Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/zDAAlCK7aNqx_xV31r_7I0TLQt8.roa
File: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (raw, json)
Hash identifier: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=
Subject key identifier: CC:30:00:94:22:BB:68:DA:B1:FF:15:77:D6:BF:FB:23:44:CB:42:DF
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 01941F8C0E2B02FEB4FC36E080D31F52AD7D
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/zDAAlCK7aNqx_xV31r_7I0TLQt8.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 5.63.144.0/21 maxlen: 21
37.130.224.0/21 maxlen: 24
146.185.16.0/20 maxlen: 20
185.2.136.0/22 maxlen: 22
2a01:5a80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0e:2b:02:fe:b4:fc:36:e0:80:d3:1f:52:ad:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc30009422bb68dab1ff1577d6bffb2344cb42df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:b6:f7:d2:19:57:73:ef:44:67:72:6c:29:
15:4e:88:17:52:5d:02:da:f2:e2:fd:2b:75:f3:cb:
22:8c:ac:2c:cb:34:77:0c:58:b7:b0:de:e5:ad:fd:
5d:97:56:51:0b:b8:4d:cf:ce:09:56:4e:18:a0:a0:
2c:ff:19:a9:fa:99:27:64:2f:d0:36:a2:91:08:8d:
19:57:f5:33:16:3d:12:1a:52:45:67:1d:80:15:4f:
79:87:04:69:c9:94:c1:2f:d3:a5:64:07:2e:58:cc:
11:26:e4:d8:a1:16:68:15:f9:1d:86:a2:bd:64:1e:
03:33:07:72:57:ae:db:0a:41:31:25:92:89:0c:c9:
e3:fe:21:92:d7:45:ef:ec:69:c5:81:b2:ec:f5:5b:
58:2f:f4:77:bc:cb:e3:a5:9f:0b:96:9d:80:68:93:
c7:2f:0a:6c:9e:7b:b9:d2:f2:7e:7d:02:75:ec:30:
8f:db:9c:25:7f:2d:23:6c:d6:92:40:01:a2:f8:a1:
72:8b:15:5f:15:e2:52:9f:dc:d7:70:f8:1c:bf:d3:
02:8e:12:1f:46:f5:01:c3:0d:5f:8f:cf:c3:1e:b5:
7d:a8:ee:5b:09:76:e6:32:ec:c6:cd:a2:b4:ab:ca:
6e:2e:de:9c:60:ac:69:e2:07:d5:cc:8a:d2:eb:64:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:30:00:94:22:BB:68:DA:B1:FF:15:77:D6:BF:FB:23:44:CB:42:DF
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/zDAAlCK7aNqx_xV31r_7I0TLQt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.144.0/21
37.130.224.0/21
146.185.16.0/20
185.2.136.0/22
IPv6:
2a01:5a80::/32
Signature Algorithm: sha256WithRSAEncryption
65:38:45:85:fe:ee:33:62:fc:85:27:4e:93:74:d9:0e:e7:06:
1c:3c:0e:09:3a:e7:df:02:1b:2a:1b:e5:a7:ee:47:fa:1c:f7:
b9:1b:3a:9f:b0:95:1f:b6:f2:75:bf:fe:ee:5a:85:72:ac:7d:
1c:c0:45:44:d1:43:f5:10:61:2c:8d:29:e0:5e:30:ac:bf:60:
14:7b:e8:f5:47:6c:cc:c7:95:df:15:47:91:22:f8:d4:35:c8:
c5:34:c1:6c:c1:03:91:0a:74:9c:32:4b:1c:80:4c:01:64:70:
68:56:01:29:d0:fa:5d:b5:0d:00:53:f6:ec:94:0d:34:7f:0c:
64:cd:3c:51:b9:63:dc:12:1e:59:8f:7a:9c:39:b0:e8:cb:80:
1a:5d:fe:0f:04:33:b4:81:6d:5f:63:f9:80:7e:fe:d7:02:c4:
aa:48:16:ba:71:c4:a7:04:cd:46:11:5a:61:fc:da:2c:dd:0c:
97:51:c6:94:31:b4:10:13:29:0f:16:7a:85:0a:cf:4e:b1:98:
fb:73:46:01:4a:56:56:fe:7a:6d:35:d9:f0:4b:54:32:62:7a:
f2:c7:5b:7e:fe:62:c9:6c:ad:71:a6:00:ce:d0:33:1e:10:94:
4a:52:b8:39:96:c3:95:33:f8:c9:43:d9:93:66:08:67:95:fb:
af:02:af:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:11 2025 by rpki-client