Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ZaUsIJP2Dk02vmKoEAUhKSufirE.roa
File: ZaUsIJP2Dk02vmKoEAUhKSufirE.roa (raw, json)
Hash identifier: RiXHEZRgxGDUbueLdrINr4rAKyfex3Ryzf0IGzGrMmE=
Subject key identifier: 65:A5:2C:20:93:F6:0E:4D:36:BE:62:A8:10:05:21:29:2B:9F:8A:B1
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 10D6DECC
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ZaUsIJP2Dk02vmKoEAUhKSufirE.roa
Signing time: Sat 01 Jan 2022 15:04:57 +0000
ROA not before: Sat 01 Jan 2022 15:04:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50434
IP address blocks: 178.248.74.0/24 maxlen: 24
178.248.72.0/21 maxlen: 21
195.42.112.0/24 maxlen: 24
195.42.113.0/24 maxlen: 24
193.169.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282517196 (0x10d6decc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 15:04:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65a52c2093f60e4d36be62a8100521292b9f8ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:7a:fb:e4:3a:39:e2:e6:2d:80:64:2b:43:
58:4d:35:2e:ad:6e:16:3c:59:59:4b:d6:ec:2a:de:
2f:48:9f:ad:f0:e3:61:e8:81:40:9f:ac:9a:71:6b:
2c:b6:83:7e:cd:36:96:99:2a:bb:d1:24:36:83:f1:
20:45:73:13:f5:36:1f:4d:52:5b:1b:47:24:e7:d3:
21:c8:8b:af:9a:27:9c:bf:ed:d2:16:ba:a8:07:83:
97:f5:b3:8b:91:a6:98:99:c6:93:4e:e7:23:80:b0:
1b:4f:66:fb:03:74:fe:d2:d4:1e:ba:4e:91:93:8d:
f7:b7:62:3b:d0:0c:18:57:2d:72:a8:29:c4:91:5b:
1b:24:47:81:f7:6b:91:f1:34:77:37:63:27:f0:b4:
e9:36:ee:81:8a:ec:20:e3:ab:06:f4:1a:04:38:3a:
ab:74:aa:af:df:a1:ce:f6:37:59:8c:eb:18:68:29:
53:b4:4c:60:44:6f:77:47:8f:df:ea:c2:e8:a2:0e:
aa:38:c8:55:47:7d:f8:92:be:c1:d3:ec:ee:8b:03:
f4:e2:70:4e:fc:9e:55:c1:2e:fc:56:28:05:72:0e:
f9:2a:50:0a:68:85:de:1a:25:54:13:6e:50:17:dc:
aa:f9:f6:b7:b2:f1:24:da:c0:ae:93:a6:07:4b:41:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:2C:20:93:F6:0E:4D:36:BE:62:A8:10:05:21:29:2B:9F:8A:B1
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/ZaUsIJP2Dk02vmKoEAUhKSufirE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.72.0/21
193.169.78.0/23
195.42.112.0/23
Signature Algorithm: sha256WithRSAEncryption
79:75:36:a3:31:cd:66:4e:bc:45:f2:d2:27:af:ab:f5:dc:78:
d3:9b:08:63:f3:6e:60:77:01:ed:cf:de:a6:b0:ba:48:a9:fb:
76:b8:db:e6:0b:ac:9b:79:1d:1f:26:0b:c1:56:29:58:ed:fe:
63:bb:04:4b:21:fe:0c:4a:3d:be:12:c3:ed:73:1b:67:f8:73:
c7:01:a5:bb:c1:f7:bd:72:92:c7:df:aa:b1:eb:ae:c0:28:c0:
6f:e2:ce:8d:2a:7a:09:76:f2:f6:5c:1e:d7:37:5a:af:a9:4a:
47:4a:f0:9f:da:20:19:6d:cf:93:d9:58:c2:c7:87:b5:ae:c3:
52:fa:16:6f:bc:87:0d:e4:60:38:3c:99:bb:3f:ba:0a:ef:c7:
37:e4:ab:bc:19:95:b4:07:59:3c:ee:e6:12:89:b9:11:a5:c0:
d2:68:3e:ad:ad:16:6f:b4:b9:6e:c6:bf:3f:c6:24:84:11:c8:
1b:08:21:38:78:5d:f5:dd:72:d0:69:10:1c:e7:0d:e0:a4:c1:
14:cd:68:b4:48:14:81:1f:4f:fa:9b:1d:61:fd:b5:2e:51:f5:
98:6f:00:5c:59:8b:15:86:e4:e5:d6:f9:f4:49:bf:2f:90:90:
29:49:d5:69:3a:23:82:2a:ac:79:b2:d8:3e:02:e0:9c:98:ad:
4b:ad:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:09 2025 by rpki-client