Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/Zl2vdlSYIi-LywmEnzz2nthCYpk.roa
File: Zl2vdlSYIi-LywmEnzz2nthCYpk.roa (raw, json)
Hash identifier: pcRk22XdK/ej1piSwd6ub6vf/JuqxDmNFuvPBhdevxA=
Subject key identifier: 66:5D:AF:76:54:98:22:2F:8B:CB:09:84:9F:3C:F6:9E:D8:42:62:99
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 0194C66F8BC016F4CE3EECB390BEF3654326
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/Zl2vdlSYIi-LywmEnzz2nthCYpk.roa
Signing time: Sun 02 Feb 2025 11:33:06 +0000
ROA not before: Sun 02 Feb 2025 11:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34093
IP address blocks: 46.231.72.0/21 maxlen: 21
88.81.64.0/19 maxlen: 19
91.187.32.0/19 maxlen: 19
92.61.80.0/20 maxlen: 20
185.82.236.0/22 maxlen: 22
193.42.128.0/22 maxlen: 22
217.197.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c6:6f:8b:c0:16:f4:ce:3e:ec:b3:90:be:f3:65:43:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Feb 2 11:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=665daf765498222f8bcb09849f3cf69ed8426299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:c6:c7:12:17:93:9b:22:ab:47:7c:5a:37:
db:3b:46:34:cf:52:0e:5d:1e:94:78:fd:0b:0c:7b:
29:2f:5c:eb:f9:2f:09:f2:b6:d5:af:c8:f8:e9:d2:
2a:89:53:02:41:d0:bf:8b:e9:dc:36:96:a0:c3:5c:
be:22:55:6b:29:a3:f3:86:66:1b:54:8a:c0:d1:85:
00:e2:06:ad:e8:29:bf:2c:b5:2a:81:fe:5e:6f:c7:
28:80:17:e5:73:9c:a3:da:7f:f4:51:50:8d:84:09:
73:e5:b0:6e:41:6c:6f:6e:7e:36:c0:31:bb:06:3d:
26:65:b4:8d:f4:b2:92:8c:8c:5f:4b:4d:24:b8:9c:
e2:53:89:b5:7e:16:0d:87:a5:36:15:78:94:65:c8:
03:a3:fa:86:b4:82:09:fb:bc:12:8a:3b:2a:60:07:
e1:39:7e:0f:55:af:df:52:8f:ee:27:b4:e2:81:f9:
69:35:ec:73:c2:30:83:14:ac:bc:36:2a:cd:5e:69:
66:d9:3d:7c:6e:51:fe:4c:e5:dc:0a:0a:3c:32:23:
01:9b:19:2d:7d:19:55:e3:f4:d9:89:b4:b0:61:a6:
11:7d:3a:e0:74:30:87:78:b9:86:cf:f5:2b:68:f9:
b4:09:57:c3:90:ea:ad:30:0b:4d:71:81:66:3e:c8:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:AF:76:54:98:22:2F:8B:CB:09:84:9F:3C:F6:9E:D8:42:62:99
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/Zl2vdlSYIi-LywmEnzz2nthCYpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.72.0/21
88.81.64.0/19
91.187.32.0/19
92.61.80.0/20
185.82.236.0/22
193.42.128.0/22
217.197.144.0/20
Signature Algorithm: sha256WithRSAEncryption
54:31:79:67:a8:28:e2:ab:12:d3:ea:19:dc:06:ba:aa:b8:eb:
16:96:1c:df:c9:07:13:12:6b:bf:cb:c5:f1:50:a8:c8:28:33:
5b:1b:5a:fe:77:c8:98:ff:6c:24:9b:4d:38:b7:8f:eb:67:f1:
7d:9d:6c:82:3f:48:1f:67:6d:8e:91:06:c1:20:76:cc:06:99:
02:b9:77:5d:c6:f6:7c:e7:31:21:e4:dc:b6:5c:ad:98:fd:40:
6d:dd:b4:ce:22:1e:44:03:0d:70:06:07:2b:30:32:7e:7f:1f:
53:87:70:0b:cf:5f:de:4f:be:e9:fa:73:8c:b5:fe:de:d5:d4:
df:34:0f:14:86:f2:63:38:3d:cb:dd:9e:dc:e2:0e:9e:e0:47:
f8:a1:00:39:ac:3b:9d:ee:b0:67:1b:2a:82:24:c9:1b:64:34:
c6:f9:dc:03:e7:b7:2c:14:84:4c:d8:9a:71:68:67:e8:ce:66:
c6:d5:93:8c:05:1c:16:75:ab:cd:dc:64:52:5c:2c:06:1b:c6:
75:3a:fc:e0:13:4c:b2:e7:d1:ed:ba:22:ef:bc:55:49:13:3d:
8a:5d:c6:16:72:8f:46:06:56:88:12:00:a8:cd:2a:9a:d8:dd:
14:2c:35:91:75:81:a4:0d:28:e6:42:58:99:5d:1d:7e:92:03:
7d:10:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:17 2025 by rpki-client