Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZPvTBRxx4Shfu8oXuOzHHyZ9AmY.roa
File: ZPvTBRxx4Shfu8oXuOzHHyZ9AmY.roa (raw, json)
Hash identifier: fEocoBHtPGCRsBwslbFctdVLfpSfQ18T5CxUTW+O13s=
Subject key identifier: 64:FB:D3:05:1C:71:E1:28:5F:BB:CA:17:B8:EC:C7:1F:26:7D:02:66
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452FDAA6ABFBD5A41762A56966C3DE
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZPvTBRxx4Shfu8oXuOzHHyZ9AmY.roa
Signing time: Wed 01 Jan 2025 23:48:21 +0000
ROA not before: Wed 01 Jan 2025 23:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 45.83.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2f:da:a6:ab:fb:d5:a4:17:62:a5:69:66:c3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64fbd3051c71e1285fbbca17b8ecc71f267d0266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:1d:c3:45:4f:6c:6b:d5:0f:26:6c:e8:91:
bd:74:75:56:b4:b8:c8:17:0b:b8:c9:00:0d:cb:37:
08:59:9f:fb:1d:d7:de:2e:ba:01:4e:dc:3b:a9:0e:
e1:a8:8b:25:66:36:d8:c4:d1:db:40:27:33:d2:c4:
4c:ec:af:fe:b5:e6:18:be:f0:a6:e6:61:fd:1f:2a:
41:b3:f2:55:42:e9:4f:b3:aa:be:7c:20:3c:ee:0a:
ee:38:ff:db:d1:c8:7c:24:39:f1:fa:21:c4:79:da:
97:44:f1:36:21:9a:df:56:e5:b8:56:e0:a1:40:08:
bf:41:90:b0:c2:bb:2b:6a:b7:17:68:d0:0d:0c:db:
52:6f:60:0e:1d:b6:9d:be:73:c8:fd:f6:7e:f9:0b:
ac:02:a2:a8:86:e3:00:d9:cf:a5:fd:e9:6f:f3:7e:
e2:48:be:38:39:6c:12:2e:32:09:f1:55:2c:99:58:
bb:e9:d0:e2:4b:9b:26:eb:68:f7:93:33:bc:30:83:
56:4a:c2:3f:90:29:4d:3f:b1:09:14:ec:51:03:ed:
53:13:b1:14:fe:c3:21:e5:21:2d:f5:57:c9:79:bc:
3f:62:39:c2:69:e6:b7:29:a7:ad:9a:70:87:ed:62:
78:3e:91:8f:58:88:d8:b2:1e:28:44:2d:28:58:46:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FB:D3:05:1C:71:E1:28:5F:BB:CA:17:B8:EC:C7:1F:26:7D:02:66
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZPvTBRxx4Shfu8oXuOzHHyZ9AmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.8.0/22
Signature Algorithm: sha256WithRSAEncryption
75:46:8f:3a:0b:60:11:fb:23:0e:2f:15:48:af:af:b8:19:5a:
ed:0a:76:c9:49:b6:ae:7d:1a:26:b4:02:72:33:9a:1d:37:59:
04:32:63:03:ce:09:eb:bd:2a:55:8d:40:c8:8c:f0:bd:8d:14:
1f:17:c5:5a:eb:9c:4d:61:ab:66:79:9c:1c:9d:b5:3a:23:33:
02:b1:a6:48:50:a4:e1:ae:79:ba:b3:80:3a:34:9b:8a:01:ca:
62:56:9f:67:95:0d:29:29:12:aa:e2:2e:08:d7:63:ad:f3:b1:
64:ef:d7:0e:9a:ce:30:65:02:2a:52:4c:46:b1:05:65:10:1d:
0b:28:e5:2c:25:2b:fa:35:46:cc:74:6a:8f:a4:9c:93:5d:33:
03:ff:09:1f:b4:ca:37:f7:46:7f:a0:a5:d5:6d:c2:1b:f5:16:
4c:49:72:81:a5:91:e3:f4:0d:30:b0:d9:a9:c8:4a:aa:e1:bb:
66:8a:31:78:ba:a3:58:05:a2:83:a9:6d:4b:2b:d3:c6:aa:af:
25:8c:39:56:bd:c6:7d:21:49:14:8a:13:80:97:5f:2a:e0:be:
b9:ff:eb:26:d7:bf:c4:04:4f:c8:78:03:7b:50:6e:58:10:fb:
da:36:29:f6:f0:f3:14:87:09:b6:90:8d:71:15:78:c1:93:33:
38:d7:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:08:35 2025 by rpki-client