Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/zjL1CWSbBBV1-lYnJqXQ5fNUL-0.roa
File: zjL1CWSbBBV1-lYnJqXQ5fNUL-0.roa (raw, json)
Hash identifier: xnF+63uaHqYeV3XKx96FxW+NZiXijzgB8Lg+XkTHxe4=
Subject key identifier: CE:32:F5:09:64:9B:04:15:75:FA:56:27:26:A5:D0:E5:F3:54:2F:ED
Certificate issuer: /CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Certificate serial: 01922EC7
Authority key identifier: D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/zjL1CWSbBBV1-lYnJqXQ5fNUL-0.roa
Signing time: Tue 22 Feb 2022 18:39:43 +0000
ROA not before: Tue 22 Feb 2022 18:39:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42881
IP address blocks: 45.145.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26357447 (0x1922ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Validity
Not Before: Feb 22 18:39:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce32f509649b041575fa562726a5d0e5f3542fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:b4:18:41:45:d6:b5:25:98:7c:04:4d:31:
50:05:ab:86:42:9e:74:40:59:7d:38:1d:b2:4c:19:
31:e5:7f:99:34:98:01:dc:2c:9a:7c:13:04:20:64:
7b:7e:09:62:5d:10:cc:c2:77:49:d8:fd:89:4c:6e:
63:0c:85:06:0d:02:fa:82:e1:b4:42:de:b8:77:41:
2c:7b:7d:69:dc:4d:ca:26:d8:2f:c8:cc:32:a8:52:
13:ce:e0:94:12:ee:a4:51:d6:37:4e:42:26:53:60:
38:4d:c8:19:30:de:5e:a7:41:33:ed:5a:e5:45:dc:
34:03:46:23:93:de:bc:3f:bd:b1:61:84:6d:a8:10:
63:5d:bd:9e:c6:16:54:39:01:94:c7:4f:ec:d3:17:
bf:c9:8d:6a:a7:88:74:64:f4:14:90:45:94:70:73:
31:0b:38:9c:de:98:d4:c3:c4:14:be:2e:a7:23:e8:
a6:be:4b:6b:5e:6c:2a:be:a5:f0:2d:ae:c4:83:1b:
79:65:db:ff:73:b7:dd:05:7a:e2:ac:49:0e:fc:9d:
44:6c:7b:4b:3a:8a:c8:fb:53:33:9a:f3:99:aa:97:
72:26:3e:9f:ad:59:5d:b7:53:12:af:c5:7e:aa:e4:
04:fd:a3:1d:77:9b:6c:63:1c:d5:3a:4c:5f:3c:56:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:F5:09:64:9B:04:15:75:FA:56:27:26:A5:D0:E5:F3:54:2F:ED
X509v3 Authority Key Identifier:
keyid:D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/zjL1CWSbBBV1-lYnJqXQ5fNUL-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:86:bd:de:b0:d4:39:f7:1c:3c:a6:f0:05:16:4b:7d:3e:6a:
ad:1e:6f:26:b2:25:ef:7d:04:11:ac:25:aa:a2:48:bb:94:a1:
65:a2:e1:e2:eb:00:0b:6e:f7:20:b3:5f:3a:94:43:27:91:f4:
78:80:12:6a:5d:97:90:a9:0e:97:3a:37:00:ee:af:de:bc:01:
fd:15:94:cd:65:47:f6:9f:d9:a1:59:3d:4e:9f:0d:62:d6:f2:
84:8f:92:84:ae:fc:69:43:48:e9:48:9f:b8:97:13:50:b6:9b:
e8:3a:da:33:61:7d:7a:f7:c4:d6:69:31:6b:13:ba:31:41:00:
db:4b:0b:f8:ec:9b:4c:1a:c7:fb:53:6b:8b:7f:47:2c:6a:d2:
14:2f:78:68:33:8f:a9:35:a8:1a:ed:a1:fa:79:ae:55:02:c3:
70:67:e4:d0:fd:44:38:90:e2:ac:62:3c:87:d4:12:84:c3:a9:
73:4c:f1:50:39:95:39:6a:1f:1c:9e:be:e4:55:23:e3:28:3d:
6b:d1:ec:30:9d:39:12:d0:73:0a:9f:60:42:a0:1c:ba:5c:0b:
63:e5:df:33:80:9b:01:20:22:b7:7d:4e:c4:2e:10:71:73:d2:
73:99:b7:02:11:c2:80:f5:d0:68:e6:ea:c8:98:ad:66:32:f7:
23:ba:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:44 2025 by rpki-client