Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZXdixKwh4PWyMJxQHpUFzufSp9U.roa
File: ZXdixKwh4PWyMJxQHpUFzufSp9U.roa (raw, json)
Hash identifier: Ex2ZkZe6/o7Q1u9QRaT/rmN4SUSntX3pQ/agVImbcdM=
Subject key identifier: 65:77:62:C4:AC:21:E0:F5:B2:30:9C:50:1E:95:05:CE:E7:D2:A7:D5
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A63F515
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZXdixKwh4PWyMJxQHpUFzufSp9U.roa
Signing time: Sat 01 Jan 2022 04:51:45 +0000
ROA not before: Sat 01 Jan 2022 04:51:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6778
IP address blocks: 195.136.71.0/24 maxlen: 24
195.136.192.0/18 maxlen: 18
195.136.0.0/18 maxlen: 18
194.183.56.0/23 maxlen: 23
194.183.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979629333 (0x3a63f515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=657762c4ac21e0f5b2309c501e9505cee7d2a7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:2c:72:9e:20:24:a7:3a:0f:ed:26:f6:e5:
d0:db:7d:27:d1:88:c6:cd:ff:07:c3:20:c8:78:cc:
e4:ef:11:b4:08:f3:82:8f:ed:66:ed:38:71:19:02:
b5:83:0d:6a:8f:60:f6:50:e3:95:69:35:fc:d2:81:
79:79:8c:71:6d:49:8d:72:93:f4:e9:5d:f7:80:22:
16:a9:21:42:45:8c:28:d4:f0:47:37:aa:e7:a4:a4:
9f:ba:1d:4c:ce:e9:c2:6a:7d:ac:03:62:14:16:3c:
39:39:20:2f:2f:70:13:ab:1c:c2:dc:24:c9:a5:f6:
f1:2b:11:f9:3d:43:83:e2:cc:24:d2:7d:21:71:8a:
69:fc:43:ab:b7:a4:2e:e4:ff:15:96:7b:f3:65:ca:
9c:4b:53:6c:23:7c:f7:c1:17:29:d7:a7:37:76:e2:
b2:c2:2f:e0:d0:10:bf:6d:eb:72:0f:89:1c:9d:d3:
52:22:df:18:6a:be:a4:fc:f4:71:c0:63:df:4a:f3:
93:a0:c0:9b:25:e6:bd:7e:7d:0d:4b:4f:51:05:28:
08:b4:77:0b:74:14:ea:91:85:41:07:9a:e6:0a:01:
ad:46:3f:fa:1c:ac:7a:bc:c2:4e:74:ac:eb:69:a9:
02:3c:da:e8:fc:d7:fb:3a:da:f7:8c:5e:c8:6d:da:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:77:62:C4:AC:21:E0:F5:B2:30:9C:50:1E:95:05:CE:E7:D2:A7:D5
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZXdixKwh4PWyMJxQHpUFzufSp9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.56.0/23
194.183.62.0/24
195.136.0.0/18
195.136.71.0/24
195.136.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:ee:97:a5:71:ba:c9:0b:45:35:c4:4c:a7:27:b8:7d:c7:f8:
68:36:b9:56:de:4e:52:49:10:43:6a:c1:8a:57:1e:46:0c:97:
da:9b:b2:ca:25:e6:7b:00:83:f8:70:31:7e:49:00:10:35:22:
10:8b:af:fa:60:8a:e8:19:e5:6d:71:20:3a:b6:1f:a8:6f:61:
47:86:5b:2d:d2:bd:51:5c:05:ce:80:f2:20:65:17:d5:38:f7:
6f:c1:01:43:06:53:68:24:a5:f4:a4:ae:a5:d1:40:e4:77:ba:
17:99:a1:4e:b4:e7:c9:bd:d7:68:d5:81:9f:98:63:be:70:82:
bc:fa:e0:94:e7:ca:d9:f7:7f:7a:90:3a:d3:fe:e1:de:4e:f7:
21:86:90:fb:bd:7a:6f:ed:7f:66:ac:c7:33:b2:1c:b6:fc:2b:
00:82:c7:35:fe:de:c0:68:e3:84:6c:86:b4:3b:b5:f5:36:3a:
a4:dc:89:e6:a2:14:80:53:f0:53:5d:66:b6:05:9e:f9:b1:52:
12:0e:02:5d:c8:e3:6b:f9:fb:b0:57:fa:b8:03:98:96:6d:b3:
db:86:07:3f:fb:9c:83:6d:05:d3:85:8a:6b:33:b2:a8:79:33:
75:77:fc:77:92:9a:4a:3f:5b:82:33:ca:f3:6e:a2:f0:2b:27:
0e:85:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:26 2025 by rpki-client