Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/zVdyTzKpDbl0OAfYCejOiPP6RQs.roa
File: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (raw, json)
Hash identifier: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=
Subject key identifier: CD:57:72:4F:32:A9:0D:B9:74:38:07:D8:09:E8:CE:88:F3:FA:45:0B
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019427486E30D79DC129D8466CB385E51183
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/zVdyTzKpDbl0OAfYCejOiPP6RQs.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55933
IP address blocks: 93.187.128.0/22 maxlen: 24
185.239.84.0/22 maxlen: 24
185.239.84.0/23 maxlen: 23
185.239.86.0/23 maxlen: 23
185.242.232.0/22 maxlen: 24
185.245.40.0/22 maxlen: 24
2a0c:f480::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6e:30:d7:9d:c1:29:d8:46:6c:b3:85:e5:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd57724f32a90db9743807d809e8ce88f3fa450b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:05:f4:1d:ef:a4:b3:c1:9c:5a:ba:a4:15:
13:a5:c2:b8:48:ce:69:e6:5b:ce:86:30:07:66:85:
00:80:1c:86:3a:f7:b3:9b:04:15:cc:bb:16:b0:7e:
6d:1e:a3:77:fb:18:ac:27:de:fb:57:f8:6a:c7:89:
63:37:57:53:56:89:10:10:b4:20:c5:82:d0:f4:97:
5d:5b:c7:af:05:8f:e0:24:dc:dc:cc:01:53:67:94:
96:91:b7:e2:18:f3:c7:5a:57:da:49:81:6b:cc:7e:
62:c0:3f:c3:aa:1a:0d:37:ed:20:42:7c:3c:60:11:
31:1f:2b:67:3b:4e:4c:f5:84:8c:4a:59:4e:ec:de:
76:a4:c1:3c:2b:d4:1a:26:98:de:e7:a9:03:bc:78:
6b:e1:ae:dd:b7:4f:ed:50:d5:1a:fc:0b:39:79:5d:
bc:94:28:53:37:55:fb:68:e9:bf:ac:77:f9:ea:bf:
a0:25:2b:59:a7:fa:6d:9f:f3:24:ba:a1:7c:09:ad:
de:b0:38:95:6b:dc:94:22:8e:7b:63:8b:d0:a2:5b:
2d:a1:ac:c6:c4:84:5f:72:f3:32:8e:26:2e:ae:bc:
f0:ca:33:55:7f:e6:b6:7b:92:4c:b0:c5:89:85:60:
3b:e3:b5:22:ce:82:74:a8:fa:0c:47:0c:8c:78:f8:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:72:4F:32:A9:0D:B9:74:38:07:D8:09:E8:CE:88:F3:FA:45:0B
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/zVdyTzKpDbl0OAfYCejOiPP6RQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.128.0/22
185.239.84.0/22
185.242.232.0/22
185.245.40.0/22
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
3e:bc:db:6c:f4:b0:7d:8a:7d:8c:89:ae:e3:26:33:f1:d5:6d:
62:cc:82:83:74:1f:e0:34:b3:fe:21:da:a0:66:9f:c8:a1:a5:
4a:d4:65:1d:4b:a4:ad:1b:30:b0:40:df:ea:e8:b1:3b:15:42:
92:4c:ad:b5:16:10:b4:96:bc:76:ce:6f:c2:6b:5c:8d:5b:ec:
f2:39:07:ef:8b:b5:27:f3:f7:ca:f9:12:2f:d7:74:88:74:55:
2a:88:25:ed:cc:a2:fa:c0:6d:6b:d5:c9:55:5c:71:0e:df:93:
60:5b:51:ed:55:29:b0:19:f7:d9:50:1d:c5:39:f6:34:21:85:
ab:c7:25:d4:6b:0d:85:b0:b3:0b:e6:55:ad:96:f7:79:43:27:
93:56:fd:ea:ae:65:84:71:1a:b1:fe:86:bd:2f:59:1e:2f:c7:
82:ab:19:c0:ea:dd:eb:30:6f:d8:67:c9:d1:2f:46:8c:26:31:
82:b5:ba:2d:b3:da:60:81:c9:77:bf:9e:6f:0d:e8:e2:5e:fc:
2c:2a:8c:44:63:ef:fd:ab:72:29:cf:6d:dc:45:a4:fa:57:5c:
a5:a0:d5:01:45:be:17:67:d2:07:2f:29:2b:ce:71:5a:0e:69:
13:6c:88:ef:25:c2:8b:74:77:1c:60:de:46:4b:df:fb:aa:6b:
61:7c:37:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:54 2025 by rpki-client