.roa
Signing time: Wed 26 Mar 2025 18:34:49 +0000
ROA not before: Wed 26 Mar 2025 18:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132892
IP address blocks: 141.101.88.0/24 maxlen: 24
141.101.89.0/24 maxlen: 24
2a06:98c0:3600::/48 maxlen: 48
2a06:98c0:3601::/48 maxlen: 48
2a06:98c0:3602::/48 maxlen: 48
2a06:98c0:3603::/48 maxlen: 48
2a06:98c0:3604::/48 maxlen: 48
2a06:98c0:3605::/48 maxlen: 48
2a06:98c0:3606::/48 maxlen: 48
2a06:98c0:3607::/48 maxlen: 48
2a06:98c0:3608::/48 maxlen: 48
2a06:98c0:3609::/48 maxlen: 48
2a06:98c0:360a::/48 maxlen: 48
2a06:98c0:360b::/48 maxlen: 48
2a06:98c0:360c::/48 maxlen: 48
2a06:98c0:360d::/48 maxlen: 48
2a06:98c0:360f::/48 maxlen: 48
2a06:98c0:3610::/48 maxlen: 48
2a06:98c0:3611::/48 maxlen: 48
2a06:98c0:3613::/48 maxlen: 48
2a06:98c0:3614::/48 maxlen: 48
2a06:98c0:3615::/48 maxlen: 48
2a06:98c0:361c::/48 maxlen: 48
2a06:98c0:361d::/48 maxlen: 48
2a06:98c0:361f::/48 maxlen: 48
2a06:98c0:3620::/48 maxlen: 48
2a06:98c0:3621::/48 maxlen: 48
2a06:98c0:3622::/48 maxlen: 48
2a06:98c0:3623::/48 maxlen: 48
2a06:98c0:3624::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:bc:54:38:20:26:01:0e:a2:36:13:22:10:23:9c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Mar 26 18:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66334702c162833b22da4159cdb2c5d4c2e7359b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:48:b1:4e:78:fb:6d:c4:e6:bc:3e:33:86:
6b:28:ad:4e:25:d7:ed:ef:df:d1:8a:41:12:ec:43:
f0:b9:cb:14:6c:45:cb:e1:8c:42:72:ce:a9:f0:22:
e3:be:73:96:4c:cd:ab:3c:12:b4:53:0d:01:e3:4e:
69:9c:03:b6:38:3d:82:3f:4d:39:ef:3f:a5:10:c1:
00:c0:be:36:88:17:a2:55:f7:90:53:1a:cb:03:27:
96:a5:76:d6:fa:a5:a2:fe:14:55:8d:69:42:01:f2:
7d:69:7e:2c:0c:13:46:ec:1b:30:93:6d:7d:3e:bd:
dc:01:da:a8:51:39:e7:44:a0:02:d0:50:3b:66:28:
bb:33:72:f0:54:54:0c:97:4e:48:a3:84:0b:68:01:
cb:8f:2c:a6:3f:52:1f:9a:23:e2:e4:67:4d:e7:e7:
a1:ad:f5:5c:d8:6a:b0:f4:da:8b:11:f7:55:f5:87:
e1:09:5f:ab:c2:da:03:e7:72:6b:1e:e0:27:89:99:
f2:fd:16:86:6a:39:18:36:a6:a4:0b:51:ff:2c:39:
f4:4c:ca:8b:5c:53:18:2b:c6:5f:37:95:da:be:39:
71:c6:f8:d6:7c:e9:4b:8b:99:2c:a3:17:c8:ec:0b:
ba:0c:25:a1:82:0e:b3:6d:f2:f7:2d:bf:9e:4c:4a:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:47:02:C1:62:83:3B:22:DA:41:59:CD:B2:C5:D4:C2:E7:35:9B
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/ZjNHAsFigzsi2kFZzbLF1MLnNZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.88.0/23
IPv6:
2a06:98c0:3600::-2a06:98c0:360d:ffff:ffff:ffff:ffff:ffff
2a06:98c0:360f::-2a06:98c0:3611:ffff:ffff:ffff:ffff:ffff
2a06:98c0:3613::-2a06:98c0:3615:ffff:ffff:ffff:ffff:ffff
2a06:98c0:361c::/47
2a06:98c0:361f::-2a06:98c0:3624:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
76:8b:f9:7d:e5:d3:3f:11:81:52:a5:9c:e3:c4:94:ae:b1:1c:
f0:04:bd:14:bd:75:31:5f:4a:2a:0c:50:c9:48:80:19:a7:48:
72:d8:80:fc:7c:99:8a:13:d0:1e:77:bf:6f:74:c6:63:c1:19:
3d:96:2c:15:63:b0:e2:3c:de:06:21:4d:3f:c5:60:16:74:ad:
f7:62:ec:76:c0:b9:4b:5a:1a:5f:e4:00:fc:94:2d:da:ea:86:
0b:ae:4a:84:bd:e5:57:98:47:cf:0d:c9:4b:92:68:d3:de:80:
8a:1b:e6:db:77:52:20:47:54:7b:ad:13:84:20:14:14:0c:01:
62:6a:55:0a:0d:60:85:75:89:8f:6f:d7:7a:0c:fe:69:d7:32:
d5:43:cf:57:a9:a8:d3:bc:54:68:58:8c:dc:35:0a:57:cb:7a:
23:b5:1a:5e:50:5f:eb:48:81:40:77:de:d3:f6:c7:c8:68:20:
04:27:46:4e:5c:38:c5:fc:61:00:1f:8b:73:60:9b:88:8c:1e:
29:1e:b7:e2:6b:d2:96:92:7d:d1:b2:bf:8c:74:d9:92:aa:af:
bf:f0:bd:b1:8a:71:19:40:fb:c3:50:8f:8e:c1:da:4d:ce:38:
7e:af:92:64:86:60:0b:7d:fd:39:85:d5:84:4c:60:08:ba:ee:
be:49:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:15:07 2025 by rpki-client