Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ZxQaFnBltVxBtsPai1NMFcjiUYs.roa
File: ZxQaFnBltVxBtsPai1NMFcjiUYs.roa (raw, json)
Hash identifier: iRTzUKFYfSWS5YdlrXSoc+pqDHQt4d83LlJaWOi+FD8=
Subject key identifier: 67:14:1A:16:70:65:B5:5C:41:B6:C3:DA:8B:53:4C:15:C8:E2:51:8B
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0191A0AA5507211A1316DB94157E1749B194
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ZxQaFnBltVxBtsPai1NMFcjiUYs.roa
Signing time: Fri 30 Aug 2024 00:23:22 +0000
ROA not before: Fri 30 Aug 2024 00:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.116.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a0:aa:55:07:21:1a:13:16:db:94:15:7e:17:49:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 30 00:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67141a167065b55c41b6c3da8b534c15c8e2518b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:d6:e2:34:28:3a:41:b3:ce:dc:4b:df:2a:
dc:29:1d:4c:6a:36:8f:70:da:3f:d9:1e:76:af:58:
ba:97:23:39:e1:2f:32:47:b8:d9:24:9b:99:16:ae:
66:68:06:e1:3c:ad:43:26:ba:c0:09:62:6a:1d:40:
da:7c:f9:10:3a:0c:b6:53:02:c6:e4:d5:a1:f8:07:
94:ff:4b:d6:c0:19:b1:cc:5b:dd:ad:06:b9:d9:37:
04:bd:66:5a:18:5e:88:4c:e0:22:33:4a:82:3e:26:
1f:93:00:ae:bd:99:8c:2b:16:f8:04:6d:74:6d:6b:
90:c3:31:98:66:9a:92:f7:74:15:e7:a7:0c:52:32:
45:57:42:7f:f5:4b:e1:3d:cf:b4:f7:6f:f4:ea:85:
5b:cf:7f:46:81:d8:dd:13:a2:5f:92:8f:1b:0e:71:
20:77:b6:89:25:45:06:9e:59:da:b5:ae:8d:f4:44:
a3:dc:2f:55:49:55:f7:ea:d3:cb:4a:5b:b2:bf:40:
3c:83:5d:fb:74:ab:94:8a:71:ab:f3:01:56:6a:35:
80:82:05:46:01:47:21:59:3e:ca:0e:9c:d7:e2:8e:
fb:8f:66:b6:5b:4e:88:40:a4:b5:04:14:66:d3:0f:
72:92:67:4d:a8:f8:a3:f8:e4:c3:86:28:86:6e:f3:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:14:1A:16:70:65:B5:5C:41:B6:C3:DA:8B:53:4C:15:C8:E2:51:8B
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ZxQaFnBltVxBtsPai1NMFcjiUYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.241.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ac:ed:51:cc:81:06:20:bd:16:7a:c6:cc:d2:bf:e0:73:3c:
e2:7b:f7:62:15:0c:7b:1f:48:00:08:01:81:96:67:cf:d1:30:
0c:4a:e6:05:6f:fd:6c:0b:88:f9:a2:83:4f:9d:f9:1c:8c:e8:
5e:68:e4:bc:65:76:b7:81:89:d9:f3:48:7e:8e:08:85:f8:1e:
ac:3b:3f:91:b2:f4:64:e8:cf:03:3d:a4:ce:0a:ba:2f:23:39:
7e:12:ea:b6:6c:52:97:5b:81:d8:79:de:33:da:bd:64:dc:2c:
31:7a:dc:05:d6:b0:f1:70:91:7f:5c:5e:b6:6d:52:5e:d5:f7:
2b:26:d5:20:c5:06:78:9d:f2:5d:d4:75:84:c8:66:24:74:78:
59:1b:91:8b:2b:3e:bb:e3:e0:65:5a:15:b0:75:21:ad:23:42:
ca:51:75:41:7c:27:ad:ce:e3:74:64:b5:84:96:9a:bf:51:42:
e5:ca:a5:8c:fc:1b:b8:9a:a0:65:05:79:eb:d5:d6:3c:35:b4:
d3:80:2d:1e:9b:c2:cb:2d:be:d8:fa:70:1c:93:cd:eb:5f:eb:
31:de:a3:26:15:3f:19:3f:ca:db:c3:5b:3d:81:c2:53:42:69:
fb:fa:f1:6b:90:22:f3:28:0e:a6:f2:20:b6:45:c2:72:7b:a0:
51:f1:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:55:56 2025 by rpki-client