Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/ZWU6t8RNbP2s6-qEkTwVaVLdofM.roa
File: ZWU6t8RNbP2s6-qEkTwVaVLdofM.roa (raw, json)
Hash identifier: PtKr4I/ODKm03KoZ59uQ66IOrHjd/0A/Ub/7Qse3U8I=
Subject key identifier: 65:65:3A:B7:C4:4D:6C:FD:AC:EB:EA:84:91:3C:15:69:52:DD:A1:F3
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0194206835CD24AB4D821B84AAE2EE41CFE6
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/ZWU6t8RNbP2s6-qEkTwVaVLdofM.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204916
IP address blocks: 5.42.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:35:cd:24:ab:4d:82:1b:84:aa:e2:ee:41:cf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65653ab7c44d6cfdacebea84913c156952dda1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:b0:ee:ee:35:1d:58:72:34:54:3c:50:62:
2e:84:48:db:9d:ba:7c:91:35:cc:b2:62:ae:ce:0d:
2f:04:5d:a2:2f:cf:67:8b:30:62:25:36:14:ef:c6:
d8:b0:04:91:58:22:be:aa:24:ac:9b:ba:59:45:b5:
05:68:ec:ff:80:6b:16:6e:27:ec:49:43:b9:24:82:
77:b3:2b:c6:d0:86:d3:8a:ef:39:01:0d:5e:b1:64:
cc:9c:5b:06:8e:69:dd:6e:5f:4e:8c:ee:2e:ae:55:
0d:5a:c7:65:f3:d1:01:c2:82:db:c4:61:5c:35:39:
ac:7f:3b:26:19:41:ac:ce:17:63:61:3a:37:fb:15:
1e:e1:d1:3a:09:c9:83:8f:ea:32:db:6c:fe:a7:02:
49:6d:b7:b2:91:4e:a4:96:3d:6c:78:5b:46:07:81:
0d:93:c6:c7:2f:98:e8:2d:30:36:f4:a4:50:5b:4b:
0e:7f:39:b7:86:fc:49:8d:83:dd:9c:fd:de:0c:8d:
42:14:f9:d7:6d:f0:e7:40:2a:67:b9:0a:82:62:9e:
b6:96:69:1d:09:36:59:01:1e:73:a7:20:0b:d9:be:
cf:be:7f:ab:10:9c:d2:14:f2:d3:fe:3b:52:71:cf:
74:ad:8c:bb:2c:ea:dd:14:7a:88:72:92:bf:31:82:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:65:3A:B7:C4:4D:6C:FD:AC:EB:EA:84:91:3C:15:69:52:DD:A1:F3
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/ZWU6t8RNbP2s6-qEkTwVaVLdofM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.70.0/24
Signature Algorithm: sha256WithRSAEncryption
83:dd:0f:c7:0a:20:93:bd:fe:82:64:e9:af:dd:3a:74:b3:c8:
2c:08:19:c8:24:cc:b2:f9:19:a7:0a:d6:02:c1:73:f6:a4:9e:
44:e8:aa:7f:38:3a:10:63:25:93:0d:a8:bf:b9:a8:bd:ef:0a:
e8:06:ed:f4:d5:f6:21:27:43:54:4f:85:4d:29:16:ba:e0:b0:
19:cb:f2:ce:89:60:95:2c:17:4d:b8:bc:87:68:99:e7:64:21:
f8:46:5f:83:d9:60:7d:30:a8:84:57:b9:dd:a3:f4:c0:7b:a5:
ea:55:e4:5c:b9:6c:7a:23:74:f0:b7:6c:88:b6:9c:10:e1:d5:
9f:1e:0a:42:81:ed:db:f7:fe:89:83:ea:3f:fa:2c:90:8a:0a:
67:24:37:87:b9:74:2b:19:2b:d1:20:6a:9a:05:2e:6e:eb:c3:
d8:36:1e:e6:ec:95:27:61:f8:ac:84:b9:f4:30:12:87:41:ad:
8d:fc:72:d2:c4:8f:60:11:bb:6b:52:f1:af:67:d4:4f:d1:22:
1c:72:08:ef:d7:37:ea:21:ee:ff:5b:f8:48:24:51:eb:5a:55:
64:82:af:a7:8b:c7:80:60:e8:88:93:d1:91:3d:85:93:dd:1c:
b7:e3:e9:2c:b1:ab:fd:8d:cf:66:d4:e9:3d:b0:c3:40:ae:f9:
60:e8:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:27 2025 by rpki-client