Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/zpdEuTM58NJsj9uZrr1eSYewSFo.roa
File: zpdEuTM58NJsj9uZrr1eSYewSFo.roa (raw, json)
Hash identifier: fCDtqdRaVBghgRQFGB/OPNFtxDs3RDfKs7jSgnZSxxM=
Subject key identifier: CE:97:44:B9:33:39:F0:D2:6C:8F:DB:99:AE:BD:5E:49:87:B0:48:5A
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0193D34E97CC3804D4EF36DEF78205907445
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/zpdEuTM58NJsj9uZrr1eSYewSFo.roa
Signing time: Tue 17 Dec 2024 06:29:23 +0000
ROA not before: Tue 17 Dec 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 91.199.133.0/24 maxlen: 24
91.229.239.0/24 maxlen: 24
146.19.213.0/24 maxlen: 24
194.110.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:4e:97:cc:38:04:d4:ef:36:de:f7:82:05:90:74:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Dec 17 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce9744b93339f0d26c8fdb99aebd5e4987b0485a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:1e:14:3b:53:e8:62:52:a8:37:df:80:60:
53:24:41:1a:51:33:87:6e:7f:7a:0d:fc:ad:4f:66:
2a:db:7d:19:72:50:d9:19:d1:60:87:c4:a3:0d:3b:
32:10:7b:cd:dd:b6:16:84:d5:f1:88:92:bc:a6:15:
90:9a:cc:70:d7:4a:63:7f:ce:6f:25:c0:e9:53:3d:
38:ff:8b:cf:d8:63:0a:4e:71:05:61:a4:49:b5:e3:
a3:d6:b8:0e:4b:2f:1c:dc:a5:9e:0a:e2:7a:ec:14:
a9:7b:dd:6c:6f:22:d3:15:ef:e6:92:e4:78:07:c7:
8e:18:b9:17:02:21:4e:ef:fe:0e:62:81:a1:10:70:
0a:f8:aa:49:26:ab:55:fa:34:0b:88:15:48:a0:80:
b0:d9:34:3b:09:6a:d5:7d:b1:9b:39:f0:69:35:28:
c1:33:c0:db:6a:51:bb:dc:27:66:3c:d2:c0:1e:04:
41:c9:ab:8f:42:1b:1b:a1:76:87:19:7b:3e:2c:e8:
4f:67:1d:52:27:8c:49:74:2d:74:72:db:a7:38:43:
1d:76:62:19:b5:ac:7d:b5:4b:43:41:6a:c7:e7:90:
bd:87:80:95:49:89:1c:ca:5f:8d:9c:14:19:b7:96:
91:c9:e3:39:c7:0c:78:bb:55:d7:d8:a2:5b:9f:9f:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:97:44:B9:33:39:F0:D2:6C:8F:DB:99:AE:BD:5E:49:87:B0:48:5A
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/zpdEuTM58NJsj9uZrr1eSYewSFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.133.0/24
91.229.239.0/24
146.19.213.0/24
194.110.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d9:50:57:ea:aa:56:63:94:9b:5c:61:a8:99:3a:da:a8:f7:
ae:9e:e6:a6:11:5d:f3:c5:18:66:b0:02:6e:ec:53:1e:31:bd:
72:ca:dd:cd:49:b6:d1:dd:70:40:9b:cc:9d:49:d9:83:0e:53:
31:47:7e:4e:07:1d:26:0d:8b:70:25:e0:ad:a5:70:9e:52:52:
dd:bd:b9:09:ee:2b:f4:b1:6d:c1:0b:da:e0:1f:9d:f2:04:33:
39:7b:8c:14:88:1c:9f:aa:1a:3b:b8:2f:ab:fc:9a:ff:a4:6a:
09:0d:fb:28:f3:2c:73:f5:13:a0:3b:ae:fc:59:9f:19:27:d1:
84:f6:35:d8:4c:d1:42:5e:7f:6e:78:67:98:1b:52:d3:45:44:
5a:88:01:a4:6d:27:b1:a6:e0:54:70:a1:9f:7b:9f:16:c0:de:
e5:2d:43:e2:5a:bd:39:2e:02:1d:91:24:3d:a1:3b:8f:5e:cf:
47:2f:d5:b6:31:25:f6:c5:25:8c:73:97:0e:8e:bf:49:5b:bb:
cd:2e:02:d7:8b:7f:6c:30:2f:c8:52:ce:80:dd:92:c3:57:cf:
52:b9:64:dc:ce:98:61:4c:66:47:90:0d:9e:64:f2:96:08:67:
d6:81:b6:15:49:2e:4d:80:21:46:5b:89:77:89:2a:a4:2f:a0:
7a:20:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:06:36 2025 by rpki-client