Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/ZCXhwJidVvHDFHx-kEuhHnqmiDE.roa
File: ZCXhwJidVvHDFHx-kEuhHnqmiDE.roa (raw, json)
Hash identifier: 9IlZRAcvGoQMxvICrYGwZ9IwJxgdbsKkUE2Fk5R/3YA=
Subject key identifier: 64:25:E1:C0:98:9D:56:F1:C3:14:7C:7E:90:4B:A1:1E:7A:A6:88:31
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 018CC64B4A3E32813F7A5682CE09D34F325C
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/ZCXhwJidVvHDFHx-kEuhHnqmiDE.roa
Signing time: Mon 01 Jan 2024 18:31:12 +0000
ROA not before: Mon 01 Jan 2024 18:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206920
IP address blocks: 185.56.100.0/22 maxlen: 24
145.255.56.0/21 maxlen: 24
94.126.0.0/21 maxlen: 24
82.134.128.0/18 maxlen: 18
2a03:fb80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4a:3e:32:81:3f:7a:56:82:ce:09:d3:4f:32:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Jan 1 18:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6425e1c0989d56f1c3147c7e904ba11e7aa68831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:1e:d8:5b:ea:c4:00:8f:72:f9:fe:46:1e:
e7:8f:8c:77:b3:5c:2b:c9:58:68:7e:18:da:7c:57:
d0:d3:3a:eb:18:32:df:40:20:84:fe:e2:1f:d4:72:
a8:9b:db:e8:09:0a:3b:bf:fa:d2:ea:3e:15:5f:b3:
af:97:17:db:d2:29:1b:4a:97:36:4b:9a:8f:bf:65:
72:d5:01:ca:61:24:18:7a:fd:22:ab:c6:96:55:de:
70:6f:e0:dc:37:aa:d9:24:31:94:3d:cb:1d:c6:46:
cb:99:5c:72:4b:ed:b9:72:34:c7:2a:fd:4f:48:81:
cb:1e:9b:a1:49:c7:b0:42:c1:e1:b6:49:f2:fd:af:
bb:27:f4:43:ad:72:0a:cc:04:3f:10:11:f7:62:01:
9e:ae:96:5d:41:28:16:9e:f8:38:c1:e8:de:35:b2:
bd:9b:c3:c5:81:b8:3a:73:62:be:be:e9:f0:60:75:
bb:41:79:c4:a4:17:df:c6:5f:ce:19:fa:a4:91:53:
3a:7c:02:cc:8c:0d:1e:cd:fe:4f:0d:71:f1:66:66:
6b:50:7b:12:36:0d:61:b2:2c:21:e5:7c:33:13:4d:
af:48:b0:f6:0d:92:c4:d4:1c:48:de:3e:8b:e5:04:
a0:fc:c5:97:ca:e2:41:4f:95:48:4a:95:fc:db:93:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:25:E1:C0:98:9D:56:F1:C3:14:7C:7E:90:4B:A1:1E:7A:A6:88:31
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/ZCXhwJidVvHDFHx-kEuhHnqmiDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.134.128.0/18
94.126.0.0/21
145.255.56.0/21
185.56.100.0/22
IPv6:
2a03:fb80::/32
Signature Algorithm: sha256WithRSAEncryption
62:41:bf:96:30:71:a5:cd:17:08:c3:0d:8a:fc:bf:0d:83:19:
d1:5a:4d:b0:8b:19:68:78:b8:3b:c7:aa:01:1a:57:70:a3:00:
4a:4c:79:3e:c2:60:b5:82:6e:20:c7:97:a6:dd:a3:5b:41:e7:
9d:ba:09:82:1a:08:5c:3e:d4:1a:e5:a8:7f:6f:2e:c9:13:fb:
e3:4d:ca:79:82:b7:93:40:1e:59:04:c9:0c:92:59:37:36:98:
6b:45:02:07:17:24:72:9a:db:e1:2a:af:9a:b4:86:3f:67:61:
f1:d5:54:bb:3a:73:4b:cb:fa:fa:93:ac:cd:cc:c0:3e:20:95:
f5:87:2c:51:b3:ee:1a:76:ba:bf:ab:83:9a:a1:64:f8:78:cd:
eb:b7:38:2a:62:d3:e1:51:66:4a:47:28:e3:0b:ac:d7:26:8d:
fa:27:36:54:ce:8c:70:d2:39:6c:a6:cc:b2:50:fb:db:32:b7:
8e:7c:34:9d:c0:54:6c:c3:e4:15:3a:26:bb:6e:28:c6:65:62:
05:89:36:0b:b6:60:21:c4:f4:f1:fe:ec:4f:ee:e6:99:34:81:
7d:31:87:f3:d2:b1:20:f3:2c:15:c3:67:1f:7b:1d:d6:ab:2e:
fe:12:d7:70:2d:db:91:19:96:da:0c:5f:15:f5:14:ea:b5:eb:
fe:8a:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:13:01 2025 by rpki-client