Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/RZAsu3ZzPjbXj9YVfQwdh_v0Wwo.roa
File: RZAsu3ZzPjbXj9YVfQwdh_v0Wwo.roa (raw, json)
Hash identifier: WabOb6iYWPViHfgLBS9pTtVU1Jn9wGfO4xF3paFZqEI=
Subject key identifier: 45:90:2C:BB:76:73:3E:36:D7:8F:D6:15:7D:0C:1D:87:FB:F4:5B:0A
Certificate issuer: /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial: 01941FFA286F2D453AEF4895C6625FCA5114
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/RZAsu3ZzPjbXj9YVfQwdh_v0Wwo.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 88.218.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:28:6f:2d:45:3a:ef:48:95:c6:62:5f:ca:51:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45902cbb76733e36d78fd6157d0c1d87fbf45b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:82:2b:6a:18:c1:bd:8a:b7:45:16:1d:9d:
3b:70:88:8d:0a:90:2a:b7:ff:92:a8:a3:e7:5e:f5:
d8:1d:81:3d:d6:39:fa:50:e8:39:3e:97:06:f4:db:
e3:33:82:01:5c:0a:15:82:19:af:54:ed:af:22:9d:
5c:b7:a6:45:97:da:9e:1e:98:4b:fb:87:48:30:88:
fb:db:c1:ef:f3:99:98:56:44:b1:cc:e0:14:fc:6d:
dc:13:bf:1f:dc:7e:72:b9:e1:ef:9a:ce:0e:3e:16:
f8:29:d4:3d:e1:8e:3e:b1:61:62:0a:08:34:69:46:
3d:da:8f:9f:be:65:79:1d:33:c1:4b:1a:f7:c4:6f:
e6:27:17:0b:c4:4d:bf:af:98:a2:d3:e0:c7:8e:ea:
b4:7c:c8:a3:88:f0:d1:0b:45:80:be:27:1a:a9:53:
37:bb:31:3b:ea:ae:a6:23:62:e8:46:31:b5:b7:0e:
4c:a5:8d:ff:bd:73:87:34:5e:7e:75:b9:1f:32:e0:
ac:85:80:e8:ac:c1:85:b3:4f:77:2e:90:bb:ac:de:
5a:52:a3:22:14:14:7e:94:d9:26:af:cb:07:31:f8:
ae:de:b0:f7:0e:d4:50:39:9d:7a:d8:f0:89:97:9c:
43:59:f4:cd:09:24:e9:d7:8c:48:b0:52:10:e7:79:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:90:2C:BB:76:73:3E:36:D7:8F:D6:15:7D:0C:1D:87:FB:F4:5B:0A
X509v3 Authority Key Identifier:
keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/RZAsu3ZzPjbXj9YVfQwdh_v0Wwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.34.0/24
Signature Algorithm: sha256WithRSAEncryption
94:40:1e:50:95:f7:65:68:7b:82:f4:a3:28:90:dc:f0:2f:f8:
c1:e6:b6:a6:4e:f7:86:0b:d6:85:80:71:f4:74:b9:bb:60:b7:
90:a2:20:96:9a:91:a9:5f:23:e4:d3:cf:ef:fc:32:3f:e9:d2:
7c:ad:0d:e4:f7:c4:f9:a0:f2:89:2d:b6:33:05:e8:90:26:8d:
ac:23:03:0f:f9:4c:e0:38:35:a6:07:23:db:cb:93:8e:89:06:
86:d0:df:88:6e:77:62:d9:2c:4b:66:34:e8:89:2d:04:74:b4:
ca:df:f1:10:8d:72:e9:44:69:2f:a6:e8:b1:40:0a:15:3c:39:
b4:36:e1:0d:7f:25:a9:84:f0:c9:f9:bd:85:07:16:f8:69:bf:
ee:5a:cd:50:24:c4:1e:58:2a:dd:aa:18:ef:71:96:39:18:b3:
df:fc:99:25:d0:6a:71:1f:f2:3f:0e:8a:a8:a9:a8:85:fc:36:
71:89:01:77:b2:9b:2c:e9:e7:0e:a7:58:1f:00:8e:a8:8a:60:
f5:50:a9:c2:43:73:5a:19:bd:e3:c4:3c:f3:7d:ed:57:89:54:
18:39:5c:51:de:aa:67:3b:83:83:5f:60:49:62:e7:71:fc:d7:
fc:70:cf:f7:b2:15:2d:63:09:9e:e7:3d:96:da:10:03:72:b5:
b1:ae:a2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:54 2025 by rpki-client