Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zNEqun1614FVHu6RzDKXPelweAM.roa
File: zNEqun1614FVHu6RzDKXPelweAM.roa (raw, json)
Hash identifier: iElhdzmxYaZDTCeiuXHnbPZFI4l416yTTq7woRfX9UQ=
Subject key identifier: CC:D1:2A:BA:7D:7A:D7:81:55:1E:EE:91:CC:32:97:3D:E9:70:78:03
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D712B1D74B745DA49F55EC7E46E3CA
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zNEqun1614FVHu6RzDKXPelweAM.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56630
IP address blocks: 185.40.5.0/24 maxlen: 24
185.117.117.0/24 maxlen: 24
185.232.168.0/24 maxlen: 24
194.53.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:12:b1:d7:4b:74:5d:a4:9f:55:ec:7e:46:e3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccd12aba7d7ad781551eee91cc32973de9707803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:79:60:4b:71:49:06:fd:39:53:f1:4c:d7:14:
bd:d5:aa:e1:fa:40:3e:27:a2:4a:a5:1c:5d:36:db:
e3:61:24:0d:ce:51:f6:86:09:a2:97:0b:02:6e:35:
61:70:85:a8:be:01:c3:05:44:6b:cb:79:00:75:bb:
3a:29:b7:20:2e:59:e6:ae:ac:71:03:be:15:9c:1a:
9c:f6:49:5a:f3:b4:01:c6:c7:4e:64:e3:eb:b1:fd:
10:6d:63:3b:40:2e:de:ac:c5:53:68:89:ca:88:a2:
ef:f2:9d:6d:55:d0:66:ab:dd:b8:13:ca:83:cb:bc:
15:c9:2b:e1:3c:7b:07:c9:c1:f1:84:b8:e2:11:90:
c2:f7:71:0b:e7:78:96:4f:01:12:3f:8c:ce:51:70:
87:70:e5:34:6e:56:25:7f:7e:57:d1:34:91:cc:e0:
ec:cd:0d:43:56:eb:ff:9a:fe:7c:90:d5:a7:14:28:
67:06:cd:9e:88:05:15:00:cf:05:02:dd:ed:e5:ac:
8e:f1:99:64:c7:c3:4b:6f:eb:a0:20:d2:c5:e5:be:
d5:ee:c7:cf:01:76:64:f2:bc:2b:1d:3e:52:d5:73:
4b:5b:77:e4:54:c2:63:cf:a1:ec:23:c9:e5:1d:26:
6e:b1:d5:2e:03:4e:e2:ed:3c:f6:4c:1a:1e:44:6e:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D1:2A:BA:7D:7A:D7:81:55:1E:EE:91:CC:32:97:3D:E9:70:78:03
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zNEqun1614FVHu6RzDKXPelweAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.5.0/24
185.117.117.0/24
185.232.168.0/24
194.53.55.0/24
Signature Algorithm: sha256WithRSAEncryption
87:db:05:8b:da:0c:64:f8:c5:1e:18:31:b7:01:4c:64:45:91:
fc:73:39:3b:45:a4:5b:a4:de:5c:5b:13:df:91:49:b2:15:a6:
67:c1:75:ab:e9:85:78:4d:b1:27:58:c0:71:eb:fc:76:d0:bd:
c1:46:02:e3:0c:d6:b3:83:10:d5:73:da:27:88:d4:10:59:bc:
12:28:7c:75:61:83:5b:20:5a:ad:80:bf:d4:e2:1a:70:17:bf:
72:8f:0a:a6:2b:49:08:75:41:3b:bb:eb:c3:3c:55:78:b6:b3:
7e:ef:e3:46:19:22:b4:f2:18:ee:6f:7c:6b:ca:82:43:c5:58:
7c:59:fd:bb:e8:87:b6:2e:c2:5f:d9:dd:72:31:1a:b2:cb:76:
79:47:fc:8f:fd:89:35:dd:0c:65:79:65:19:81:09:ff:c6:98:
c0:d2:ef:b3:d7:6e:f2:a7:f3:9b:12:2f:66:29:30:b5:8b:d5:
db:74:11:d2:fc:d4:71:7d:1f:16:b4:3f:b7:8a:45:8a:14:18:
eb:e9:24:6c:1d:5c:f1:80:4b:57:92:21:f6:2f:4f:b4:86:de:
d4:6d:0f:1e:aa:f7:87:8f:13:2f:44:69:89:c4:24:a0:ef:45:
24:fc:82:0a:d5:47:de:57:7f:9a:4d:e9:9a:8d:d6:a7:f6:64:
8e:0d:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:06 2025 by rpki-client