Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/ZjhBcbtVD8jMDJ-Klz5IUsjVBzs.roa
File: ZjhBcbtVD8jMDJ-Klz5IUsjVBzs.roa (raw, json)
Hash identifier: XzshdDeAzNZ0spNzoQNZ6X4nobz3h8upOfRCEfU1aZQ=
Subject key identifier: 66:38:41:71:BB:55:0F:C8:CC:0C:9F:8A:97:3E:48:52:C8:D5:07:3B
Certificate issuer: /CN=12e452c77c5de1090a1610bac2a63e83aa72b0d3
Certificate serial: 019420D6564EE4446455D2C5D4197170F0EE
Authority key identifier: 12:E4:52:C7:7C:5D:E1:09:0A:16:10:BA:C2:A6:3E:83:AA:72:B0:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EuRSx3xd4QkKFhC6wqY-g6pysNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/ZjhBcbtVD8jMDJ-Klz5IUsjVBzs.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 185.36.231.0/24 maxlen: 24
2a09:1180::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:56:4e:e4:44:64:55:d2:c5:d4:19:71:70:f0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12e452c77c5de1090a1610bac2a63e83aa72b0d3
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66384171bb550fc8cc0c9f8a973e4852c8d5073b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6d:3f:09:5f:a4:fc:b7:a8:24:f9:50:c5:18:
9b:e4:9c:04:28:b7:0a:16:c1:bc:29:57:86:2e:d0:
08:9d:ab:6e:b5:da:3a:2b:5a:09:6f:ad:b5:8b:7e:
47:97:de:72:09:72:c1:1e:81:7f:d8:96:db:c3:8f:
ff:ab:50:70:4b:9b:cc:53:68:ea:25:96:a2:f7:23:
12:85:12:9e:59:99:56:e8:26:9a:66:47:50:55:58:
5b:27:60:fb:f6:92:1a:e1:df:1c:98:ab:c6:c9:42:
f8:59:db:97:5d:59:cc:00:86:ad:94:4f:b1:27:1e:
e8:48:2d:cd:70:b3:37:ba:36:9a:b0:23:fb:f2:a8:
df:a2:52:ca:14:ed:2a:6c:92:9b:d7:f6:50:1c:5f:
ef:49:6e:05:da:96:4d:dc:8a:9d:51:bd:c6:ba:24:
a2:af:31:5d:63:33:cf:31:b1:72:10:8d:28:18:0c:
46:16:39:a9:28:4c:a9:29:e0:4a:cd:46:4d:26:ad:
b5:43:6f:1d:a6:b4:c6:8d:b6:8a:5d:97:3b:c5:e5:
f3:ee:aa:f3:08:a9:0a:34:40:39:d4:b6:71:c0:d1:
a7:20:e2:24:e0:ef:a0:6f:ad:3d:0e:fe:07:d3:4c:
0e:60:b4:17:de:8b:10:28:7a:fd:8c:69:f3:cc:1a:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:38:41:71:BB:55:0F:C8:CC:0C:9F:8A:97:3E:48:52:C8:D5:07:3B
X509v3 Authority Key Identifier:
keyid:12:E4:52:C7:7C:5D:E1:09:0A:16:10:BA:C2:A6:3E:83:AA:72:B0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuRSx3xd4QkKFhC6wqY-g6pysNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/ZjhBcbtVD8jMDJ-Klz5IUsjVBzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0dfb97-cc3b-4e7d-88dc-78f0b2a1fe90/1/EuRSx3xd4QkKFhC6wqY-g6pysNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.231.0/24
IPv6:
2a09:1180::/29
Signature Algorithm: sha256WithRSAEncryption
b5:94:77:84:2f:cd:a1:62:1d:e9:18:3b:0d:c1:ab:ed:a1:47:
56:9e:7f:a2:4f:9a:50:53:41:46:a5:fb:e4:5f:74:8a:86:b9:
ac:7c:17:1d:1a:c3:01:c2:a2:25:0c:1a:15:71:b1:68:f9:f5:
03:25:fa:4a:cc:a1:ab:14:be:02:a3:e6:e6:81:0c:00:98:92:
40:c1:da:8d:88:3f:eb:3c:19:3c:1f:0f:62:48:20:fb:b1:60:
42:6d:71:1a:2f:64:37:36:35:63:e8:18:25:d2:6f:41:b3:04:
08:c2:f3:44:b8:35:e8:e1:03:9e:dc:d0:88:dc:1b:f4:65:a3:
a6:f1:58:e6:fd:af:e5:8a:33:92:2c:b4:d8:e9:0c:52:bf:f2:
df:de:d6:48:d5:e7:5c:66:8a:67:2a:04:c4:48:7e:ab:f7:12:
b1:4a:0e:32:8d:c9:57:59:d6:44:11:74:c0:f2:b5:a1:c8:47:
63:f7:47:b6:40:40:be:2f:ab:28:c7:c4:9d:a6:81:20:3e:d2:
00:92:f5:92:7d:46:1a:e4:54:b1:02:3c:a9:bb:bf:d6:1a:a4:
ec:34:35:b9:f8:1f:4d:cd:bf:97:79:09:97:0e:70:b5:35:80:
c6:a4:bd:09:5e:e0:4d:3a:4f:d5:eb:fe:71:7e:da:71:e2:f1:
91:3f:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:41:56 2025 by rpki-client