Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/Zjp5spJdh84vGP_NYi-8y5LIKQU.roa
File: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (raw, json)
Hash identifier: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=
Subject key identifier: 66:3A:79:B2:92:5D:87:CE:2F:18:FF:CD:62:2F:BC:CB:92:C8:29:05
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 01941FFA50099394E9A17AA14B8061B23D8B
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/Zjp5spJdh84vGP_NYi-8y5LIKQU.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34563
IP address blocks: 91.216.70.0/24 maxlen: 24
193.42.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:50:09:93:94:e9:a1:7a:a1:4b:80:61:b2:3d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=663a79b2925d87ce2f18ffcd622fbccb92c82905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:e5:b6:04:a6:22:90:3b:d8:7b:4d:68:c6:
bd:bd:f6:f3:9a:80:43:8e:29:c1:1c:14:59:c4:ab:
36:5c:5b:9f:c1:27:51:5e:9c:a7:08:29:88:66:c1:
da:bd:27:6a:ad:b3:78:9f:dc:56:04:57:dc:86:a5:
72:18:aa:aa:11:fb:62:cc:04:97:d6:c0:a4:ce:2a:
1e:e0:34:55:1d:50:5a:34:a0:40:da:81:0e:58:35:
a7:7d:dd:22:3f:71:fd:c0:cc:3b:d0:c2:38:e9:55:
cf:75:ec:82:ba:00:4c:80:68:31:a3:6f:13:c9:9a:
84:3b:38:10:07:eb:70:72:50:47:0f:58:05:63:fa:
52:c6:a2:c5:98:89:72:6c:b0:3b:b0:e8:85:88:61:
92:c6:50:e9:c1:e9:3e:a1:36:70:ba:4b:a4:8a:83:
ea:83:9e:2b:24:5b:f6:3b:38:88:94:4b:1b:38:66:
8d:16:45:99:1a:3f:76:60:86:b3:ed:cd:9d:b9:aa:
07:a3:13:33:9e:eb:98:17:13:39:36:99:a1:d4:8a:
d2:f7:5a:bb:dd:99:f6:5f:72:4b:19:17:aa:d8:a0:
44:a4:2f:a1:02:47:17:15:e7:c6:ab:11:14:0c:49:
e7:9d:98:1d:da:09:0b:0a:5f:37:62:21:46:90:e7:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3A:79:B2:92:5D:87:CE:2F:18:FF:CD:62:2F:BC:CB:92:C8:29:05
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/Zjp5spJdh84vGP_NYi-8y5LIKQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.70.0/24
193.42.222.0/24
Signature Algorithm: sha256WithRSAEncryption
50:29:58:14:29:db:24:0c:77:21:72:90:25:a1:9e:89:29:b8:
87:03:bd:31:fd:6b:50:a1:f3:47:8b:46:51:dc:0c:35:37:e6:
10:df:2a:cd:e0:5e:b9:8e:6a:4d:07:3a:af:9d:c6:04:20:f8:
ab:0d:94:67:fd:46:be:d3:2b:1e:5e:24:e2:8a:a3:86:ea:be:
19:aa:39:6b:07:34:e7:5c:9a:6e:d6:8f:4d:7d:11:67:f4:38:
3a:58:7c:fe:8c:96:81:86:f3:25:b2:bb:bc:43:0b:59:75:1c:
68:42:ce:fe:ed:e0:33:49:15:fe:9c:6d:d3:94:6f:a5:ab:dd:
58:2f:06:5e:0f:b5:3c:44:a0:97:33:0a:83:cb:65:89:83:c4:
62:f5:d6:dd:18:0a:52:55:40:41:7b:38:f9:7a:71:a3:e8:5a:
bb:31:94:d9:f0:46:a4:f4:3d:2b:77:03:3c:7e:4a:01:c7:eb:
eb:47:98:65:08:0d:e7:0e:72:f1:79:1a:6a:c6:72:a6:a9:e5:
d2:15:a1:57:b9:59:00:6b:d5:5c:fc:12:71:77:34:46:5c:5a:
32:53:6b:31:8d:a3:ea:ee:28:55:c8:c6:e1:79:42:ec:33:52:
0c:41:0e:69:9f:fc:18:48:d7:d8:1b:31:7e:6c:dc:7f:b9:1a:
2c:05:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:08 2025 by rpki-client