Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/ZrQbNRbEdLqI4RVlKT1yQybqDXo.roa
File: ZrQbNRbEdLqI4RVlKT1yQybqDXo.roa (raw, json)
Hash identifier: XXmTz5XkOnxm7CN/jGCtklXB3GsrMLKsm627q08kEqk=
Subject key identifier: 66:B4:1B:35:16:C4:74:BA:88:E1:15:65:29:3D:72:43:26:EA:0D:7A
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0194236A0EA577950C0E26A1923C2F748E49
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/ZrQbNRbEdLqI4RVlKT1yQybqDXo.roa
Signing time: Wed 01 Jan 2025 19:49:00 +0000
ROA not before: Wed 01 Jan 2025 19:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56322
IP address blocks: 45.11.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0e:a5:77:95:0c:0e:26:a1:92:3c:2f:74:8e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66b41b3516c474ba88e11565293d724326ea0d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:8b:d1:39:12:bf:db:f2:61:9e:e8:36:ea:
fe:36:4f:7e:54:06:a4:50:67:c1:7c:72:3a:87:b8:
88:ce:31:4d:82:ef:64:f4:05:98:eb:dd:cb:9a:fb:
b0:02:32:21:88:29:c8:87:38:27:9c:92:16:40:a3:
fe:7e:78:9d:dd:99:b9:fb:0d:30:1b:9f:2e:92:69:
8b:7d:81:a7:fd:7c:f9:7d:f6:f7:46:03:2f:fa:c2:
a0:a7:69:b2:3f:af:f7:be:fa:76:f6:8c:7a:ab:e5:
66:7a:9e:a7:aa:6c:46:74:5b:bc:d2:e3:92:6a:28:
f4:b4:1d:65:12:1a:62:43:19:9f:e7:ad:cf:cf:08:
f7:17:22:96:3e:62:c0:5b:54:db:6b:8e:4d:2b:78:
e5:7d:3d:51:df:ec:5d:96:04:17:98:09:3a:f7:34:
d8:ec:75:84:2b:55:2a:87:49:73:9c:14:f9:f7:28:
34:71:bb:ed:97:45:de:0a:ed:ce:29:6d:50:c7:8d:
5d:fd:f5:85:1d:87:26:ba:70:9d:e1:88:f5:66:2d:
13:13:86:d2:e0:f7:36:2f:60:6f:ce:75:91:37:b7:
a7:46:e7:47:8f:0c:e4:78:f3:3f:a5:de:98:14:96:
42:9e:76:a5:2f:40:ab:d0:bb:f7:8d:0f:09:2e:55:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B4:1B:35:16:C4:74:BA:88:E1:15:65:29:3D:72:43:26:EA:0D:7A
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/ZrQbNRbEdLqI4RVlKT1yQybqDXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.172.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ea:52:43:63:f9:3a:77:42:b1:65:62:00:5e:08:22:4a:29:
3a:2e:98:9f:64:db:bc:03:03:1d:2a:21:04:0d:24:62:a1:b3:
24:35:f5:ca:ee:98:26:03:8d:25:2d:0b:55:3e:c0:ce:09:1c:
ba:0e:a9:06:d8:c1:6f:44:ea:7c:55:1e:85:b4:c2:cc:e4:4f:
b2:f0:41:6e:7b:40:6a:89:0f:74:7f:e7:78:0a:aa:79:f9:8e:
cb:53:0a:76:99:6d:f3:28:f7:2d:9e:11:88:f6:f3:b0:39:67:
59:05:88:d9:79:e8:08:77:29:b9:c9:27:3e:a7:5b:37:65:1e:
f3:fa:e8:2e:c6:86:67:21:b5:3c:bf:ad:6c:c9:a8:4d:7b:9d:
c3:31:7c:56:4c:c1:a6:d7:bc:89:b8:50:a8:78:cf:b4:93:99:
e4:90:7e:44:ff:b5:d1:c3:c0:8d:66:80:98:7d:cf:b1:e9:8f:
62:e8:53:05:c3:c9:ef:04:17:fa:1c:2e:38:57:96:84:0c:b5:
ce:a1:bb:87:81:db:5d:d4:c4:88:a0:8e:a0:fe:d2:e7:cf:c3:
19:04:a6:83:ab:89:47:d4:db:6e:51:4d:c9:d7:cb:80:33:e8:
84:4f:dc:f5:4d:6c:44:cb:77:12:4c:a5:71:b9:1b:36:31:c5:
18:42:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:21:53 2025 by rpki-client