Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/ZGAhlZjnasS5BKxbuKtTlb2IG8g.roa
File: ZGAhlZjnasS5BKxbuKtTlb2IG8g.roa (raw, json)
Hash identifier: /CWZhme5O1ZBpiwykCFeFAG1hv6S2QE4eqN/Qea+vmc=
Subject key identifier: 64:60:21:95:98:E7:6A:C4:B9:04:AC:5B:B8:AB:53:95:BD:88:1B:C8
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 0195B37ED9C70807DF10420A30F4A5CA39BE
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/ZGAhlZjnasS5BKxbuKtTlb2IG8g.roa
Signing time: Thu 20 Mar 2025 12:19:49 +0000
ROA not before: Thu 20 Mar 2025 12:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51713
IP address blocks: 77.95.113.0/24 maxlen: 24
185.181.252.0/24 maxlen: 24
192.250.224.0/24 maxlen: 24
192.250.234.0/24 maxlen: 24
192.250.239.0/24 maxlen: 24
195.250.23.0/24 maxlen: 24
198.38.80.0/24 maxlen: 24
198.38.82.0/24 maxlen: 24
198.38.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:7e:d9:c7:08:07:df:10:42:0a:30:f4:a5:ca:39:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Mar 20 12:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6460219598e76ac4b904ac5bb8ab5395bd881bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:cd:41:9f:82:ba:f6:16:e9:44:80:d0:ff:
e8:42:19:87:52:89:ff:b0:a0:bc:23:f5:21:92:1d:
31:92:e5:48:11:63:bf:6f:03:94:2c:e8:eb:e9:6a:
57:ce:e4:c3:7a:51:78:48:42:cf:56:8e:8e:1f:cc:
14:55:d6:cf:c6:c3:75:6f:2b:ca:1a:ff:e8:b0:28:
76:af:31:75:65:47:92:a8:b3:21:cf:ac:00:33:cc:
22:a5:3b:70:dd:b5:fb:14:ba:d2:2c:6e:e0:ec:e2:
2e:18:ea:a1:3e:b7:55:ef:2d:eb:7a:d2:67:77:8d:
4d:04:c2:40:15:47:ae:46:d6:37:f3:13:01:93:96:
d7:9d:3f:ba:5d:23:ff:78:3f:4f:dc:a5:1e:13:76:
a8:4d:27:39:41:cb:93:5c:92:5c:df:0e:1a:b8:9b:
5f:18:0f:3e:b1:b5:47:c0:fd:24:d1:14:bf:17:cd:
65:91:76:68:02:0b:30:3f:1a:d1:17:25:d0:00:37:
c5:58:11:0b:30:14:0b:60:43:d6:8a:a3:fd:28:d6:
5a:0a:b5:4c:f8:d3:bb:6f:79:e3:22:92:4c:e4:58:
06:ba:69:c7:58:e3:8d:48:58:cb:7b:38:37:94:fb:
b3:ef:85:40:e5:11:c7:2d:cd:91:0d:e2:41:b0:00:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:21:95:98:E7:6A:C4:B9:04:AC:5B:B8:AB:53:95:BD:88:1B:C8
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/ZGAhlZjnasS5BKxbuKtTlb2IG8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.113.0/24
185.181.252.0/24
192.250.224.0/24
192.250.234.0/24
192.250.239.0/24
195.250.23.0/24
198.38.80.0/24
198.38.82.0/24
198.38.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bf:4f:1c:44:74:c8:92:5d:9a:62:db:d9:6f:9e:29:5b:ec:
0f:fd:16:e4:f3:08:89:ea:f1:2e:6e:1b:2c:c3:2e:a7:99:27:
a6:b6:76:af:e0:3b:37:38:e4:45:da:60:39:0a:94:63:74:49:
c6:15:ba:ae:7f:b6:43:5c:f0:76:e1:20:7f:33:a3:c6:1e:3b:
6d:22:56:e9:03:dd:79:05:1a:e1:18:35:20:4e:bb:8f:c8:4f:
dd:ad:fe:e1:b4:13:f3:af:b7:4e:fc:25:72:84:71:2b:c8:b7:
cb:19:1a:c4:fe:b0:5f:46:15:5b:13:e5:65:ad:03:61:83:62:
08:ee:71:b6:9b:63:b4:d2:68:1d:40:f2:3a:3c:9e:73:fe:a4:
c6:2d:15:5d:24:87:a0:1f:e0:84:1f:28:c4:b4:67:a2:6d:5e:
c6:e9:a0:24:70:d0:71:f1:60:ae:fd:f5:04:e3:1a:c1:e3:c0:
2e:03:e9:d4:f6:43:3d:de:44:4a:b8:53:20:83:be:24:ec:28:
24:79:8d:10:ef:2a:07:6e:3a:95:29:6b:15:80:cd:dc:2a:7c:
1c:6b:b2:b0:31:27:62:86:b4:88:c5:2c:37:48:6a:ae:fb:38:
89:b8:e4:ab:ed:eb:26:c7:d1:4f:15:fe:f0:3b:bc:ce:b8:e8:
7d:50:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:47:49 2025 by rpki-client