Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ZpyLNfythZFCxZfXvIfg8Abky28.roa
File: ZpyLNfythZFCxZfXvIfg8Abky28.roa (raw, json)
Hash identifier: 6EwIzjlOrbLD0x83NxLUF6nCSoolo3GtvKd0mF6/WOk=
Subject key identifier: 66:9C:8B:35:FC:AD:85:91:42:C5:97:D7:BC:87:E0:F0:06:E4:CB:6F
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01856D819E708151FCBD7B919E2C0D85870C
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ZpyLNfythZFCxZfXvIfg8Abky28.roa
Signing time: Sun 01 Jan 2023 13:24:49 +0000
ROA not before: Sun 01 Jan 2023 13:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211871
IP address blocks: 45.158.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:9e:70:81:51:fc:bd:7b:91:9e:2c:0d:85:87:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 13:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=669c8b35fcad859142c597d7bc87e0f006e4cb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:bb:d6:b6:e0:3a:61:78:e2:4e:0b:d1:06:
65:bb:fc:3b:80:17:b3:32:0d:4a:d1:97:7f:2d:2a:
77:b7:e8:fd:65:7c:78:ea:a6:ab:c0:50:1d:7a:4e:
31:58:4c:75:3b:a1:5e:e3:ec:44:2d:86:19:c0:8f:
46:9d:6c:77:15:8b:e4:b9:81:fc:66:51:28:88:5f:
44:f7:12:ae:44:27:8d:3b:39:3b:4d:c5:04:34:ab:
4d:ed:2b:ba:b0:b1:4a:1c:34:8f:55:87:72:1e:8f:
80:e9:b9:0a:7c:11:1d:ed:dc:bb:29:15:6e:49:ec:
2f:86:37:02:a9:1f:96:77:34:ea:fb:8f:dc:90:59:
6a:d3:0c:31:e0:13:be:30:05:6a:ff:0c:b4:04:61:
b2:ab:c6:6f:69:19:00:98:6f:b7:15:b6:91:59:fa:
61:2d:6e:4a:0b:5e:73:df:9b:da:c4:d7:89:be:33:
9f:47:cf:dd:17:59:66:17:31:92:60:74:0d:d0:f9:
2c:ce:4c:c8:b7:cf:67:8d:83:20:7f:ee:08:85:9f:
72:a0:23:57:bc:68:f0:c3:07:02:63:07:d0:b4:b7:
be:19:46:0e:8b:c3:78:96:f8:df:cd:9f:e3:a6:9d:
6e:c6:27:ef:db:fa:8e:80:03:45:b7:1d:c3:5d:98:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9C:8B:35:FC:AD:85:91:42:C5:97:D7:BC:87:E0:F0:06:E4:CB:6F
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/ZpyLNfythZFCxZfXvIfg8Abky28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:9d:95:66:c2:92:83:51:be:f9:e3:33:3b:94:16:5c:a5:9c:
bb:97:a8:78:49:2d:d5:0b:69:1a:73:85:db:d0:40:6f:6e:25:
00:cd:a7:d1:f4:7d:73:b0:92:15:3b:14:8a:1e:35:f2:ad:c7:
f6:91:20:67:04:cb:c9:51:c7:2d:77:5b:16:76:cb:20:55:cb:
3b:d9:15:4c:49:62:03:d8:71:1c:80:f0:6e:05:e2:ae:75:9a:
a5:b6:62:69:83:cf:1a:62:51:43:de:97:11:dc:fe:42:dd:61:
83:70:cb:4a:a0:51:f8:7e:f1:5b:4c:08:1d:d2:90:6a:0c:bf:
36:6c:1d:8e:ee:5e:57:b9:aa:1e:4d:f9:71:ef:09:b4:6d:9f:
43:4b:34:ba:cb:b1:66:1e:89:da:0a:53:bb:6b:1b:df:46:d5:
16:67:a9:8a:5c:fd:1a:52:ae:90:fd:70:4f:96:60:95:75:b6:
e8:a3:f2:27:2c:39:1f:92:56:37:67:70:22:4f:9f:32:db:f1:
4b:bc:01:25:c8:99:6d:93:97:67:d6:b6:11:87:38:78:43:ff:
5f:37:08:ed:18:9c:cf:64:92:a6:f6:4f:81:0d:95:7e:84:ce:
40:4c:e1:cc:a6:55:ea:1c:62:ad:ac:3b:2b:48:9f:bd:24:24:
20:16:37:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:56 2025 by rpki-client