Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/ZmAtu4Kgc44O2Fmh4xQhLC5PBOY.roa
File: ZmAtu4Kgc44O2Fmh4xQhLC5PBOY.roa (raw, json)
Hash identifier: TJmbxRyQFIY6VcDPUuSoE6Qt5/hQS48IXEu9RZIIb0Q=
Subject key identifier: 66:60:2D:BB:82:A0:73:8E:0E:D8:59:A1:E3:14:21:2C:2E:4F:04:E6
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 0194258F47B392FDB64C46B261A823081607
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/ZmAtu4Kgc44O2Fmh4xQhLC5PBOY.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 45.133.56.0/22 maxlen: 22
185.180.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:47:b3:92:fd:b6:4c:46:b2:61:a8:23:08:16:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66602dbb82a0738e0ed859a1e314212c2e4f04e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:79:42:d7:9f:13:c3:4b:c0:42:57:f5:96:bf:
ff:50:51:cd:de:53:79:66:02:09:b8:e6:8a:9d:16:
23:9a:f4:8a:91:ae:aa:bc:42:75:1b:f4:dd:ad:45:
c8:8d:7d:90:de:3d:85:42:02:76:7a:ec:da:92:37:
e2:9c:5e:01:38:b9:5f:3e:a7:9c:a0:ea:b1:61:88:
d1:ff:96:73:3a:88:c4:7e:fc:2a:da:1c:34:2f:b5:
f3:44:a8:b9:0d:1a:c2:fa:6f:af:ac:0e:46:bc:81:
ca:0c:a0:e1:76:26:08:63:ac:eb:25:fa:d7:b0:d6:
2d:90:ce:a9:32:70:7e:8f:43:a6:54:58:c2:6f:83:
94:f3:18:eb:ed:0e:b9:3a:5a:5e:46:a2:1a:51:3b:
75:73:3b:5d:06:57:21:a8:5d:fc:75:2a:cd:21:a8:
6c:1e:a8:82:50:25:cb:72:f1:18:27:b1:32:c3:cc:
f2:1a:cc:6a:f1:87:cd:a5:bb:f3:9c:7e:85:c6:fa:
0f:3c:62:55:a1:e2:d5:54:e6:cd:2e:1b:19:2f:12:
66:1e:19:42:19:e1:f0:34:27:1c:2a:69:fd:37:b3:
1c:cd:99:bc:89:d2:b6:c8:79:98:56:0e:06:8d:d8:
9a:5e:54:6a:59:02:53:95:2d:c5:83:7f:f1:9c:b1:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:2D:BB:82:A0:73:8E:0E:D8:59:A1:E3:14:21:2C:2E:4F:04:E6
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/ZmAtu4Kgc44O2Fmh4xQhLC5PBOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.56.0/22
185.180.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:4f:17:25:9f:40:b9:0e:ac:0d:dc:44:60:5d:5b:af:7a:d0:
26:4d:5a:94:ab:4e:15:08:a8:67:45:ed:06:05:dc:b2:63:aa:
24:cc:68:2b:65:0f:53:76:b9:0b:9e:f4:ce:6e:42:2c:50:e6:
15:c3:88:13:52:82:7b:24:5a:e6:69:c8:b1:ad:c3:14:c6:19:
9a:bd:ff:7c:4b:dd:5f:9e:c3:30:f9:2e:b4:74:79:6f:20:91:
d5:54:35:3c:c0:02:8a:c8:ba:3a:52:09:9c:59:59:38:b2:d0:
48:41:ad:04:12:e5:7f:b5:84:b1:ed:6c:bd:f9:ed:ea:96:58:
0f:27:10:1f:da:17:fd:e1:d6:5b:7e:a9:43:06:44:05:1c:83:
f0:5b:34:01:58:27:b6:5d:23:4d:46:3f:ac:6c:95:e0:89:c1:
39:7e:0d:10:59:59:db:c5:b3:8c:5f:cb:3c:05:d1:e2:b6:8c:
0c:37:6d:b3:55:92:1b:50:3d:9c:d7:b0:fa:41:0b:b7:61:43:
36:dd:05:19:25:bf:d7:27:6c:a8:71:de:57:60:b8:10:c3:c8:
d3:3b:bd:51:a0:b5:a9:d2:fd:37:a4:3e:2c:34:80:50:e7:43:
94:86:7f:03:f9:43:e2:ca:8c:28:e5:0a:b5:5f:f3:c8:43:76:
d8:6b:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:14:36 2025 by rpki-client