Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/ZSiJz_OaCsujOe-nE57g_9Wu204.roa
File: ZSiJz_OaCsujOe-nE57g_9Wu204.roa (raw, json)
Hash identifier: 5CqnmzibHSeKfUDY/6dM7Qih/jm2CL8UpCRuqNGvFhg=
Subject key identifier: 65:28:89:CF:F3:9A:0A:CB:A3:39:EF:A7:13:9E:E0:FF:D5:AE:DB:4E
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 01943B2C2F3E87A477099CB6C00D0663934A
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/ZSiJz_OaCsujOe-nE57g_9Wu204.roa
Signing time: Mon 06 Jan 2025 10:32:18 +0000
ROA not before: Mon 06 Jan 2025 10:32:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198560
IP address blocks: 83.150.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:2c:2f:3e:87:a4:77:09:9c:b6:c0:0d:06:63:93:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 6 10:32:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=652889cff39a0acba339efa7139ee0ffd5aedb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:0d:0f:d1:ce:bb:24:82:ba:0d:97:ab:d1:
a1:9c:f5:ea:10:2a:cd:b7:1c:1b:20:1d:42:78:8a:
94:8a:76:81:c5:e2:72:73:d5:1a:19:12:14:bc:fc:
ef:38:74:12:aa:19:24:52:75:32:ee:08:e5:b0:0b:
40:67:60:65:2b:80:8e:e1:a4:b9:a3:e0:aa:4d:d0:
8b:8a:d2:5e:99:1c:ab:6d:12:84:d8:7c:14:84:16:
4d:88:c0:27:e6:ce:2b:64:32:17:e3:20:14:53:17:
da:7b:a5:14:4e:4d:59:53:4b:71:97:e1:64:25:14:
68:47:c6:86:e6:14:53:14:36:1f:80:d1:b1:df:79:
48:dd:73:d2:76:7c:6e:26:dc:d6:8b:2d:69:69:cc:
93:4b:e2:eb:db:b1:f7:aa:2b:7e:a1:13:8c:03:22:
a7:2e:1c:4f:cc:b4:fa:3a:20:1c:35:d5:95:84:61:
ea:51:03:ab:5e:0b:8c:95:c1:4d:90:58:42:6a:0f:
f1:99:c7:b3:16:b5:c1:5f:e2:74:7c:eb:01:b4:9d:
dd:be:37:d5:06:6a:3c:42:67:5b:8b:45:6d:4b:0f:
91:1a:a1:45:c6:9c:4e:f9:09:e8:78:e5:c4:e5:db:
56:2a:c9:c6:9f:27:84:c3:d2:6f:b6:e6:3d:be:fe:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:28:89:CF:F3:9A:0A:CB:A3:39:EF:A7:13:9E:E0:FF:D5:AE:DB:4E
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/ZSiJz_OaCsujOe-nE57g_9Wu204.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.237.0/24
Signature Algorithm: sha256WithRSAEncryption
49:84:7f:6a:dd:eb:01:c6:0e:fa:6c:f7:60:60:de:60:2f:d5:
a6:9e:8b:c2:e5:b9:f9:59:c8:6a:e3:39:10:08:b3:95:c6:98:
68:eb:c9:20:d5:13:5a:de:b2:4a:fa:8e:d2:e0:31:34:41:c5:
5c:51:24:c8:e6:37:c2:20:47:42:eb:f4:66:09:b0:db:2c:f7:
28:e2:38:e4:26:23:8b:ba:a7:e2:8f:7b:79:b5:5e:ec:6f:b3:
89:12:7b:bf:28:b4:ed:38:c8:1d:39:87:b3:71:25:90:0b:db:
36:cb:7f:10:9a:1e:28:63:fc:9d:6b:c0:02:23:94:30:a5:f4:
5b:eb:57:63:9e:3b:1e:ac:cd:d7:72:2d:e0:bb:7e:ac:37:0a:
af:01:c8:47:ca:6c:ad:42:68:20:e0:68:47:56:b6:9b:58:22:
ee:88:dd:7e:f6:2f:fd:17:f0:61:9d:a6:66:10:cb:4c:4a:20:
fe:30:36:59:7c:d7:91:09:f5:8d:15:82:87:06:49:91:24:19:
e4:e9:7e:2d:67:c6:7e:cc:55:37:65:1f:f7:31:c4:92:51:c6:
8a:12:98:51:e4:de:34:33:a2:b3:9c:70:5e:a6:e6:9c:ee:9a:
8c:2e:be:ef:44:a0:71:0e:d8:b7:c5:7f:0c:a9:f5:31:9e:f9:
d7:53:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:15:59 2025 by rpki-client