Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zvc8-MJXuBhpSxapWux3IocRJCk.roa
File: zvc8-MJXuBhpSxapWux3IocRJCk.roa (raw, json)
Hash identifier: 1s0Q/VtMB6ua2j9FziNz4WPuz4UfCrY5fKqmgKs+IPo=
Subject key identifier: CE:F7:3C:F8:C2:57:B8:18:69:4B:16:A9:5A:EC:77:22:87:11:24:29
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018E3D412D0AE0EE4B7D5D156A419B5022CF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zvc8-MJXuBhpSxapWux3IocRJCk.roa
Signing time: Thu 14 Mar 2024 13:57:45 +0000
ROA not before: Thu 14 Mar 2024 13:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39679
IP address blocks: 79.172.214.0/24 maxlen: 24
79.172.218.0/24 maxlen: 24
79.172.220.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.22.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.71.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.110.0/24 maxlen: 24
95.138.194.0/23 maxlen: 23
213.181.201.0/24 maxlen: 24
217.144.57.0/24 maxlen: 24
217.144.58.0/24 maxlen: 24
217.144.59.0/24 maxlen: 24
217.144.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:41:2d:0a:e0:ee:4b:7d:5d:15:6a:41:9b:50:22:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 14 13:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cef73cf8c257b818694b16a95aec772287112429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:ae:c8:0f:7e:d6:d0:f1:ff:63:e0:f3:9f:
39:64:10:3d:09:0f:b0:d0:73:1d:7e:04:b1:3b:67:
d1:6d:5a:28:24:18:c5:08:6c:10:57:8a:a1:cb:bc:
82:83:0c:00:ba:a7:10:bc:f3:bf:7e:ed:f2:6d:1e:
78:07:36:14:53:ce:62:9a:e6:90:e6:e0:96:d1:e5:
8c:5b:cc:9a:77:93:29:44:15:01:73:35:c6:66:44:
c9:6e:ca:d4:25:50:8c:86:7d:63:e8:ca:a6:f6:ec:
09:f4:ea:93:25:c8:3e:be:b7:64:24:ee:d6:cf:fd:
eb:4c:c3:ab:f7:a6:cb:f5:f4:c9:7f:1e:00:67:c4:
6c:f7:1f:76:a9:20:03:d3:0f:1c:fb:68:8c:0c:7f:
86:85:17:29:c8:91:b6:6f:ec:06:fa:bf:b6:4b:5e:
0d:15:5b:8b:03:f0:47:36:dd:2c:0c:7a:cb:9c:b7:
9f:3a:6c:82:c0:8f:e3:ae:62:1d:ec:7f:82:c4:67:
56:c8:28:78:74:e8:d8:be:ea:51:25:96:94:c7:ee:
e7:9c:c0:26:1f:b8:f9:2d:4f:fe:64:08:5e:c3:82:
2d:b3:0f:63:1c:31:d5:39:af:00:e5:2f:ac:8e:7c:
e8:30:f1:88:81:0e:45:cc:3a:61:b9:d4:a8:d1:f0:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F7:3C:F8:C2:57:B8:18:69:4B:16:A9:5A:EC:77:22:87:11:24:29
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/zvc8-MJXuBhpSxapWux3IocRJCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
79.172.218.0/24
79.172.220.0/24
79.172.228.0/24
87.229.22.0/24
87.229.48.0/24
87.229.50.0/24
87.229.71.0/24
87.229.79.0/24
87.229.81.0/24
87.229.110.0/24
95.138.194.0/23
213.181.201.0/24
217.144.57.0-217.144.59.255
217.144.62.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2d:c4:ab:46:36:2f:cb:46:2e:30:64:97:8e:d0:a0:79:20:
43:8c:e9:fe:93:63:dc:3c:54:8c:01:79:4f:b5:74:37:59:ba:
6f:f9:e2:65:29:9a:5c:33:27:ee:87:8e:01:e4:10:25:63:92:
61:d9:94:2e:f7:95:b7:6e:86:18:c4:a9:b3:7a:84:93:33:2e:
e2:93:91:78:ac:44:aa:77:90:d5:14:ae:bf:d8:cb:30:b9:7b:
42:5f:59:d4:64:a8:b9:33:63:3b:2a:39:50:67:15:5b:c7:d4:
4a:9c:51:42:cd:68:d8:5d:0e:68:e2:4d:60:31:61:aa:87:34:
b0:59:87:4d:60:87:ec:4c:6e:26:e4:b8:de:7c:77:3e:e2:b4:
7f:6e:ee:21:f0:4f:67:cc:0e:07:e7:c4:f2:7c:20:1b:0d:3b:
ac:7c:d4:af:cd:78:ed:4b:87:ec:03:8c:64:8b:40:be:c9:4f:
89:64:98:ee:e1:7c:1d:fd:10:ab:2f:c8:83:a4:76:22:be:ec:
06:5b:3d:cc:00:cd:32:3b:50:dd:ab:69:2e:38:35:c3:10:a8:
c1:e2:09:7e:29:3a:ce:a9:01:41:ab:09:97:1d:95:59:72:3c:
44:03:15:74:10:89:9a:e4:a7:c9:4d:88:c5:7a:d2:08:7c:62:
c6:d6:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:08 2025 by rpki-client