Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/zSzl34L5RETNDTSuPWiH6TL51X4.roa
File: zSzl34L5RETNDTSuPWiH6TL51X4.roa (raw, json)
Hash identifier: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=
Subject key identifier: CD:2C:E5:DF:82:F9:44:44:CD:0D:34:AE:3D:68:87:E9:32:F9:D5:7E
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D7079C0DF6B83AC011829342CBDAA3
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/zSzl34L5RETNDTSuPWiH6TL51X4.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48779
IP address blocks: 213.238.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:07:9c:0d:f6:b8:3a:c0:11:82:93:42:cb:da:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd2ce5df82f94444cd0d34ae3d6887e932f9d57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:5b:ee:2c:39:6a:29:c5:59:b8:e2:46:22:
e2:6e:c1:41:21:63:cb:a5:41:ae:66:93:02:c0:47:
a7:7f:dc:9c:19:87:e5:d0:78:a4:28:06:eb:f8:1c:
c7:02:7d:e8:15:fe:ba:ef:22:66:87:f9:b1:30:0c:
b0:8b:81:5a:eb:b3:ea:79:cf:48:02:03:2b:be:95:
1a:96:32:cd:03:60:6a:04:31:b8:74:37:63:23:72:
5d:c5:e0:78:7f:4b:bc:57:6f:f8:eb:fd:e5:20:ad:
b9:54:ff:d5:c1:39:d7:4d:2e:19:7c:bd:3d:e8:c0:
7c:87:4d:71:40:81:74:4c:c8:4e:c6:f2:92:17:ba:
5f:91:67:80:88:8a:6c:4b:23:55:d4:35:c7:cd:e3:
77:e9:d3:0b:81:e1:6e:ee:bf:a1:a9:45:61:ee:8f:
3a:85:f5:f9:86:81:f4:04:d3:29:5f:e2:89:94:36:
c7:1e:e0:1e:39:6c:02:cf:1c:af:f4:8b:b5:b3:e1:
ca:fa:97:73:d5:0a:41:c0:af:38:62:bb:5b:75:7c:
6d:1a:00:1a:00:97:66:27:0a:98:a3:23:d2:fc:32:
22:52:83:7d:c5:91:88:ae:56:26:da:21:a0:13:52:
bf:ba:73:a7:5d:88:61:f6:94:d0:1b:1b:f6:f6:7d:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:E5:DF:82:F9:44:44:CD:0D:34:AE:3D:68:87:E9:32:F9:D5:7E
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/zSzl34L5RETNDTSuPWiH6TL51X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:06:7e:9c:03:f7:0f:b9:ae:cb:5c:90:8c:49:48:d5:5e:85:
77:46:fa:be:63:09:42:57:96:2f:f9:4f:3e:08:71:c9:45:4b:
8e:ff:b4:f8:20:d9:fd:5b:e4:dc:41:2a:67:52:91:48:81:d2:
ac:27:2e:2d:e2:28:7a:05:6f:ae:43:93:10:12:f3:ef:4e:9c:
bc:6a:1d:14:9d:e0:8d:91:69:9e:16:92:29:eb:be:ec:5b:d1:
f0:94:e8:66:ce:ee:b2:1d:07:fe:f0:d7:64:55:91:93:dc:69:
6a:b2:c5:11:10:72:d4:70:3a:63:dd:f9:4b:42:b0:39:25:da:
00:5c:94:d9:94:f0:c2:bb:9a:b4:8f:16:2e:cd:1b:7b:9e:94:
28:f8:c8:6f:63:41:bb:95:3c:e5:75:13:d0:c7:02:24:94:b1:
05:60:16:44:7c:7e:1d:d4:16:df:e9:34:81:89:e2:00:d5:d2:
e0:68:0e:42:28:97:1a:22:b9:56:6f:c3:19:5c:a8:77:cb:5b:
13:56:37:cf:8a:9f:48:42:d2:ac:3f:9d:68:4a:10:4a:0f:ac:
54:ca:8c:cd:3c:99:af:59:11:d3:8e:7e:4a:0c:d0:51:e0:a7:
82:1a:35:fe:b9:08:62:d5:5a:3b:ef:ab:8d:74:72:ba:f8:a8:
4d:94:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:34 2025 by rpki-client