Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/ZyzamFxx31MI8DWtNOW9NjiSAdw.roa
File: ZyzamFxx31MI8DWtNOW9NjiSAdw.roa (raw, json)
Hash identifier: k0oTub67+XpNNg/oLxWWVGf2ml63S+4IV7J2xSqjNvQ=
Subject key identifier: 67:2C:DA:98:5C:71:DF:53:08:F0:35:AD:34:E5:BD:36:38:92:01:DC
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 01942067F43C94439F9FC6596F44A0BE9F0E
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/ZyzamFxx31MI8DWtNOW9NjiSAdw.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 800
IP address blocks: 27.121.104.0/22 maxlen: 24
45.147.188.0/22 maxlen: 24
2a09:4880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f4:3c:94:43:9f:9f:c6:59:6f:44:a0:be:9f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=672cda985c71df5308f035ad34e5bd36389201dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:b1:e1:5a:cd:c3:d3:9b:1a:80:63:15:2c:
29:49:78:29:f4:3b:d4:99:11:e5:c8:66:3c:95:41:
73:7d:cb:dd:6b:2f:41:1f:d0:7b:1a:5f:90:5d:2b:
c0:bd:71:fa:01:a4:64:65:18:68:7b:6b:8c:2e:6f:
f9:6f:7b:d5:c0:2d:73:4e:44:b2:a2:32:a1:59:35:
53:9e:1b:1b:85:38:8c:d5:16:41:9d:83:50:c6:bd:
22:45:9d:5c:25:fb:46:6e:35:35:ed:14:1f:d0:a0:
f0:bf:39:95:07:f5:42:9a:51:56:bf:11:61:56:73:
61:91:27:01:86:18:3b:fb:1a:57:fb:54:c8:0b:cc:
2f:6c:ed:29:91:48:c5:70:71:ef:16:8a:9d:0a:39:
47:1c:de:46:f1:78:73:f3:c9:cc:a3:fc:7e:e7:3d:
a2:c7:82:65:8f:85:55:0c:50:61:73:00:c1:73:b4:
cf:ad:a2:cc:cc:7f:e8:6f:8a:00:c8:09:c3:1f:d3:
73:8c:35:90:16:a3:e0:41:47:fd:cc:3a:4f:69:c8:
0e:0a:77:54:d9:5b:0b:48:0c:c6:ae:bf:86:15:07:
ba:5b:8b:0d:54:c8:48:d7:f7:6a:8e:bd:0b:5c:72:
38:0a:9f:36:53:8a:58:c8:41:93:a0:c8:07:b9:42:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2C:DA:98:5C:71:DF:53:08:F0:35:AD:34:E5:BD:36:38:92:01:DC
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/ZyzamFxx31MI8DWtNOW9NjiSAdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.121.104.0/22
45.147.188.0/22
IPv6:
2a09:4880::/32
Signature Algorithm: sha256WithRSAEncryption
18:50:e9:14:2d:32:5b:e4:52:0e:1f:f4:ab:6c:8a:83:5a:18:
80:9b:1f:1f:f3:19:13:da:ef:31:c2:88:a0:9d:74:cc:c3:ec:
aa:9b:63:a9:41:91:7f:c9:47:b9:10:c8:8c:50:d4:1b:3f:66:
cf:50:ba:86:13:5a:d9:76:91:db:3c:84:c7:9b:6a:02:02:ef:
b1:51:50:37:fb:08:34:bc:4d:df:80:7e:06:5b:3b:e7:0a:71:
f0:0c:93:bf:ad:9e:6a:a5:38:3e:93:04:54:9f:f0:01:16:51:
16:b2:b4:cc:07:7a:76:35:1b:cd:98:4c:25:88:a7:c8:79:71:
ee:d7:d6:90:e5:83:e1:0b:b7:7c:19:90:38:fd:de:dd:4d:07:
83:6e:2b:f5:d1:8f:6e:08:9c:5e:62:5e:7b:7b:56:36:0a:50:
41:42:db:26:45:09:fe:b6:16:1b:5c:c7:58:5a:43:0b:2b:e5:
ce:1c:11:93:0d:f9:8a:37:08:c9:2c:f9:e9:9e:7c:83:dc:c6:
f6:7a:ea:8a:71:d8:69:c5:ae:cc:cc:01:35:f0:56:10:07:d9:
e8:ac:f0:d0:06:74:00:a7:fb:72:14:06:e2:57:da:6f:af:a2:
fe:db:82:e1:cb:c1:7d:9f:4f:06:2c:e6:df:d8:e9:10:6b:ec:
cc:be:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:59:12 2025 by rpki-client