Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/zwam10qTIbqdFHd30kfqv_ZzWgE.roa
File: zwam10qTIbqdFHd30kfqv_ZzWgE.roa (raw, json)
Hash identifier: FkxbmAbpcrj+MmOQBWMwaW9Kx0P0rYzKKqUDU8tkNdM=
Subject key identifier: CF:06:A6:D7:4A:93:21:BA:9D:14:77:77:D2:47:EA:BF:F6:73:5A:01
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 019428231A444F0332E2DD6A34C214D8D8E9
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/zwam10qTIbqdFHd30kfqv_ZzWgE.roa
Signing time: Thu 02 Jan 2025 17:49:36 +0000
ROA not before: Thu 02 Jan 2025 17:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41341
IP address blocks: 37.114.16.0/20 maxlen: 32
81.18.130.0/23 maxlen: 32
89.28.192.0/21 maxlen: 32
91.211.128.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:1a:44:4f:03:32:e2:dd:6a:34:c2:14:d8:d8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 17:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf06a6d74a9321ba9d147777d247eabff6735a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:12:43:ce:52:b6:e4:81:b1:48:ae:39:09:
c7:ee:59:ff:36:c9:c3:7f:e2:b8:83:ef:66:ad:2a:
ce:0a:b0:86:20:e8:96:b4:67:05:f1:16:59:9e:3a:
79:8c:8e:64:3b:43:06:f5:52:80:f3:81:07:a1:5a:
ab:ff:07:41:4b:eb:50:76:30:1a:79:54:58:5f:cd:
21:49:e6:59:59:67:2c:0a:73:b0:d5:6d:29:65:76:
b6:60:2c:f3:5c:ad:8c:ad:8e:d6:2d:0a:61:1c:2a:
62:18:95:0c:da:bb:c1:18:b7:bd:a2:37:3c:9c:58:
75:59:26:b2:13:e6:2d:48:eb:b7:94:c4:0c:04:f8:
42:55:44:21:1a:c7:42:d7:5e:06:7b:df:78:ca:9f:
98:0e:ad:de:2a:4a:d7:36:76:9c:a1:39:5c:0b:63:
5b:46:cf:73:b9:31:0e:6d:2e:4d:c6:87:2a:fe:66:
12:c6:62:c1:5e:94:b7:5e:d1:4f:47:cc:a5:87:07:
09:36:8f:fd:77:b2:10:f3:5d:f0:19:52:c0:7b:fe:
30:64:79:fe:4a:61:09:fa:8f:cd:db:53:65:92:28:
5d:59:cb:67:30:0b:4c:80:68:4d:8c:ab:e9:20:34:
03:e5:48:c0:d4:79:d4:ff:91:12:42:1b:32:81:6c:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:A6:D7:4A:93:21:BA:9D:14:77:77:D2:47:EA:BF:F6:73:5A:01
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/zwam10qTIbqdFHd30kfqv_ZzWgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.16.0/20
81.18.130.0/23
89.28.192.0/21
91.211.128.0/22
Signature Algorithm: sha256WithRSAEncryption
57:98:7b:3a:9e:a9:31:5b:8c:ac:67:3a:0c:ae:9e:40:f3:1f:
c1:57:ac:d2:e4:3d:ef:8f:e8:a0:ad:f7:43:d0:72:1d:fa:71:
7c:e7:d1:65:e4:f7:5e:2d:41:a9:99:ef:bf:b2:d3:a9:13:6c:
18:00:b0:27:4d:c2:39:0f:c7:19:5c:6c:de:5a:1b:32:42:63:
13:a7:25:1b:79:6a:e3:65:40:c7:36:e0:e9:da:02:d1:79:f5:
56:f7:83:25:7f:ad:eb:89:9b:6d:9a:e2:4e:84:e7:e8:f9:96:
d1:ca:01:45:46:4d:64:86:6c:f0:66:3d:0e:c7:df:d1:96:cc:
3e:9d:4f:20:52:eb:76:eb:28:06:19:aa:27:4c:49:38:7d:dd:
09:8e:02:17:2f:0c:f6:da:24:20:b1:3c:f9:34:02:75:16:38:
4f:73:7c:c7:93:d5:32:97:14:a9:bc:e1:72:40:49:3c:67:f3:
47:3b:c8:f8:d7:ad:4e:53:39:86:dd:96:71:45:de:c6:fc:10:
48:48:41:c5:55:56:74:3f:ec:22:1f:6b:3c:90:79:aa:7a:97:
24:4e:b4:f8:cb:79:92:96:b7:af:c1:a3:f3:ee:4e:3c:dc:67:
03:ff:05:4a:af:97:46:93:a3:06:37:72:58:79:cd:01:70:1e:
1a:7f:1c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:48:44 2025 by rpki-client