Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa
File: ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa (raw, json)
Hash identifier: UXYn8r3aaYF24M8BGs9jgK62IwYmPfR4KIUePwkGsBs=
Subject key identifier: 64:39:B1:55:36:DB:B5:D7:01:9F:FE:BF:4F:C5:A2:6B:7F:6D:DD:2D
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194228DBE8293FF21B7DBAC276D8FF45672
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51520
IP address blocks: 94.232.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:be:82:93:ff:21:b7:db:ac:27:6d:8f:f4:56:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6439b15536dbb5d7019ffebf4fc5a26b7f6ddd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:11:83:b9:50:2f:be:d5:a8:e3:62:11:bf:
f4:9e:b6:34:1c:86:63:05:9d:0a:0b:7b:04:0b:9f:
b6:aa:37:5a:6b:34:b1:d1:98:5b:3f:e3:48:39:8a:
3e:b5:aa:b6:1c:75:47:c2:b5:a4:70:96:f5:04:41:
7e:f2:ce:90:f4:de:af:a7:f4:51:4d:cd:62:c6:20:
5a:5b:8f:3a:e3:42:c7:d5:cd:88:b5:c9:ff:78:55:
64:48:c5:98:42:35:e8:80:85:45:80:60:99:6d:ff:
e3:4b:4d:69:07:c8:fe:9f:bc:79:05:13:89:c6:ef:
95:0d:70:36:b3:cd:41:9c:60:95:4f:35:6b:73:b5:
e0:15:8b:d9:d9:6d:ad:bd:dd:66:da:29:71:44:22:
87:e9:33:9e:6b:27:6a:15:fa:ca:92:27:ca:73:d1:
b8:cd:45:d3:b8:4a:a0:7a:dc:18:2d:47:e1:9e:ac:
1d:95:71:a3:28:7a:90:bb:6a:ec:03:e5:91:97:13:
8a:a0:7f:c1:6f:eb:e0:57:32:fc:f2:19:22:88:04:
e5:b5:25:24:85:05:f4:f8:3f:a4:52:b5:9d:f3:ef:
e7:46:a9:19:82:dc:27:23:9d:24:3c:bb:9f:6e:06:
1f:2e:5a:ea:e0:43:e9:90:6f:b6:3b:56:cb:ce:5f:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:39:B1:55:36:DB:B5:D7:01:9F:FE:BF:4F:C5:A2:6B:7F:6D:DD:2D
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3a:28:1f:73:2f:8d:d8:cd:e7:70:12:6d:f4:18:ea:4b:bb:
77:ab:5d:8a:90:f5:bf:d3:75:36:19:5e:aa:0a:5e:a0:29:d5:
9b:b6:72:cf:60:d0:f8:3c:bd:c2:6d:86:69:92:bf:77:77:5f:
74:00:4d:db:53:39:3c:5c:ba:3e:f7:4d:67:18:1e:02:0c:69:
3c:f1:0e:1d:5d:9b:0f:2b:74:fe:b6:29:68:a3:2c:0b:04:20:
6d:b2:30:2e:be:fa:7f:69:1b:b7:a7:56:61:cc:1e:5b:e7:7b:
20:94:ed:2d:d7:86:63:b8:a0:ff:bd:54:a8:8f:b0:58:40:b8:
35:7e:cd:f8:b9:ea:14:e1:50:39:41:de:dc:cb:c2:ad:5b:1a:
e3:54:fd:22:5b:54:0b:c2:18:4b:27:a6:89:ed:39:ca:ee:f5:
0d:99:0a:10:9e:1e:03:b8:0d:ba:b2:03:03:6b:d5:b7:4b:b6:
bb:7e:77:c2:da:93:9a:6c:3c:54:28:b5:a0:ab:f3:ca:d6:82:
96:32:7e:eb:d7:f1:db:b3:01:0d:71:b9:51:31:dc:45:7d:17:
bd:ec:5e:f4:00:72:10:5b:89:27:16:0b:46:96:62:ae:f2:6f:
95:d2:d6:00:d4:10:15:e3:2a:77:d8:4b:8d:14:c2:f4:98:69:
51:55:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:37:38 2025 by rpki-client