Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/z4V6gvb8t988atiVdpmcdqfjweo.roa
File: z4V6gvb8t988atiVdpmcdqfjweo.roa (raw, json)
Hash identifier: rwDeOtU3CRa+XpIgPndd2r+EKSOAEI31OEbEKYhXuUc=
Subject key identifier: CF:85:7A:82:F6:FC:B7:DF:3C:6A:D8:95:76:99:9C:76:A7:E3:C1:EA
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 01F874F1
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/z4V6gvb8t988atiVdpmcdqfjweo.roa
Signing time: Fri 15 Apr 2022 10:55:46 +0000
ROA not before: Fri 15 Apr 2022 10:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50391
IP address blocks: 213.5.132.0/24 maxlen: 24
2a11:29c0:1::/48 maxlen: 48
2a11:29c0:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33060081 (0x1f874f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Apr 15 10:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf857a82f6fcb7df3c6ad89576999c76a7e3c1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:13:fa:72:db:f9:27:ea:c6:7c:9b:2e:f0:
20:93:ff:47:52:2e:31:60:5d:3f:ed:e3:f2:dc:d2:
43:d0:4b:3e:5f:bb:93:66:5b:70:22:d3:dd:94:d4:
0c:4e:8b:f6:15:d3:02:17:76:62:3d:8b:53:01:e0:
ac:49:35:5e:3b:04:7d:aa:f1:fa:32:7d:5f:84:76:
7d:8c:da:c6:74:60:af:ee:a1:a5:5c:f5:aa:72:35:
37:a5:4f:e0:e4:7c:a9:09:12:e7:49:3a:9c:8c:86:
75:f4:57:36:ba:7f:07:73:dc:c6:9f:0c:9e:ea:18:
08:a8:ef:27:55:78:45:df:bb:de:da:24:d0:dc:d2:
a0:bd:7b:6d:3b:ec:9d:a4:3f:98:00:92:39:dc:0f:
58:72:f8:28:54:7d:09:0d:2f:f9:1a:a8:90:fb:ae:
a4:21:07:73:8b:5a:c7:74:94:ec:5d:a1:4a:64:81:
ff:9f:e9:e7:f3:e8:64:15:d6:24:3c:82:4a:36:c2:
e6:54:31:31:11:29:cb:af:fa:0e:49:32:e8:5c:6d:
c3:dc:a0:72:1b:f5:3c:ec:03:18:7e:33:39:ef:40:
cc:c2:15:16:29:d9:43:65:f2:36:0b:a0:9c:d9:21:
97:20:dd:30:fa:56:95:96:7e:0d:43:c8:74:a4:3e:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:85:7A:82:F6:FC:B7:DF:3C:6A:D8:95:76:99:9C:76:A7:E3:C1:EA
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/z4V6gvb8t988atiVdpmcdqfjweo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.132.0/24
IPv6:
2a11:29c0:1::/48
2a11:29c0:11::/48
Signature Algorithm: sha256WithRSAEncryption
90:2e:a3:35:c0:e1:b7:d1:00:ec:46:da:4a:bf:43:f3:2b:ef:
13:8c:6c:81:a3:95:35:b3:80:e9:cc:ef:60:d2:0b:d0:53:41:
54:c0:f6:40:81:d4:ab:2c:ff:b4:df:45:45:be:57:90:c7:a1:
90:ec:2c:f3:11:66:c9:28:4a:65:6b:23:42:71:65:64:f8:2a:
31:d6:0d:53:2e:c7:47:95:71:09:3c:d8:87:e0:14:06:d4:c2:
ca:4f:7c:a7:4e:1a:a2:bd:1b:94:d8:c0:cd:94:1f:b0:68:7a:
11:cc:bf:34:44:47:d1:74:65:f5:70:f9:4c:f8:cf:47:20:ad:
16:6b:c9:d6:9b:88:78:61:36:b3:4b:f4:42:b1:e0:60:62:08:
e3:7e:00:0f:07:86:e7:19:63:67:41:02:eb:8c:16:ff:2c:77:
39:93:25:dc:48:ca:98:f8:0e:44:25:44:08:53:ca:8a:33:75:
b5:d7:3b:21:78:c4:4e:37:55:b6:24:92:11:44:34:a0:fa:12:
ab:d3:f4:27:db:45:ed:d6:c0:cb:21:6f:0f:c0:58:05:8b:25:
45:28:f9:88:98:8d:3c:20:9a:b8:82:81:fa:82:9e:d1:6c:38:
28:77:f7:a4:2a:fa:54:41:5c:04:96:c9:f4:2a:0c:f2:cf:02:
09:9f:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:51:29 2025 by rpki-client