Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/zMxPbRYvgl17LWHJg6U2GAicFt8.roa
File: zMxPbRYvgl17LWHJg6U2GAicFt8.roa (raw, json)
Hash identifier: sMyOqb6B8V6aN1rTXFXBnVwwrNvJedSQ2XdYFSUKdwI=
Subject key identifier: CC:CC:4F:6D:16:2F:82:5D:7B:2D:61:C9:83:A5:36:18:08:9C:16:DF
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01953B4FD5C20DCDB2E3FEEF9D5902383E6B
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/zMxPbRYvgl17LWHJg6U2GAicFt8.roa
Signing time: Tue 25 Feb 2025 04:14:02 +0000
ROA not before: Tue 25 Feb 2025 04:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 46.229.243.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
76.164.200.0/24 maxlen: 24
76.164.201.0/24 maxlen: 24
76.164.202.0/24 maxlen: 24
76.164.203.0/24 maxlen: 24
77.74.123.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
85.204.107.0/24 maxlen: 24
92.42.100.0/24 maxlen: 24
103.112.171.0/24 maxlen: 24
103.121.48.0/24 maxlen: 24
103.121.49.0/24 maxlen: 24
103.126.50.0/24 maxlen: 24
103.126.51.0/24 maxlen: 24
103.244.144.0/24 maxlen: 24
103.244.145.0/24 maxlen: 24
103.246.248.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
203.14.32.0/24 maxlen: 24
203.25.108.0/24 maxlen: 24
2a12:3200::/36 maxlen: 36
2a12:3200:1000::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
2a12:3200:3000::/36 maxlen: 36
2a12:3200:4000::/36 maxlen: 36
2a12:3200:5000::/36 maxlen: 36
2a12:3200:6000::/36 maxlen: 36
2a12:3200:7000::/36 maxlen: 36
2a12:3200:8000::/36 maxlen: 36
2a12:3200:9000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3b:4f:d5:c2:0d:cd:b2:e3:fe:ef:9d:59:02:38:3e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Feb 25 04:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cccc4f6d162f825d7b2d61c983a53618089c16df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:e9:f3:0a:93:1d:e2:2a:0c:f7:5d:b4:3a:
59:d5:2b:d8:8b:04:76:33:df:4e:60:d3:f7:a3:a7:
7e:74:ed:81:76:87:94:f5:ae:b9:57:be:4b:94:b4:
1e:61:7e:5b:30:0d:0a:e9:eb:83:c8:e2:a8:e2:3f:
00:f5:3a:2c:e4:fa:8c:8e:a0:3e:1c:77:7d:d5:76:
1f:f3:70:7c:8a:e3:9f:12:e8:b7:32:f7:3f:2b:50:
29:0e:4d:b6:94:f9:da:21:cf:0a:e2:f1:2f:4b:24:
de:4d:9d:1d:9a:51:7d:16:8c:a0:0f:55:bc:e8:25:
ca:54:42:af:f1:b2:70:13:0f:07:44:15:0e:95:7b:
7c:ab:8f:61:bf:82:f3:35:94:a7:51:c7:1f:d5:21:
1c:0c:01:d0:19:f5:e1:18:34:a6:8f:80:b8:e3:d8:
b8:6e:6a:df:19:00:be:f4:03:e9:1c:5e:36:d0:2b:
d1:81:5b:e2:c4:96:20:73:ac:0f:c2:50:97:f6:ae:
de:a4:34:0a:2c:f9:0f:eb:e6:d6:15:9e:6e:d8:9c:
63:06:02:dc:79:f4:60:c2:8d:f1:45:49:bd:f2:e3:
d2:a9:88:6b:a4:b3:e3:85:e2:6c:eb:cb:13:3c:cd:
a3:1e:0d:f2:68:e8:bb:c3:54:68:7e:41:97:f3:43:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:4F:6D:16:2F:82:5D:7B:2D:61:C9:83:A5:36:18:08:9C:16:DF
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/zMxPbRYvgl17LWHJg6U2GAicFt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
46.229.253.0/24
76.164.200.0/22
77.74.123.0/24
83.229.61.0/24
85.204.107.0/24
92.42.100.0/24
103.112.171.0/24
103.121.48.0/23
103.126.50.0/23
103.244.144.0/23
103.246.248.0/24
185.104.63.0/24
195.74.93.0/24
203.14.32.0/24
203.25.108.0/24
IPv6:
2a12:3200::-2a12:3200:9000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:04:bb:8a:86:10:98:2d:67:47:ca:6d:06:65:95:5d:08:7d:
22:79:48:d9:9b:37:67:85:bc:b8:6d:f7:0a:25:d8:ee:2f:29:
ca:32:98:cc:ba:48:5f:9c:14:e3:18:95:fc:cf:7e:bc:b7:66:
a1:24:0d:28:0b:64:b8:6c:29:89:54:c1:cb:0c:15:2b:06:14:
e5:50:74:73:6c:26:9b:b4:fb:de:52:90:02:6e:69:e4:50:d6:
12:0f:aa:20:56:27:da:20:9e:b5:23:62:7d:a9:24:35:9b:93:
0d:13:eb:2e:bc:34:1d:68:6d:93:a6:40:73:8d:fe:97:7c:55:
d3:4a:95:aa:12:23:e9:d6:fe:d7:18:92:41:45:cc:f6:f9:53:
02:a7:49:9c:6b:75:91:31:a3:70:38:32:f7:6f:67:3b:18:fc:
30:45:ab:1c:6b:db:e4:d2:4d:c4:79:b0:16:71:5d:79:9a:b2:
87:32:5c:a8:e1:ff:58:53:63:c5:62:39:64:10:e6:e9:2d:4f:
bb:54:96:22:c4:00:b6:8f:b4:38:a2:7f:ae:05:ac:e8:0b:0b:
f1:51:3f:43:6f:62:38:68:ad:4a:48:fc:9e:fb:fd:33:9a:ca:
ef:76:ab:b6:43:3c:43:6b:91:b3:1c:dd:05:23:ea:13:50:ae:
e2:ce:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:50 2025 by rpki-client