Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/ZM-gSRhoMrGYnOYCigGO3KlUdxE.roa
File: ZM-gSRhoMrGYnOYCigGO3KlUdxE.roa (raw, json)
Hash identifier: HD/5KvR+lV05wvXD394776vmYH6dBYVti0mPyMnQTNs=
Subject key identifier: 64:CF:A0:49:18:68:32:B1:98:9C:E6:02:8A:01:8E:DC:A9:54:77:11
Certificate issuer: /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Certificate serial: 01942144119977D7DE65E5A624684492BC71
Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/ZM-gSRhoMrGYnOYCigGO3KlUdxE.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212886
IP address blocks: 193.107.76.0/22 maxlen: 22
2a09:99c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:11:99:77:d7:de:65:e5:a6:24:68:44:92:bc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64cfa049186832b1989ce6028a018edca9547711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:43:20:a7:e5:d1:d7:c2:93:86:0e:72:45:
d3:40:df:49:74:76:ba:8c:57:ea:94:fc:9a:13:bd:
60:6a:bc:ed:63:0f:03:c2:5e:5b:1a:12:d7:48:60:
ab:63:86:15:81:3e:f4:be:ca:84:22:31:38:d6:87:
51:c4:ac:d2:24:6e:66:ab:51:99:bd:b9:2c:34:f9:
6c:a5:c4:1b:50:52:e5:85:3a:e7:d0:e0:ca:f0:b5:
1b:eb:56:af:f4:03:2f:56:df:fe:22:43:d7:64:96:
c8:cc:01:99:b1:9c:97:b7:ce:cf:48:1e:cd:25:0e:
7e:e3:89:bd:eb:18:b6:ba:6e:5f:02:f2:95:aa:82:
e0:b4:a1:52:0a:02:89:e5:f7:3f:4a:fd:e7:fc:6d:
04:7c:86:a0:1e:51:05:69:43:fb:c5:37:14:d7:ff:
ae:fb:62:58:02:59:97:86:ff:ca:80:95:d5:dd:89:
7c:06:bd:0b:fc:ed:5a:45:fe:ea:ed:aa:a1:e1:74:
19:cd:47:3a:5a:35:81:86:a5:7f:ae:e9:87:81:cd:
2d:b0:2e:19:c7:25:68:40:ff:c9:cc:f1:a9:0b:18:
f5:e5:e3:17:27:90:1b:cb:e3:df:05:e9:f3:53:80:
31:e3:7f:6e:ac:85:21:ae:b5:53:43:6f:99:84:22:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:A0:49:18:68:32:B1:98:9C:E6:02:8A:01:8E:DC:A9:54:77:11
X509v3 Authority Key Identifier:
keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/ZM-gSRhoMrGYnOYCigGO3KlUdxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.76.0/22
IPv6:
2a09:99c0::/48
Signature Algorithm: sha256WithRSAEncryption
68:6d:64:4b:a9:8f:63:87:e1:60:67:b1:22:c6:ac:2a:93:88:
4b:d4:5a:5d:21:6c:80:ee:8e:f4:02:e8:c2:79:25:bd:9e:ea:
7c:59:48:b9:49:8f:2c:20:1e:7a:82:bc:3f:60:1d:52:fc:c3:
35:27:98:bf:98:23:dc:b2:e8:fc:25:92:d3:a8:b7:ad:04:7e:
d7:65:67:eb:80:6c:7c:66:31:29:93:d9:f5:3b:d3:85:43:cc:
f2:9e:14:42:45:10:c0:ed:15:a1:f9:6c:c7:e1:ff:41:21:2f:
ef:75:ef:01:fb:26:89:ce:50:49:bf:a4:ec:ed:d5:99:9e:7e:
ff:5b:33:22:0b:9b:d8:94:6e:b9:f8:07:3d:8f:8d:fe:e9:94:
c5:fd:b0:08:c4:3e:74:b1:c8:5b:cc:c5:13:5e:93:40:40:5b:
f0:66:07:19:a2:f2:1b:ad:5b:5b:ee:fb:c5:38:ab:ac:67:f0:
86:9f:76:d8:1c:60:5c:a0:28:f2:b3:0f:04:17:50:5c:d6:b4:
be:62:36:49:1c:78:03:bf:94:d5:3d:49:65:f1:71:39:21:44:
b7:57:4b:56:39:c0:43:78:61:3d:6b:16:14:03:e6:89:de:a5:
4d:35:de:32:a0:a7:a4:4e:3c:c6:d1:39:7f:8d:8a:84:67:8c:
32:74:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:00 2025 by rpki-client