Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/zrLz2hSRx3RQ7qKg0NqNMBuKeuo.roa
File: zrLz2hSRx3RQ7qKg0NqNMBuKeuo.roa (raw, json)
Hash identifier: HDkn5wn2LaWiudsCONTbECLqoY3+t3Isu6PIJoBqm70=
Subject key identifier: CE:B2:F3:DA:14:91:C7:74:50:EE:A2:A0:D0:DA:8D:30:1B:8A:7A:EA
Certificate issuer: /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial: 01856EA69ADBF6B213FE3ED318A0CE8B701B
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/zrLz2hSRx3RQ7qKg0NqNMBuKeuo.roa
Signing time: Sun 01 Jan 2023 18:44:50 +0000
ROA not before: Sun 01 Jan 2023 18:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56534
IP address blocks: 176.53.192.0/24 maxlen: 24
176.53.197.0/24 maxlen: 24
176.53.196.0/24 maxlen: 24
176.53.198.0/23 maxlen: 24
176.53.200.0/22 maxlen: 24
176.53.204.0/22 maxlen: 22
176.53.208.0/24 maxlen: 24
176.53.211.0/24 maxlen: 24
176.53.212.0/22 maxlen: 22
176.53.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:9a:db:f6:b2:13:fe:3e:d3:18:a0:ce:8b:70:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Validity
Not Before: Jan 1 18:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceb2f3da1491c77450eea2a0d0da8d301b8a7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:0b:5c:26:b4:37:96:aa:13:ee:8e:69:2a:
51:d4:bc:af:23:a4:7d:5f:5a:16:de:ec:8a:57:aa:
a8:25:b5:1f:23:0f:86:bd:1f:f9:1c:da:9f:03:18:
82:03:1e:3b:03:b4:a8:e3:58:88:56:15:ac:61:e5:
e9:79:9c:72:14:ae:89:d6:df:68:8c:66:92:eb:ad:
26:7e:01:6e:79:c4:fb:f4:f2:47:dc:6e:8e:82:1a:
15:6d:e0:55:64:be:ee:fb:86:39:09:ef:51:4e:c0:
28:5c:ac:8c:dd:5c:d4:4f:a9:89:83:54:b4:8f:5f:
56:2b:0e:91:dc:33:17:40:52:93:b3:01:51:2f:5c:
56:08:e9:d9:07:81:13:7d:df:ed:5e:5c:dd:77:39:
ce:58:11:4a:2e:12:4b:f1:7a:3b:e3:38:ce:c6:83:
9a:f2:3b:d5:c6:df:0a:9a:e8:e4:e6:28:cc:7a:44:
62:64:70:da:7d:cf:1f:a2:0a:47:86:12:39:1e:97:
75:2d:37:22:5d:29:68:81:54:60:d9:4c:3c:c5:f3:
ed:0b:a3:8a:26:61:12:65:93:d6:d3:76:62:6d:f9:
cd:d7:a1:93:0f:77:04:ac:2b:41:3c:70:e6:e4:e8:
6d:f5:42:09:31:31:4d:76:91:b6:76:bb:5b:65:66:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B2:F3:DA:14:91:C7:74:50:EE:A2:A0:D0:DA:8D:30:1B:8A:7A:EA
X509v3 Authority Key Identifier:
keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/zrLz2hSRx3RQ7qKg0NqNMBuKeuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.192.0/24
176.53.196.0-176.53.208.255
176.53.211.0-176.53.215.255
Signature Algorithm: sha256WithRSAEncryption
a3:bb:13:78:af:00:7d:98:80:02:60:30:09:d3:84:cd:dc:b8:
c9:42:c9:98:a1:c8:1a:77:37:44:fc:5e:e0:27:d0:a5:38:bb:
a9:46:97:69:a1:0c:d2:d3:7e:c4:5f:49:36:c2:29:88:70:9e:
11:64:4a:77:be:47:ee:2a:2a:e0:b4:fa:e5:f9:1b:33:ab:d6:
c1:ab:0e:e8:fb:5e:9c:23:16:e1:da:c4:35:fc:5e:2f:ce:69:
d5:48:f7:c8:74:67:de:bc:ab:82:11:57:7f:20:64:86:22:61:
bf:83:d4:57:98:d5:aa:86:b6:9f:08:88:da:bc:fc:10:8e:da:
cc:6d:ec:91:0b:9b:e3:7b:ad:d7:20:76:f8:b1:38:5c:3a:71:
6f:3e:84:9e:ed:e4:55:e0:cc:6b:f1:a1:10:87:01:3e:7a:c9:
71:f7:6e:d2:cc:73:ef:c8:66:c5:1b:18:f7:b5:a7:3f:0b:06:
78:2d:11:91:cf:42:a4:77:69:16:42:c8:67:8d:01:fa:5c:8f:
d9:5a:b6:75:0c:00:d9:d9:83:c3:10:c8:0d:76:38:65:2d:65:
38:46:86:5c:23:d1:9b:3e:90:ad:a7:3c:72:ac:07:4e:4c:9c:
94:d1:c4:f1:22:35:07:f0:a5:55:e1:51:ff:45:0d:19:c0:a9:
e6:e5:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:39 2025 by rpki-client