Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/zEt70xhNCNspyv0BGLFGKL4d_Fo.roa
File: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (raw, json)
Hash identifier: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=
Subject key identifier: CC:4B:7B:D3:18:4D:08:DB:29:CA:FD:01:18:B1:46:28:BE:1D:FC:5A
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 019421B225A5B8C515A7626232EA8145EB9D
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/zEt70xhNCNspyv0BGLFGKL4d_Fo.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 82.130.64.0/18 maxlen: 18
129.132.0.0/16 maxlen: 16
192.33.87.0/24 maxlen: 24
192.33.88.0/21 maxlen: 24
192.33.96.0/21 maxlen: 21
192.33.104.0/22 maxlen: 22
192.33.108.0/23 maxlen: 23
192.33.110.0/24 maxlen: 24
2001:67c:10ec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:25:a5:b8:c5:15:a7:62:62:32:ea:81:45:eb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc4b7bd3184d08db29cafd0118b14628be1dfc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:59:f0:e1:bb:a6:ad:b1:28:d3:10:05:4c:23:
a6:42:5a:f1:61:bc:59:a5:e1:68:40:fd:06:24:23:
c1:bf:e4:4e:f4:5e:87:f9:1e:8c:da:16:f3:61:17:
ad:1b:04:ba:8a:62:2b:f3:f1:33:ff:f0:37:a9:58:
aa:06:bb:44:3b:c7:0f:ea:2c:82:a3:ae:02:ba:a9:
a9:2d:28:5c:95:33:51:80:c4:7e:13:9a:aa:ab:73:
20:ed:ea:2c:e2:0e:2c:d6:ee:8c:ce:e8:6c:d3:4d:
44:13:1a:6c:33:b0:9f:e4:e9:bb:dd:4c:9f:0f:01:
30:67:eb:f6:74:b6:0d:83:b3:55:88:50:9f:ca:fb:
af:1a:5e:71:e5:01:77:46:72:60:66:92:67:f4:4b:
79:74:61:20:dd:35:79:7d:de:6a:48:96:c2:7c:60:
87:7a:24:9d:9f:c8:b7:9e:28:55:e3:9c:35:dd:8d:
25:6a:83:5e:8d:24:e5:98:6c:9c:a3:94:71:67:74:
d9:ac:6e:d9:78:82:e0:b5:e6:72:7e:47:1e:bd:c8:
58:1a:d2:e7:54:7a:bf:c4:6a:26:f7:e3:1a:02:2b:
28:b0:bb:b7:82:4b:9a:bd:e8:93:c0:70:ee:ed:97:
36:f3:e3:fb:f5:37:00:f0:48:0c:af:52:fc:11:20:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4B:7B:D3:18:4D:08:DB:29:CA:FD:01:18:B1:46:28:BE:1D:FC:5A
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/zEt70xhNCNspyv0BGLFGKL4d_Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.130.64.0/18
129.132.0.0/16
192.33.87.0-192.33.110.255
IPv6:
2001:67c:10ec::/48
Signature Algorithm: sha256WithRSAEncryption
91:13:14:02:38:fb:e4:21:aa:c7:c3:1b:87:31:d5:7a:47:e2:
16:e4:81:2c:00:18:d6:37:fb:89:aa:e8:42:cd:3a:8f:f9:fc:
32:55:6c:db:9c:61:68:3f:e2:0e:24:11:7f:b0:bd:ff:98:9d:
b6:07:66:56:c7:0f:51:81:5d:1c:02:40:02:d4:7b:8c:87:8a:
83:c9:5b:65:c5:57:b0:f0:26:ac:fd:ba:bf:c0:ef:a1:be:53:
8b:7e:75:06:27:5f:bb:16:b8:f1:ba:55:db:4a:2f:75:1a:b7:
7c:40:4f:2e:af:52:76:38:d2:0a:c3:9f:83:46:cd:c1:0d:1c:
c3:f0:ab:9e:26:f2:2e:20:66:c3:2d:72:69:c1:b2:bb:a0:0c:
b4:95:d4:8f:6d:fb:05:3e:38:e3:9b:2a:ca:da:bf:5d:35:93:
40:7a:3f:5e:bf:76:04:60:e1:4c:c9:29:a2:ea:74:c4:1c:13:
41:69:fa:ec:08:84:de:f8:df:6d:02:c2:c1:d0:08:f6:2b:e1:
d4:4b:bf:75:63:ee:ca:ff:b9:49:8f:20:4d:9b:06:be:ae:d3:
6b:f5:f7:31:9e:b7:29:bb:07:16:45:94:66:8b:05:6a:33:e2:
57:41:06:de:05:8b:ec:19:ab:96:78:d5:6b:17:17:e5:b7:e7:
9d:1c:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:56:08 2025 by rpki-client