Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/ZbJau1dImBrIJYNQZcLf71ucWvc.roa
File: ZbJau1dImBrIJYNQZcLf71ucWvc.roa (raw, json)
Hash identifier: zqRglQJ5fZFxyeRGrI5ByyDfbWEdWgt3xU3RIUNn89I=
Subject key identifier: 65:B2:5A:BB:57:48:98:1A:C8:25:83:50:65:C2:DF:EF:5B:9C:5A:F7
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018CC3489C8629E63427B79C66CE54D5B9C2
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/ZbJau1dImBrIJYNQZcLf71ucWvc.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 185.238.251.0/24 maxlen: 24
185.238.249.0/24 maxlen: 24
31.220.14.0/24 maxlen: 24
193.9.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9c:86:29:e6:34:27:b7:9c:66:ce:54:d5:b9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65b25abb5748981ac825835065c2dfef5b9c5af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:20:cf:31:f4:46:ba:95:2c:6d:8d:3a:8a:26:
1f:f3:24:12:04:bc:d6:9b:76:9f:d8:dc:45:da:e5:
90:8b:be:0f:0f:79:27:0b:34:69:f6:f0:43:ce:bf:
6d:09:39:51:58:75:0f:26:ed:d5:1c:07:ae:e0:06:
b6:2f:30:0e:1a:ce:ac:aa:3a:b7:a3:de:0a:d3:11:
10:6e:84:cb:35:91:0b:5f:5a:22:23:a1:81:a7:5b:
16:06:06:1a:84:54:0c:bc:45:08:87:8e:3b:e8:db:
aa:fc:06:3f:5b:c2:7a:64:b7:99:2a:5a:7a:0e:90:
f2:6b:38:f3:3d:46:d1:3a:a9:1e:e1:c0:09:94:27:
22:9a:e1:bd:51:3b:a7:7b:6a:9c:64:c6:04:c5:e5:
ae:9e:62:8a:c2:64:e7:94:9e:16:89:4a:3e:b8:16:
00:41:75:2b:98:04:c7:21:2f:76:83:13:d5:a3:42:
68:8f:38:68:57:4f:80:68:e5:24:f7:d0:ee:1e:af:
72:23:5d:08:ff:4a:8b:a5:40:af:9b:94:0c:34:50:
a6:34:0f:c8:ab:21:b1:b4:b8:00:d7:8a:b0:9a:45:
18:bb:1c:b5:35:5a:1b:f4:b2:59:92:f4:e6:68:45:
5f:eb:3d:f8:92:0a:81:ad:53:a9:75:5b:34:f5:5d:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B2:5A:BB:57:48:98:1A:C8:25:83:50:65:C2:DF:EF:5B:9C:5A:F7
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/ZbJau1dImBrIJYNQZcLf71ucWvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.14.0/24
185.238.249.0/24
185.238.251.0/24
193.9.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e5:af:6b:03:8b:60:e9:53:f8:91:bf:cc:29:d9:24:ed:56:
e8:f3:76:7e:48:55:9e:1a:ea:30:b8:07:00:60:5d:81:d0:21:
2b:5a:03:b2:ba:27:a6:1c:fc:f0:c9:4b:5f:68:35:94:f3:76:
66:d7:96:b4:16:ec:a3:bc:b3:88:e7:b9:00:fb:fd:f4:3b:a0:
e6:1e:2f:e2:21:5f:7d:92:53:59:d5:a5:c3:a9:92:33:e3:64:
8d:30:38:4e:54:af:11:42:e8:99:95:e4:ba:08:1c:16:c5:8b:
8b:f7:2c:d8:2a:06:64:17:40:aa:a6:af:f1:8f:e5:9d:27:b7:
3e:4b:0d:fd:24:91:ad:e7:d2:6e:54:a8:c1:7d:77:05:47:b3:
d6:48:f1:c9:1f:dd:4e:f4:10:d3:2d:0e:9a:15:8d:7d:a6:f5:
41:81:08:3e:d2:ca:1d:0c:aa:d8:d1:be:e7:8d:4e:c4:59:3e:
6e:fb:39:b8:0e:c7:c7:1f:65:ea:1f:dd:7e:44:57:4f:7c:9b:
c7:80:d6:a9:a6:bc:76:f8:bb:7d:ca:19:a2:0b:a3:5b:c9:39:
cb:35:7a:94:7d:9a:b0:12:d7:82:fc:a8:cf:26:e0:98:e1:f2:
b3:ad:5a:a4:35:6b:0e:d9:07:01:ae:d5:d7:6f:10:41:a1:56:
0d:ed:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:20:31 2025 by rpki-client