Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/zwea07j7v3-xlvFyyzO1plFRT0g.roa
File: zwea07j7v3-xlvFyyzO1plFRT0g.roa (raw, json)
Hash identifier: bPAS8uaWKLf6p1IF+CXoM57CN+3xv9RXjxJ98OOqSK4=
Subject key identifier: CF:07:9A:D3:B8:FB:BF:7F:B1:96:F1:72:CB:33:B5:A6:51:51:4F:48
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 019425FC39865704CB3046A44F0E2A031946
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/zwea07j7v3-xlvFyyzO1plFRT0g.roa
Signing time: Thu 02 Jan 2025 07:47:54 +0000
ROA not before: Thu 02 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64073
IP address blocks: 45.80.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:39:86:57:04:cb:30:46:a4:4f:0e:2a:03:19:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jan 2 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf079ad3b8fbbf7fb196f172cb33b5a651514f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:82:19:b5:45:1c:5d:f3:cf:db:7b:b4:16:
de:4f:51:48:bd:df:b4:ce:43:5e:ac:68:0b:0b:18:
84:2e:f6:c5:68:e6:4b:c4:b8:f5:94:50:d8:03:4b:
ea:4f:76:88:73:53:ee:16:04:2a:e3:6d:a2:40:7b:
d6:32:87:73:c7:aa:18:15:7c:d0:50:ef:c2:c5:6d:
2c:b3:ed:f9:01:0a:45:fd:dc:18:fc:a6:17:dd:d5:
18:ba:dd:66:85:9b:7f:28:f3:a7:98:e2:f2:b6:27:
23:f7:ec:a4:7f:b4:6d:78:b7:c7:86:77:5a:b6:6a:
10:e9:8d:85:9a:fe:5e:86:20:b4:b8:dd:77:0a:5c:
6a:e2:46:87:6c:01:b1:dd:fe:4e:8d:29:a5:dc:bf:
bf:ef:b3:67:e3:13:b1:79:12:22:01:f0:b7:43:3f:
63:de:c0:47:bf:90:b2:26:d2:57:3d:64:d7:63:6f:
65:fc:3d:5b:a0:4b:f6:06:c6:8b:2c:12:4b:11:29:
e7:be:b9:f4:4f:a0:16:8d:f2:4c:27:b2:2e:7b:f9:
90:1f:28:f9:15:f9:0c:d2:24:29:4a:bf:b2:e4:92:
30:f7:1f:09:dc:c8:00:ad:eb:41:21:e3:4b:6a:f4:
9d:6a:cb:4b:60:07:11:9d:13:c5:17:4f:a8:5a:cd:
92:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:9A:D3:B8:FB:BF:7F:B1:96:F1:72:CB:33:B5:A6:51:51:4F:48
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/zwea07j7v3-xlvFyyzO1plFRT0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.50.0/23
Signature Algorithm: sha256WithRSAEncryption
81:2f:28:30:46:73:02:41:ac:ca:d5:47:d0:23:92:fc:f1:26:
f9:e8:47:90:39:ca:cb:22:30:50:09:80:0d:d9:2a:12:d0:8f:
68:0c:28:c9:48:5e:56:7f:d3:c1:28:52:0b:99:bf:97:0e:79:
ff:2e:68:ef:84:8c:46:cd:5f:11:17:11:ba:14:e0:8b:28:a4:
ad:87:d4:6c:18:b9:0c:d9:8c:ab:b3:48:3e:2d:a2:3d:57:00:
9e:1e:e4:79:72:a9:74:76:fe:ae:f5:46:ae:14:42:8e:c4:cd:
8f:f0:0f:20:0f:95:25:d4:3b:4d:2a:e0:35:55:02:bb:c6:9f:
05:97:36:d3:89:e5:52:61:35:e4:73:d7:0a:a9:e7:69:42:0b:
fa:8a:eb:99:99:c0:30:7f:40:ba:b0:9d:73:ea:b1:31:b6:5d:
33:01:f9:d4:96:91:3e:5e:fa:36:f0:5d:89:61:1d:32:96:ed:
50:26:a7:5d:da:a0:13:fd:4a:87:6f:5d:4c:35:e3:78:71:66:
76:fb:b8:f8:be:80:a9:50:e6:17:8c:f7:ea:19:c4:3c:cf:dd:
91:f3:05:08:60:1a:90:05:f1:d4:9d:64:38:1c:73:45:e9:f2:
71:75:96:2d:e1:9c:8d:d0:91:35:0e:75:07:03:fa:b3:a2:72:
27:12:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:06:51 2025 by rpki-client