Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Zybm51vwXivb1W1l8SvGqKRQkSU.roa
File: Zybm51vwXivb1W1l8SvGqKRQkSU.roa (raw, json)
Hash identifier: Y6Q2yTQazou2KpdkyT/2l3Qvop3q08Hxcs4GHWR7Pvw=
Subject key identifier: 67:26:E6:E7:5B:F0:5E:2B:DB:D5:6D:65:F1:2B:C6:A8:A4:50:91:25
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826BB604A58AB1B46558E58B398979D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Zybm51vwXivb1W1l8SvGqKRQkSU.roa
Signing time: Thu 02 Jan 2025 17:53:34 +0000
ROA not before: Thu 02 Jan 2025 17:53:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 84.32.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:bb:60:4a:58:ab:1b:46:55:8e:58:b3:98:97:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6726e6e75bf05e2bdbd56d65f12bc6a8a4509125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:77:dd:43:de:75:92:80:f1:68:a4:7f:be:f1:
02:15:18:02:9a:97:f8:e0:46:72:b7:a1:fa:17:8b:
5a:01:a2:cd:80:a6:07:f1:c5:8e:88:14:c6:05:33:
0c:59:f7:10:11:99:03:04:41:e5:82:fd:fe:99:26:
31:8c:bf:b0:a9:d0:61:24:88:10:6b:84:a5:ff:de:
16:c3:b8:0d:c5:e1:70:81:ad:56:fc:2e:dc:c3:63:
72:97:42:b5:83:66:ec:52:07:0d:4f:b4:97:8e:11:
07:5f:c6:1b:9f:2d:eb:4c:e5:db:b4:60:05:8e:3c:
8c:8a:fa:d1:1a:21:5e:a6:49:ad:80:56:62:e1:a0:
a2:08:ce:9d:2c:69:21:1a:52:e4:29:23:53:62:bb:
a1:e1:cb:1b:96:cc:06:5e:45:30:1b:1d:4e:d7:a9:
e5:46:8a:38:19:bd:a8:de:27:32:56:b7:fa:62:bc:
64:ac:65:6f:25:d4:56:26:1a:f4:ba:eb:2a:e6:46:
a4:db:e4:15:4f:f8:89:0c:bb:fb:ac:28:bd:16:87:
03:d0:a3:86:d7:51:b2:2e:f6:4a:2a:d8:af:ca:3b:
ac:3d:92:d9:9d:3d:70:82:a1:74:e3:de:95:fc:93:
e3:11:20:97:f3:77:2b:1e:49:55:2a:1e:e8:29:aa:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:26:E6:E7:5B:F0:5E:2B:DB:D5:6D:65:F1:2B:C6:A8:A4:50:91:25
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Zybm51vwXivb1W1l8SvGqKRQkSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.87.0/24
Signature Algorithm: sha256WithRSAEncryption
01:31:f0:5c:5c:59:78:a5:34:d1:e1:0e:22:c0:2f:b6:1e:10:
fc:87:a8:26:98:e7:09:76:37:ef:03:39:c5:ff:bc:0e:57:1e:
84:f7:52:3a:ac:fe:fe:94:d1:85:e0:c8:54:36:30:a0:b8:fd:
3c:31:a5:c1:e5:56:0f:1e:55:55:cb:92:44:47:dc:46:14:dc:
7f:10:f5:83:8c:81:37:6e:51:71:04:2e:74:c9:f0:7c:33:4d:
fb:e9:e7:d9:6c:5d:4c:5f:54:1e:8c:06:94:99:65:11:71:c0:
9c:78:97:7b:bc:d1:2c:3d:7d:09:48:86:2c:cd:f6:12:33:f7:
e3:5e:e9:90:36:6b:63:fd:f2:6f:1d:1a:d3:23:e5:09:ef:1d:
0c:1e:7a:c5:79:9d:62:49:b9:03:12:a5:0a:a6:c5:ea:e6:45:
6b:ad:99:6f:4f:9a:19:1c:f8:bb:46:52:04:1b:f0:1c:3f:1d:
f7:97:c1:da:c6:47:ce:9b:f9:49:cf:b1:75:80:c3:2f:05:8b:
4d:dc:3a:98:27:5f:e4:0f:ed:0a:b4:b2:70:b5:e6:35:68:5e:
e6:90:27:41:25:84:51:cc:0f:d6:71:ba:38:9b:13:57:37:a5:
53:6b:b2:1f:d9:f1:5a:3e:21:14:c8:95:09:85:f0:2e:b4:6a:
aa:9b:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:28:22 2025 by rpki-client