Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ZVz0SKvkjOxlciVFBqTr0VUiknA.roa
File: ZVz0SKvkjOxlciVFBqTr0VUiknA.roa (raw, json)
Hash identifier: uFR00EkEnl9o+CnA+h+cBK23mrxF+agDbELB+ERqUFU=
Subject key identifier: 65:5C:F4:48:AB:E4:8C:EC:65:72:25:45:06:A4:EB:D1:55:22:92:70
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B40999E7546056C7569FF36B20D3C8
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ZVz0SKvkjOxlciVFBqTr0VUiknA.roa
Signing time: Thu 02 Jan 2025 01:49:26 +0000
ROA not before: Thu 02 Jan 2025 01:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398779
IP address blocks: 5.183.78.0/24 maxlen: 24
45.14.114.0/24 maxlen: 24
147.189.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:09:99:e7:54:60:56:c7:56:9f:f3:6b:20:d3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=655cf448abe48cec6572254506a4ebd155229270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:4c:d4:88:b9:31:55:81:bf:7e:db:cd:4a:
bf:56:c4:f4:42:0b:36:01:88:48:a7:7f:2f:11:a0:
b2:51:7f:f3:58:9e:47:8b:29:b1:a7:b0:a0:c2:ac:
24:94:83:04:8a:d6:fe:40:3f:f4:58:ac:ec:8a:12:
03:ef:4f:c3:3a:d5:ba:2d:c5:41:d7:3f:ea:94:fa:
43:83:3c:ae:89:c9:6a:b6:20:0e:c9:a0:3a:31:80:
8b:45:ee:e6:01:62:3f:b4:12:f9:dd:79:2a:41:a3:
04:66:bd:96:87:1f:c0:d6:bd:7e:31:4a:37:24:9c:
be:e2:c4:c6:3f:fa:b2:5c:94:80:eb:c0:a7:bc:e7:
2a:c6:74:87:4a:6e:7e:c1:63:af:83:10:eb:29:ee:
6c:70:f0:83:ae:18:66:57:64:8f:cc:df:7b:56:67:
e1:7c:ac:fb:5e:06:9b:1e:a4:68:37:79:ef:a5:6d:
0f:7b:97:7b:34:ae:3c:f7:0f:62:13:f2:d7:bc:87:
2e:dc:26:e3:0e:20:69:d2:95:87:35:e3:55:90:a4:
ea:50:78:23:e8:30:0e:92:b4:1e:07:a5:0f:a7:4a:
05:af:64:8f:36:32:f4:51:a9:f2:c0:12:bf:04:c2:
5a:33:2f:b0:6f:0d:93:d0:99:3b:4a:fb:d0:57:47:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5C:F4:48:AB:E4:8C:EC:65:72:25:45:06:A4:EB:D1:55:22:92:70
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ZVz0SKvkjOxlciVFBqTr0VUiknA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.78.0/24
45.14.114.0/24
147.189.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b2:d9:e5:f6:70:99:b3:bf:5c:de:13:09:10:0a:1c:e7:96:
f4:2b:28:b7:fd:03:2b:e6:b8:a5:98:0e:56:20:fc:33:88:5c:
87:a8:96:d7:53:80:5f:91:a1:19:a0:53:cb:b5:74:cb:15:c3:
82:39:b9:67:bc:dc:c3:eb:60:df:fd:20:40:80:30:94:9d:3a:
a1:ac:a5:9b:9c:80:a8:cb:61:f8:d8:e2:2b:f8:11:c3:96:86:
bb:4e:c3:9c:a5:a5:fe:6e:67:a8:f0:95:f6:99:81:11:b2:34:
b8:b2:86:d7:4c:4c:3b:dc:06:39:b5:f7:08:89:86:fe:11:2c:
4e:da:65:7e:7d:95:88:19:5b:e9:76:ea:5d:a6:d3:09:ee:ee:
25:34:c9:2d:1c:01:45:24:36:9b:a7:b0:91:6d:3d:49:e2:af:
a9:5d:b5:5c:30:36:b4:49:91:48:d4:1e:91:82:23:bc:ab:4a:
b5:43:c2:23:e0:51:66:d3:48:95:4d:67:f3:d7:1a:63:d4:a5:
05:b4:3a:e8:68:7a:82:0c:aa:7f:52:e4:af:0f:84:83:bd:66:
f3:09:7b:e4:ea:fa:81:7f:32:41:cc:97:13:4d:bc:5a:a8:d2:
c2:05:b4:cc:72:6c:9e:1a:48:26:d9:7e:b0:f6:ea:7b:d2:35:
35:f9:ee:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:32 2025 by rpki-client