Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa
File: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (raw, json)
Hash identifier: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=
Subject key identifier: 67:12:9B:11:DC:CA:C5:AB:AE:EE:8F:98:ED:EA:22:A5:B3:F9:91:2D
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 0194266B259F3CA35BF12C04EEDF7E3A696B
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa
Signing time: Thu 02 Jan 2025 09:49:03 +0000
ROA not before: Thu 02 Jan 2025 09:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39090
IP address blocks: 45.11.204.0/22 maxlen: 22
84.39.64.0/19 maxlen: 19
185.116.17.0/24 maxlen: 24
185.116.19.0/24 maxlen: 24
2a02:d180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:25:9f:3c:a3:5b:f1:2c:04:ee:df:7e:3a:69:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Jan 2 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67129b11dccac5abaeee8f98edea22a5b3f9912d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:00:02:08:51:54:31:23:d9:5a:98:1b:3e:
51:8e:8c:64:dc:8e:6b:42:5e:0c:cf:c0:bb:cf:47:
32:37:e9:a3:4f:34:14:89:2f:94:61:7c:72:84:37:
b1:e5:82:b8:7f:e7:10:36:da:ca:c6:98:7d:74:7b:
f1:69:15:02:d6:ae:ff:1b:67:c4:3a:6d:75:cf:16:
bd:93:aa:3b:c0:32:ac:17:a8:81:11:7f:62:f0:7c:
9a:ab:8c:6c:ee:4e:5f:ed:52:8c:ea:c0:51:1e:30:
74:8c:c4:5d:7f:41:68:56:8f:59:a6:bd:5c:17:6f:
d5:43:d6:84:30:c9:0c:5e:69:23:3d:8f:4e:24:93:
c0:d5:7d:c4:07:75:26:42:db:81:bd:97:49:04:14:
19:3c:d3:59:7f:81:71:be:86:c7:5f:d8:ad:d9:67:
2f:4a:99:7d:83:a2:2b:13:b5:44:b8:fa:75:a5:d0:
47:68:0c:dd:27:67:13:96:4b:30:2d:25:69:f7:08:
e7:84:f9:32:69:0a:d1:f5:2a:ec:85:95:e4:3a:34:
57:9a:c8:1b:ba:ec:df:1d:93:ba:8b:9b:de:c7:aa:
af:fd:df:20:80:35:5b:bd:f5:cf:71:a8:41:0c:ca:
7e:49:82:70:38:3c:cd:59:c5:2d:08:e8:91:c5:d6:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:12:9B:11:DC:CA:C5:AB:AE:EE:8F:98:ED:EA:22:A5:B3:F9:91:2D
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.204.0/22
84.39.64.0/19
185.116.17.0/24
185.116.19.0/24
IPv6:
2a02:d180::/29
Signature Algorithm: sha256WithRSAEncryption
a7:a4:f4:61:84:f6:02:83:c5:f7:ff:ad:41:cf:32:81:b0:c6:
05:16:3e:11:79:65:de:8b:3e:26:1f:99:64:10:79:4e:23:5d:
fc:65:00:e6:77:63:64:fe:bb:7e:13:de:2c:9d:b9:ec:b8:29:
f8:a3:b3:60:c9:92:7e:36:3b:38:17:51:e8:c0:10:43:c8:3e:
37:11:e8:ab:59:5f:a2:1e:65:28:0d:96:f2:aa:b8:b2:2a:79:
10:4f:fb:db:52:45:d9:fa:a0:96:d8:2f:90:39:d6:d6:de:aa:
a5:d9:2c:ba:37:f0:62:0a:91:bb:11:88:54:fe:71:ee:26:82:
ac:49:c6:37:8e:ce:22:56:5f:1e:ca:30:8d:76:21:71:3d:41:
bf:45:f1:01:fe:9f:c0:86:87:8e:41:b6:81:3c:10:e3:5f:2a:
dc:8a:34:65:a4:c4:32:6a:7c:84:c6:79:99:3f:30:a3:d8:c2:
bf:50:09:f1:b0:3a:50:05:62:ca:70:a7:65:8a:8a:f9:ca:d0:
5c:ca:ff:07:6b:41:da:7f:13:0c:b8:72:a8:37:cc:1b:81:75:
68:97:e6:e1:2e:98:44:09:7e:65:3a:d6:c0:f3:de:ec:f3:49:
12:21:99:58:b5:af:e6:49:67:da:05:ae:1b:6c:fe:82:ea:77:
dc:b1:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:55 2025 by rpki-client