Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/Zn8E7hMBYuQ_pm1vkyLCdfh9J1g.roa
File: Zn8E7hMBYuQ_pm1vkyLCdfh9J1g.roa (raw, json)
Hash identifier: u+FBvm7r9n58QUTtDEdHz+C6Xzp3MC8fbutb+Ath54I=
Subject key identifier: 66:7F:04:EE:13:01:62:E4:3F:A6:6D:6F:93:22:C2:75:F8:7D:27:58
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0181D859BCE299DCEA6C45084F41313F69FF
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/Zn8E7hMBYuQ_pm1vkyLCdfh9J1g.roa
Signing time: Thu 07 Jul 2022 11:09:28 +0000
ROA not before: Thu 07 Jul 2022 11:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 88.218.80.0/24 maxlen: 24
95.214.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:59:bc:e2:99:dc:ea:6c:45:08:4f:41:31:3f:69:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 7 11:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=667f04ee130162e43fa66d6f9322c275f87d2758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:0d:a9:2b:f1:dd:f1:42:81:bc:0d:20:33:
bb:2b:0c:e4:9d:7a:05:df:39:4a:39:6e:67:bc:f3:
59:09:1f:6e:48:54:45:f3:34:0c:88:6f:ad:bf:14:
78:77:1b:b2:d8:fa:03:8f:9a:97:f0:51:93:b4:04:
c8:50:e2:e8:25:6a:46:83:e0:c1:56:9d:80:57:bf:
f4:f9:86:fc:18:07:2e:e3:e9:39:94:6a:81:92:20:
34:12:cc:d3:fd:19:07:7a:4c:6a:84:a3:9b:b3:ba:
bf:e6:99:b3:48:56:b8:0c:fa:4f:c8:84:96:15:d1:
a2:d2:a7:fa:02:0b:85:ae:44:2e:98:b7:e9:b2:ac:
99:a3:0a:79:25:5c:39:38:fd:e0:4c:65:f3:b0:a8:
bc:01:43:37:70:cd:8a:a6:ea:2a:f4:88:22:53:1e:
92:1d:a0:51:b6:b4:84:ba:35:16:15:9e:07:51:03:
61:e6:b4:92:c5:4d:2c:ec:cd:75:de:a2:a9:cc:3b:
13:55:8f:ef:4a:1e:24:f2:b1:f3:a3:7b:d8:17:fd:
90:e5:6b:49:ea:bb:5d:56:23:54:fe:60:55:4f:c2:
21:5f:3f:35:7d:35:61:a0:3f:c1:02:0f:bb:ea:0b:
cb:c0:1e:0c:a7:5a:bf:40:d2:6d:e8:24:32:c2:23:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7F:04:EE:13:01:62:E4:3F:A6:6D:6F:93:22:C2:75:F8:7D:27:58
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/Zn8E7hMBYuQ_pm1vkyLCdfh9J1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.80.0/24
95.214.83.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:6a:40:39:84:f0:c5:5f:40:db:7d:ec:dc:fa:9d:f4:4a:f7:
7f:5e:48:e1:e7:0a:86:02:53:3d:d7:58:31:9f:8e:57:d9:bd:
64:b7:f6:35:3f:c2:d4:80:59:71:30:86:af:e6:25:a5:5c:cf:
bb:2d:d6:13:93:19:ec:84:56:43:53:f1:6d:8a:a2:45:05:17:
2b:0d:8a:32:62:81:3c:ed:91:50:bd:c3:da:d5:39:37:12:fb:
91:de:49:d8:f1:19:2f:28:36:4c:ea:bb:fe:60:42:75:37:ef:
76:12:2c:d1:b4:62:61:0e:6c:48:bf:21:e5:6e:5b:1f:e9:ca:
d2:0a:57:a6:df:03:c3:ec:cd:d6:9b:93:2b:ca:99:82:f2:e3:
a4:41:fc:ff:a9:be:fa:21:59:b5:3e:7f:51:22:ec:67:44:01:
70:e6:76:89:0a:c9:b5:c7:7e:a1:8e:fc:1b:a7:28:2f:31:25:
4d:04:ae:62:c9:df:34:8b:20:c8:07:68:4c:98:b6:b8:2b:1f:
47:82:6a:13:cb:8e:90:42:3b:dd:cb:47:ef:79:ec:37:68:92:
99:1f:11:02:e8:ee:b7:80:c8:ff:49:46:7c:b8:de:dd:9e:1c:
d0:0d:21:ea:9e:80:86:83:95:ff:4a:17:13:f1:f5:5e:0b:da:
bc:45:b4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:12:16 2025 by rpki-client