Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/zbtSewn09aoIVPf1KosylFeVo8c.roa
File: zbtSewn09aoIVPf1KosylFeVo8c.roa (raw, json)
Hash identifier: GgTF8kBsUZm4jfYNB3PKxihTdHuckb9M4l529ILanzE=
Subject key identifier: CD:BB:52:7B:09:F4:F5:AA:08:54:F7:F5:2A:8B:32:94:57:95:A3:C7
Certificate issuer: /CN=424e8bd525b199edc1b7392da20225f74896da9d
Certificate serial: 018456EADEE37381333F02DA8767FBA6A06F
Authority key identifier: 42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/zbtSewn09aoIVPf1KosylFeVo8c.roa
Signing time: Tue 08 Nov 2022 11:05:43 +0000
ROA not before: Tue 08 Nov 2022 11:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.9.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:ea:de:e3:73:81:33:3f:02:da:87:67:fb:a6:a0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424e8bd525b199edc1b7392da20225f74896da9d
Validity
Not Before: Nov 8 11:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdbb527b09f4f5aa0854f7f52a8b32945795a3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:b6:ab:e9:9b:ef:c3:5b:fb:79:c4:9a:96:
6f:b7:7a:46:9a:6d:51:75:e5:f1:33:e1:0b:40:ee:
5f:15:b5:ac:ca:78:3e:de:14:2f:3c:4c:f7:fd:97:
f9:4e:01:48:ec:90:62:f0:c9:b5:31:a3:9f:56:5a:
2c:c0:fd:57:62:94:57:e0:00:23:ea:06:83:80:96:
45:fc:3b:57:4f:02:42:48:ad:19:72:2b:77:c4:37:
d2:1f:5a:84:46:e4:a2:5e:dc:7f:92:48:56:78:e7:
9e:f1:54:a3:94:b7:66:2b:34:32:b4:b5:26:5b:f4:
7a:60:47:53:c3:35:10:6f:cb:64:be:54:19:6b:cc:
f4:ee:ba:6b:31:bb:42:0a:4a:87:d2:d4:47:ec:ab:
37:13:4c:8f:df:84:44:6a:d2:72:ad:5e:9d:f6:72:
70:bf:2f:0f:4a:28:ae:84:a2:48:17:52:66:a7:59:
c6:1c:41:ef:ca:93:fa:6e:23:b2:48:3b:f3:c1:b9:
ae:8e:c2:0a:5a:ae:a9:00:7a:ad:1d:00:ea:2d:e7:
7d:1b:c4:7e:b2:ff:b7:25:71:ce:92:69:ab:93:87:
61:3d:86:ba:b6:aa:7c:9e:4d:b4:be:27:3d:06:4c:
fa:8d:fa:bc:d3:f7:39:82:9d:b1:d5:a4:51:6b:25:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BB:52:7B:09:F4:F5:AA:08:54:F7:F5:2A:8B:32:94:57:95:A3:C7
X509v3 Authority Key Identifier:
keyid:42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/zbtSewn09aoIVPf1KosylFeVo8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/22
Signature Algorithm: sha256WithRSAEncryption
58:50:90:9d:f0:39:1c:35:93:44:4e:30:5b:fa:9e:5b:ad:8b:
21:14:22:bc:33:d6:a3:63:e9:5f:a7:c0:05:f9:d9:d2:0e:10:
de:28:d3:10:f0:64:bb:6c:7d:31:51:81:76:f7:eb:34:80:bf:
4c:33:f9:88:ae:c7:5a:ce:6d:a0:6e:e7:89:a6:7e:ca:a5:1b:
38:72:bd:40:b9:a9:1e:26:01:58:93:23:4a:11:4b:6d:39:4f:
66:cf:0f:eb:de:79:b0:f5:b8:1f:c6:a9:3a:c3:4a:ea:5f:17:
73:c4:ff:0a:67:52:85:4f:31:44:c9:57:6c:97:56:e5:62:36:
d5:f3:91:be:c1:66:a6:74:8b:29:b8:1f:e3:db:70:97:e8:e1:
48:28:42:d2:e3:cc:62:72:e1:72:df:d6:5d:2e:da:85:fd:52:
a2:30:48:eb:63:84:ad:7c:bd:79:6c:9c:64:0e:28:c6:29:3b:
f4:a8:23:12:b9:f6:ea:52:27:29:2e:d7:0c:aa:1a:cb:e9:2d:
f0:f2:07:c9:18:2b:bf:39:4e:11:15:7d:72:76:79:65:0c:ce:
b9:22:80:ea:76:b4:19:71:64:17:76:84:3f:3e:74:e5:31:c5:
77:8e:95:c2:32:12:b6:96:4a:6b:00:5c:95:b5:d5:e4:10:88:
46:d4:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:30 2025 by rpki-client