Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ZO7e_PGmOJbyLefyo1_z7BwudxU.roa
File: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (raw, json)
Hash identifier: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=
Subject key identifier: 64:EE:DE:FC:F1:A6:38:96:F2:2D:E7:F2:A3:5F:F3:EC:1C:2E:77:15
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 019422FC0A89165AD7DEC0346CE9C83980F8
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ZO7e_PGmOJbyLefyo1_z7BwudxU.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196807
IP address blocks: 195.35.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0a:89:16:5a:d7:de:c0:34:6c:e9:c8:39:80:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64eedefcf1a63896f22de7f2a35ff3ec1c2e7715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:a9:d2:7e:ad:e9:c3:f6:1f:20:b8:26:f8:
8c:ba:22:13:fe:8f:f3:55:49:57:22:08:06:7a:b5:
a2:e1:dc:36:d5:2b:b8:99:f3:fe:19:4b:fa:05:50:
6d:03:79:6c:d1:ff:3e:77:ae:b7:cb:99:2e:b9:2b:
ee:02:c0:58:dc:99:4a:9d:fc:28:0d:aa:d4:66:f4:
ae:10:c4:84:91:cd:91:2f:ce:7a:97:e0:bf:9b:53:
a4:7a:52:0c:ed:31:6f:08:c5:0f:23:83:9f:44:0a:
d4:2c:26:6d:12:04:f6:d7:4b:e3:e8:d8:7a:31:c9:
71:4c:0a:32:d8:ef:06:ae:db:32:1a:66:bc:27:cd:
10:bb:2f:2f:ba:3f:fe:3b:6d:59:82:c6:da:17:83:
91:2c:32:57:ba:1a:e4:08:5f:bc:30:21:4d:eb:f9:
2b:f4:5c:b7:76:f3:86:77:28:e5:de:ef:19:ea:d3:
38:72:0e:c7:4e:6e:48:da:3f:02:a5:1f:13:0f:e3:
ff:70:9c:f6:05:3c:07:bf:7a:00:e2:b8:14:b7:54:
4e:10:18:3c:59:70:23:94:61:98:cf:60:b9:8c:46:
c2:5c:93:b6:41:3a:43:b3:26:fb:09:53:8f:c1:a6:
fe:22:34:c3:c1:ad:76:d7:76:72:8a:58:ef:f7:b4:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EE:DE:FC:F1:A6:38:96:F2:2D:E7:F2:A3:5F:F3:EC:1C:2E:77:15
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ZO7e_PGmOJbyLefyo1_z7BwudxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.84.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ef:f1:b9:13:8d:fd:7f:34:21:14:fd:23:c0:c0:66:71:71:
50:84:c5:84:0c:45:53:c3:1b:24:f1:0d:54:45:64:c6:d5:55:
ba:c6:be:c2:78:e5:89:77:a9:81:61:86:73:aa:9f:1b:5d:5f:
af:a5:c9:40:42:ea:53:aa:16:00:a5:d3:1f:fc:38:cf:82:99:
a1:41:15:5c:92:92:48:d6:76:5d:d2:a1:72:1d:96:23:17:07:
1a:6b:4e:aa:67:7a:ad:2e:7f:00:e7:e2:ac:fc:14:d6:54:ba:
fa:dd:78:e6:da:bb:c6:3d:5a:35:b3:7d:77:04:14:8f:f5:6a:
76:bf:44:58:c6:a7:ac:9d:70:0b:6b:6c:18:96:46:9e:45:1d:
10:9f:b1:dc:26:e0:be:bc:02:10:d3:45:e0:fc:7b:62:22:64:
39:49:43:9a:1d:94:dd:4c:5f:e8:88:af:13:6c:81:79:e5:e7:
ec:bd:63:7d:50:6b:f9:71:70:7a:f1:e8:5d:14:58:65:4d:28:
34:9a:23:b3:9c:b6:34:15:75:51:40:d9:f1:8a:c7:d1:c2:ac:
fa:04:6b:eb:75:c8:e8:cc:d5:80:78:94:12:6c:74:08:2a:0d:
5d:18:f6:06:00:13:63:81:94:62:87:e8:de:ba:4a:df:b4:9e:
a3:26:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:16 2025 by rpki-client