Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/ZIS2sMaDZVSk3T0i-F_RSUx4nTU.roa
File: ZIS2sMaDZVSk3T0i-F_RSUx4nTU.roa (raw, json)
Hash identifier: K4RBAIZ+KfD/q4jljMyttbl2HU5sq9jmdtrVueH2s8E=
Subject key identifier: 64:84:B6:B0:C6:83:65:54:A4:DD:3D:22:F8:5F:D1:49:4C:78:9D:35
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 0184E1762C251BB5DBF5275FFDCA059A9425
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/ZIS2sMaDZVSk3T0i-F_RSUx4nTU.roa
Signing time: Mon 05 Dec 2022 08:45:28 +0000
ROA not before: Mon 05 Dec 2022 08:45:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49223
IP address blocks: 185.41.22.0/24 maxlen: 24
193.57.44.0/23 maxlen: 24
185.212.250.0/24 maxlen: 24
185.239.27.0/24 maxlen: 24
185.239.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:76:2c:25:1b:b5:db:f5:27:5f:fd:ca:05:9a:94:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Dec 5 08:45:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6484b6b0c6836554a4dd3d22f85fd1494c789d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d2:08:61:f5:39:8c:82:ec:74:16:f4:60:d2:
98:08:97:7a:37:b0:fe:a2:f0:0c:c7:d3:a1:8a:dd:
ba:ea:e6:bf:ab:8f:31:90:f4:e1:f4:0c:b4:5a:fb:
86:35:73:75:72:26:41:d6:ca:b4:d7:49:84:5c:ae:
9a:98:2a:37:47:bf:05:1e:8a:05:2a:30:ad:ab:5d:
1a:da:2f:4b:ef:8f:d7:b0:d1:87:3c:9a:a8:8b:95:
c0:10:26:b0:23:9b:2f:fa:ed:97:b3:62:f6:dc:2f:
71:da:25:54:60:f6:de:6c:3b:ec:3b:9c:28:92:28:
3b:1b:9c:43:3e:69:38:f8:33:16:94:ac:3f:db:bd:
52:fd:d3:b4:b9:af:a7:f8:c6:ed:48:2f:a3:29:c3:
46:dd:70:d4:3b:f6:d7:0e:49:12:f9:df:1b:fa:c7:
f9:77:6c:38:75:4d:26:51:19:18:1d:95:1a:50:81:
4d:e2:45:14:25:ae:38:3b:a7:5e:9b:d0:ed:ef:86:
56:48:7f:b5:a7:79:0d:df:53:86:8a:9f:83:25:df:
9e:01:e5:2a:c5:b0:7d:43:af:89:35:80:f4:f8:80:
3c:48:0f:46:44:9c:c6:1c:39:fe:18:dd:47:95:5b:
ac:8e:0d:fc:1c:1d:6c:de:21:64:df:8d:88:40:e2:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:84:B6:B0:C6:83:65:54:A4:DD:3D:22:F8:5F:D1:49:4C:78:9D:35
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/ZIS2sMaDZVSk3T0i-F_RSUx4nTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.22.0/24
185.212.250.0/24
185.239.26.0/23
193.57.44.0/23
Signature Algorithm: sha256WithRSAEncryption
58:2c:88:3b:69:67:03:8d:da:c8:3e:81:26:35:ca:8e:8e:f5:
e5:09:32:54:39:d4:2b:69:49:5e:3c:9e:88:f4:21:a9:ff:c1:
86:e4:75:c4:f9:5f:5d:57:4a:3c:d0:c6:54:10:e9:c9:6f:97:
c3:c5:cd:69:63:8e:f5:f2:7c:d9:9f:30:e1:97:d7:14:e7:e2:
24:33:78:e2:dc:10:43:b9:fc:65:d4:c0:f6:ac:4a:7f:61:18:
8a:66:45:bb:36:3a:5b:56:2f:0b:07:76:6b:8d:fa:c6:a7:d7:
fb:77:38:88:8e:9a:6a:7a:7d:6a:fd:58:04:b0:41:2a:f2:63:
89:5a:29:1e:ab:fc:00:44:49:f5:40:96:3f:d6:f4:47:ce:83:
de:6d:5e:3f:d7:a7:aa:3f:1a:4f:a2:3b:1c:b0:45:b2:83:65:
80:3e:32:76:ce:d8:d2:2e:87:70:14:08:8d:c3:54:75:bb:4a:
b2:63:b3:08:2a:33:72:62:24:2d:3e:a4:6c:e5:8b:a9:5f:83:
f9:5c:71:b5:67:60:15:c4:4e:f5:05:4c:2a:dc:fd:68:ed:40:
fe:fd:8c:9a:4b:62:26:3f:9b:ce:87:d0:fd:34:6a:cf:29:1a:
cd:d8:75:5f:c4:a9:23:49:d8:6e:5b:b0:9a:c6:f3:b1:83:11:
28:a7:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:32:11 2025 by rpki-client