Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ZYz5JQsQWrdRYToBKlXbcwcpgdY.roa
File: ZYz5JQsQWrdRYToBKlXbcwcpgdY.roa (raw, json)
Hash identifier: LqggtNLxnuVBLg7LqF5/GkCtggmA5yL4kcQoHUYpuH8=
Subject key identifier: 65:8C:F9:25:0B:10:5A:B7:51:61:3A:01:2A:55:DB:73:07:29:81:D6
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019424B29986E6F72C80DE88B1FD146C849E
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ZYz5JQsQWrdRYToBKlXbcwcpgdY.roa
Signing time: Thu 02 Jan 2025 01:47:51 +0000
ROA not before: Thu 02 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 213.18.224.0/20 maxlen: 24
217.177.0.0/21 maxlen: 24
217.181.64.0/22 maxlen: 24
217.181.72.0/22 maxlen: 24
217.181.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:99:86:e6:f7:2c:80:de:88:b1:fd:14:6c:84:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 2 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=658cf9250b105ab751613a012a55db73072981d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:f6:d7:a3:67:60:88:a4:e2:14:04:f0:ef:
e8:c4:b4:ec:01:4f:16:68:57:6c:22:ae:c8:c1:e9:
cd:e6:8a:91:ec:cd:e2:2a:4b:2f:07:f3:07:5b:bb:
92:3d:4d:a0:99:75:62:37:28:cd:bc:78:5c:b0:14:
50:57:65:d0:ef:24:e2:50:b4:a1:d5:3d:f8:6d:e8:
c6:27:c8:c3:5a:75:39:6c:cf:72:a1:03:34:c7:54:
b9:74:d6:ca:4f:ff:74:74:22:fd:3d:97:df:b2:c8:
b2:3e:03:94:ed:82:16:03:e7:fe:e5:99:c6:7d:37:
23:d9:c3:24:c2:38:45:8f:8c:bc:47:16:8e:a8:df:
34:d4:4f:35:fa:c0:27:f4:e6:51:75:b0:63:61:c1:
7d:31:ea:75:7d:14:73:c3:af:67:be:17:12:8e:92:
74:62:d9:85:54:28:53:c5:de:db:3d:3b:76:e7:d0:
cd:a1:7a:f5:ef:3f:f4:9a:b2:98:43:23:66:a6:a9:
78:4a:9c:5f:0f:f9:c6:d5:24:9a:be:43:70:d0:8c:
07:9c:40:8e:ac:bb:70:6d:5d:43:46:79:51:42:98:
1c:6f:2c:99:da:44:57:18:22:e9:d0:59:f6:ca:ba:
77:ee:c9:2c:66:38:13:e6:ec:c9:83:94:cb:e8:9a:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8C:F9:25:0B:10:5A:B7:51:61:3A:01:2A:55:DB:73:07:29:81:D6
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ZYz5JQsQWrdRYToBKlXbcwcpgdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.224.0/20
217.177.0.0/21
217.181.64.0/22
217.181.72.0/22
217.181.80.0/22
Signature Algorithm: sha256WithRSAEncryption
94:97:b0:bf:3d:c7:ca:2d:48:39:7f:2a:30:1d:6c:b0:3f:83:
67:87:36:4e:58:30:5b:37:24:fb:5a:ac:b8:e1:90:6e:ca:c1:
a4:ee:7d:e8:0e:a5:32:4a:11:13:ce:39:42:ec:29:d8:2d:6d:
90:da:84:49:f8:c6:b3:c2:40:09:d1:5b:02:67:e2:ea:ad:e4:
dc:ee:63:7c:2a:99:25:54:b1:ae:35:54:b8:15:ad:92:3d:60:
bc:0e:6a:26:cc:8e:70:f8:0b:10:e3:ee:aa:fb:32:c5:c6:b1:
c9:56:25:83:f1:8c:81:67:c0:58:a8:19:9a:f1:59:27:d5:24:
15:d0:2c:7a:b6:7d:bb:61:55:4a:a8:ff:04:eb:2e:8c:bd:15:
66:65:a5:0c:d7:ef:f1:af:79:77:39:e6:09:48:3a:5b:9f:4b:
47:08:be:6d:24:3c:93:9e:f6:53:36:6d:96:dd:19:98:71:d8:
ab:fd:e5:4e:f8:d5:12:8f:2c:3b:3b:26:f4:25:0c:bf:93:b4:
c0:91:61:a5:50:57:95:64:d3:ad:4d:bb:e0:fe:90:29:85:2a:
6c:26:da:99:4c:e8:61:52:b0:b9:67:ad:f6:fd:69:5b:d2:60:
2c:c2:17:14:1b:28:ac:16:c2:a1:ab:b3:06:ab:d0:b5:f5:11:
ac:90:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:22 2025 by rpki-client