Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/ZiwClQkTEKdzHnyePsBdGhbNvkc.roa
File: ZiwClQkTEKdzHnyePsBdGhbNvkc.roa (raw, json)
Hash identifier: vvsKrrWj7LRiD5Si3QqHfsrvmbqjxR5QlQWKvNWvipo=
Subject key identifier: 66:2C:02:95:09:13:10:A7:73:1E:7C:9E:3E:C0:5D:1A:16:CD:BE:47
Certificate issuer: /CN=d5f567eac67f6da0991cfd8c6e79efddd6d24f11
Certificate serial: 01C5909C
Authority key identifier: D5:F5:67:EA:C6:7F:6D:A0:99:1C:FD:8C:6E:79:EF:DD:D6:D2:4F:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fVn6sZ_baCZHP2Mbnnv3dbSTxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/ZiwClQkTEKdzHnyePsBdGhbNvkc.roa
Signing time: Sat 01 Jan 2022 04:04:03 +0000
ROA not before: Sat 01 Jan 2022 04:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 91.245.200.0/21 maxlen: 24
88.98.112.0/20 maxlen: 24
88.98.120.0/21 maxlen: 24
185.51.108.0/22 maxlen: 24
188.241.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29724828 (0x1c5909c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f567eac67f6da0991cfd8c6e79efddd6d24f11
Validity
Not Before: Jan 1 04:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=662c0295091310a7731e7c9e3ec05d1a16cdbe47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:d5:e0:88:33:91:98:56:ea:6e:ed:cd:20:
08:d1:32:b1:fe:1b:8b:af:c7:b4:88:97:0f:f4:9c:
ef:6f:32:20:b2:17:fb:08:ed:1e:29:67:7d:1e:7f:
76:48:de:ff:18:4d:c9:8c:1e:98:88:6c:97:3f:f6:
dc:94:c8:36:09:e9:6f:76:e1:74:1a:57:9d:66:1b:
af:d2:c2:cf:98:5d:52:0b:41:8e:d1:12:4c:50:63:
9c:9e:16:50:ca:7e:a3:3f:52:96:a9:43:d9:81:bd:
50:ba:45:98:86:63:45:e1:82:0b:a6:34:94:32:f5:
92:a4:17:27:4f:d3:2f:0e:a4:46:71:62:44:9d:95:
eb:57:a9:4c:f4:c8:0f:ff:25:3f:85:d7:a7:e3:1d:
da:61:64:32:78:a5:64:8c:f9:14:ee:4c:43:c3:00:
1f:b6:74:75:21:17:c0:b1:b6:13:6d:df:8d:c9:c0:
9b:13:dd:5f:f3:fa:d1:4e:72:3c:10:02:c3:67:8c:
91:98:3d:94:30:fb:43:1d:48:af:f9:64:f3:7b:c5:
f9:be:e5:4b:a8:28:96:77:73:86:71:de:05:0a:a3:
cf:b7:5c:c8:f0:9c:ee:2b:bb:66:4c:66:f0:1d:61:
b6:f1:d1:5a:28:9b:3e:ed:da:c3:3f:09:76:0f:85:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:02:95:09:13:10:A7:73:1E:7C:9E:3E:C0:5D:1A:16:CD:BE:47
X509v3 Authority Key Identifier:
keyid:D5:F5:67:EA:C6:7F:6D:A0:99:1C:FD:8C:6E:79:EF:DD:D6:D2:4F:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fVn6sZ_baCZHP2Mbnnv3dbSTxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/ZiwClQkTEKdzHnyePsBdGhbNvkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/1fVn6sZ_baCZHP2Mbnnv3dbSTxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.98.112.0/20
91.245.200.0/21
185.51.108.0/22
188.241.96.0/21
Signature Algorithm: sha256WithRSAEncryption
31:ec:39:23:3f:d0:9c:ca:90:a7:b6:b4:b6:1f:e4:88:6f:6d:
d9:6a:42:20:ec:eb:e9:b7:65:f8:9e:8b:b7:f7:52:d9:0e:f5:
08:85:df:7a:6d:cd:75:98:ef:93:85:72:93:db:d0:88:63:83:
9c:e4:28:36:3e:9d:2c:0d:b8:fb:81:af:04:f2:24:d3:fb:57:
8f:73:82:84:5c:e3:2a:ba:cf:12:c9:17:d9:19:be:89:a1:66:
6c:33:86:90:c3:65:2a:a7:55:5e:0b:0b:50:1b:eb:a5:b6:cf:
13:79:fc:20:e6:f2:92:f1:64:89:c7:11:2f:14:13:81:6d:aa:
83:5c:eb:2d:50:fb:09:2f:d5:cc:e1:cf:4c:68:d0:ec:e2:7d:
fa:0f:31:89:75:7b:3b:b1:28:2c:37:dc:d7:f6:f4:c4:e1:bd:
f6:07:c6:c0:fd:e8:0d:99:11:23:a8:10:2b:bf:87:10:1f:3e:
68:ff:30:5a:a2:a6:4d:28:4c:d9:04:5d:48:a2:db:e7:66:45:
7b:4b:be:06:10:70:7a:25:f5:25:67:60:08:1c:84:3c:0b:40:
79:85:56:9d:26:24:9a:24:88:58:df:e4:e2:cc:9a:61:8b:bb:
21:01:96:1d:19:fb:b2:ea:d9:1d:ce:ef:12:d5:32:49:6f:36:
e7:05:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:58:55 2025 by rpki-client