Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa
File: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (raw, json)
Hash identifier: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=
Subject key identifier: 64:D5:41:BD:26:88:D4:13:65:15:3E:72:E2:67:95:D1:96:E0:9F:3C
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0194274746FF531FF4DAFED1860172D94BAB
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa
Signing time: Thu 02 Jan 2025 13:49:30 +0000
ROA not before: Thu 02 Jan 2025 13:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 85.208.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:46:ff:53:1f:f4:da:fe:d1:86:01:72:d9:4b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 13:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64d541bd2688d41365153e72e26795d196e09f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a4:c7:db:9a:15:de:fb:1a:f6:6a:2c:63:89:
85:b4:8e:ff:02:dc:ed:1b:73:0a:0d:f4:e6:da:70:
5c:5f:68:83:31:d8:12:6d:85:53:a6:c4:ac:16:e7:
6d:fd:70:ef:e6:35:6e:92:cd:eb:6e:8c:f4:32:12:
f2:a1:85:b0:f2:4d:b2:53:bc:cf:26:2b:21:7b:d1:
2f:7d:be:3c:95:c4:18:5a:48:e2:c1:59:b2:fd:83:
57:f1:9f:d4:33:80:05:29:0d:fe:38:34:94:6b:68:
ca:12:6c:15:0f:a9:a4:e1:0e:8b:e0:35:ef:e7:ba:
2c:3e:7c:64:de:ad:e3:a9:69:e6:d8:25:f1:a7:9d:
ca:d9:8c:9e:b2:f2:ec:e1:c1:4e:31:e4:99:3c:3b:
c1:ef:34:67:b5:e8:97:0a:38:85:bc:6e:46:79:1a:
fd:4e:01:ea:a0:c3:e4:04:55:13:00:3a:13:d7:09:
fe:9c:4b:6c:95:48:13:5d:ab:35:7c:04:ae:7e:3e:
62:7e:9c:f4:f7:e2:86:77:c6:d2:8f:8e:d7:bb:d6:
78:0f:ac:88:d0:75:6e:62:40:0a:e4:7e:c6:6b:3a:
fb:34:3f:fa:1f:7a:e2:56:96:8b:e2:05:55:84:b7:
af:78:3b:71:07:cc:a6:cb:b7:69:bc:b6:3a:17:36:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D5:41:BD:26:88:D4:13:65:15:3E:72:E2:67:95:D1:96:E0:9F:3C
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:48:81:89:3d:94:a2:a9:54:2a:06:6d:c2:ac:ae:b5:5f:59:
db:b3:f8:a3:96:fa:72:f9:34:52:32:34:01:aa:a1:1d:b7:c6:
06:ac:ce:0f:28:02:00:4a:c0:3e:06:30:9d:7c:b7:86:26:53:
4c:8b:ab:b5:97:a7:5c:da:b1:8c:8f:cf:6b:20:2c:ba:ac:f2:
f4:f5:89:6b:ae:2c:50:05:ff:ed:b8:19:2e:0e:a5:92:a6:e1:
e8:86:08:3f:a0:87:eb:14:d6:3e:b9:3f:f9:84:18:90:47:0a:
84:79:0c:e0:45:92:4f:72:45:a2:c9:1c:d9:99:83:3b:d5:31:
4f:1d:82:a2:c1:4c:74:97:35:a8:b8:de:99:17:fd:87:f3:7b:
c3:cf:8a:c1:87:4e:6f:e3:24:65:89:c9:13:26:f9:95:71:f0:
c1:08:b3:0a:4a:c2:f8:6e:76:14:a4:21:04:96:03:32:61:3f:
45:5f:cf:5f:a1:25:70:fa:70:ee:39:93:7f:5c:17:4e:7a:e5:
55:e3:9d:b8:65:30:5a:06:03:b5:40:4e:00:8f:5a:00:76:00:
95:17:37:c8:30:0b:7d:01:8f:63:88:61:c2:4f:17:5d:ab:2e:
3a:b4:15:65:08:80:ca:84:45:04:58:bd:3c:08:09:be:5e:b5:
05:e7:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:02 2025 by rpki-client