Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa
File: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (raw, json)
Hash identifier: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=
Subject key identifier: 66:F0:62:24:96:1C:B0:42:9C:0B:1D:2B:74:6E:61:70:B4:B8:BA:B0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019420680DE7D60107A080FCC53C7D281931
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 93.174.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0d:e7:d6:01:07:a0:80:fc:c5:3c:7d:28:19:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66f06224961cb0429c0b1d2b746e6170b4b8bab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:fb:3b:6b:2d:b4:9d:93:ce:fe:26:81:b1:
8c:dd:09:5c:3f:73:ce:b7:dc:24:83:f1:52:ca:d2:
09:a6:50:21:ab:ed:9e:51:45:06:de:91:93:02:55:
f9:5a:ab:6b:d4:c1:32:c7:1a:8d:95:8b:d8:fe:78:
19:ba:19:7f:08:0b:ef:de:e4:30:54:0e:9b:70:05:
b2:71:d2:4d:46:dd:dd:38:19:2e:9f:e0:34:e5:d5:
28:19:10:32:dd:8d:9a:7d:1d:aa:6a:2b:24:b7:67:
5d:41:45:9c:7d:f5:8c:4c:25:05:93:4f:3a:53:18:
06:e0:25:48:d7:bf:e7:75:af:f6:bb:cb:e8:1a:bf:
ea:6e:b4:61:e3:be:b8:a6:ce:d0:0b:2e:86:0b:89:
68:a2:b1:f2:3f:e0:cd:a4:f0:95:25:88:63:a7:09:
23:7f:19:f3:ba:33:ff:25:97:c2:97:4d:13:b8:e9:
df:c3:8c:b2:a8:e0:69:eb:79:ce:aa:6e:a5:fb:13:
47:b1:a6:f7:97:01:ba:6d:bb:ca:dc:b1:a2:9f:ee:
3f:46:7f:b8:17:35:85:b9:4b:c3:47:31:85:09:c7:
f8:f0:8a:6c:20:14:22:94:dc:8b:89:6b:28:3b:ef:
4e:d1:c5:b5:9a:b8:fa:67:5b:2c:c3:81:3e:e4:a1:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F0:62:24:96:1C:B0:42:9C:0B:1D:2B:74:6E:61:70:B4:B8:BA:B0
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:81:a4:26:d2:fa:50:85:49:2f:f1:72:7d:4b:67:a0:36:6d:
24:a2:2c:66:3b:b9:bc:00:4c:38:90:b7:75:e4:a9:4d:51:f4:
af:2c:26:56:21:c7:33:4c:ba:ed:bd:d0:87:18:f8:28:83:f3:
49:92:5f:95:41:d5:6e:ac:34:a8:0e:b5:70:a7:b0:1b:6f:12:
dd:63:5e:79:e9:28:34:76:d2:8e:95:42:a2:b2:00:76:77:79:
49:ad:4f:14:f9:a2:0d:ef:a5:ce:ef:b1:87:40:04:e2:de:e0:
02:ea:cb:e8:73:17:85:94:ba:39:d6:5b:18:2a:7d:85:48:86:
16:84:9b:89:6b:32:e4:54:fe:96:08:e1:dc:eb:79:2c:27:ce:
a8:95:0f:10:49:87:2a:ed:93:9e:f6:3c:c0:f8:42:1e:72:02:
9a:3c:56:1e:58:c3:60:78:f1:40:79:7b:97:16:9d:14:fb:92:
19:f7:de:0f:ba:49:78:9d:63:07:c1:c9:39:2e:b5:07:1a:63:
88:fb:77:f8:fd:cc:24:46:7a:0c:1a:e1:85:ba:24:b4:59:6f:
b2:2a:a1:9c:91:4c:2e:fc:22:52:6b:07:31:c0:34:70:71:98:
35:bd:f0:b5:84:9f:88:2c:06:07:40:09:a7:a2:56:db:fd:42:
09:60:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:13 2025 by rpki-client