Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZGBba6rp5P7BgLM4TgMhekuuZbs.roa
File: ZGBba6rp5P7BgLM4TgMhekuuZbs.roa (raw, json)
Hash identifier: TA0ZS2JvxaKQbT+XLXx6SVKcoEDyRZVHVAlJHAh8IG4=
Subject key identifier: 64:60:5B:6B:AA:E9:E4:FE:C1:80:B3:38:4E:03:21:7A:4B:AE:65:BB
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B0BC6F44DC90316BB61261C9F9D7
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZGBba6rp5P7BgLM4TgMhekuuZbs.roa
Signing time: Thu 09 Jan 2025 09:28:20 +0000
ROA not before: Thu 09 Jan 2025 09:28:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48584
IP address blocks: 78.128.124.0/23 maxlen: 24
78.142.52.0/23 maxlen: 24
78.142.54.0/23 maxlen: 24
176.241.178.0/23 maxlen: 24
176.241.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b0:bc:6f:44:dc:90:31:6b:b6:12:61:c9:f9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64605b6baae9e4fec180b3384e03217a4bae65bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:6b:bd:a3:fe:49:2f:e0:6e:ca:fe:35:44:
b6:20:c2:b7:72:0e:3d:8e:95:4a:77:01:aa:c7:35:
e5:6c:f9:ea:c2:31:ce:22:f6:3d:7d:1e:78:92:9f:
22:30:bf:f1:4a:32:7a:a2:11:fc:56:5d:ab:c1:56:
97:fb:34:3d:b4:b6:75:9c:d5:8f:74:37:38:43:ec:
d0:97:15:9d:7b:d3:2e:24:18:8d:fa:e7:27:21:0b:
ce:65:1a:07:45:e6:cf:b5:31:07:32:29:0b:45:d4:
24:c4:c4:48:93:b1:f9:5b:b7:33:93:13:46:81:7f:
57:88:50:3a:33:0d:c9:55:fe:b4:3a:2e:2c:b7:4d:
1e:7b:1c:a1:26:f3:18:5a:d4:1e:3e:a9:38:e9:b8:
96:a4:b4:f6:3a:d1:1f:48:95:e6:e9:ab:6b:fd:e6:
ee:03:da:b8:14:09:29:3e:9f:98:91:52:6c:a7:f9:
10:c7:e1:9c:90:4c:48:e3:34:8a:7a:85:77:7a:20:
49:14:67:fe:1b:b1:42:63:9f:de:d7:60:fd:49:ca:
42:b2:b6:47:df:52:8d:c9:68:d5:dc:33:76:07:88:
eb:02:19:3b:70:60:23:44:21:6d:c5:97:d2:23:04:
a2:af:e8:a9:d0:c0:d3:4b:72:91:a1:a3:61:0e:03:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:5B:6B:AA:E9:E4:FE:C1:80:B3:38:4E:03:21:7A:4B:AE:65:BB
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ZGBba6rp5P7BgLM4TgMhekuuZbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.124.0/23
78.142.52.0/22
176.241.178.0-176.241.183.255
Signature Algorithm: sha256WithRSAEncryption
a5:25:29:55:9d:78:ed:21:4e:8b:fe:05:21:84:fb:ca:ac:eb:
ff:4d:d1:96:3d:f1:76:96:76:66:bd:26:3e:22:2b:06:2d:7f:
ef:f8:cc:ab:ea:23:39:33:cc:04:1a:5c:c0:f1:b6:21:48:43:
11:2a:92:45:1a:b2:ce:fc:eb:a9:9c:ed:26:46:52:68:9c:bf:
03:a1:ba:5d:0e:6c:b4:49:f5:f4:fe:51:78:2e:25:9e:c6:f4:
05:a9:01:fa:1c:e1:24:6c:67:3f:40:2d:72:59:dd:be:60:12:
53:6c:75:8d:4b:d4:0c:a4:a4:dc:a1:27:ab:c9:78:69:78:d4:
89:95:4c:8f:39:db:5e:9d:5a:a4:a5:43:76:cd:5a:13:6f:1e:
8e:72:0e:2e:37:1d:a5:e0:85:18:96:44:02:0c:7f:ae:2f:ad:
e0:bf:40:49:70:67:1a:51:1a:f5:ce:b6:71:fd:89:b5:b6:6d:
7e:92:a1:30:7f:62:18:e9:c1:a8:08:18:b5:58:bc:64:ac:0f:
8d:02:b3:78:f7:00:8a:59:5c:50:59:b9:27:5f:58:f6:e0:60:
56:d6:48:da:ae:54:11:ee:ff:d3:97:77:8b:06:9f:63:a4:b2:
a1:d1:83:51:66:b9:5c:c2:f7:fc:c0:b7:e4:0e:a1:6c:ff:59:
1f:32:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:23 2025 by rpki-client