Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/ZBaV5boINzD_afAUTzBYwCeAnMI.roa
File: ZBaV5boINzD_afAUTzBYwCeAnMI.roa (raw, json)
Hash identifier: qQPhsPPx1FWUg/HkMtBdVFdkosnwVtFRJrjMNJMEZ1U=
Subject key identifier: 64:16:95:E5:BA:08:37:30:FF:69:F0:14:4F:30:58:C0:27:80:9C:C2
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01732CC4
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/ZBaV5boINzD_afAUTzBYwCeAnMI.roa
Signing time: Fri 01 Jul 2022 21:45:25 +0000
ROA not before: Fri 01 Jul 2022 21:45:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212598
IP address blocks: 45.143.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24325316 (0x1732cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jul 1 21:45:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=641695e5ba083730ff69f0144f3058c027809cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:06:0d:46:5d:9e:99:dd:63:7b:af:88:92:
d3:f9:16:90:8e:12:3e:81:92:b5:dd:cc:c8:47:66:
3e:a3:cd:70:f2:0a:41:46:8b:52:08:76:8c:b2:f4:
39:b4:d9:67:0f:41:36:6c:fd:30:ac:02:96:ac:f4:
c7:36:84:73:60:1a:f2:e1:31:a1:16:30:95:6c:bb:
8e:4e:03:61:08:bd:24:c9:58:bd:05:bc:24:b9:8a:
ac:b4:ac:51:a4:17:35:10:84:0f:22:73:2c:e9:b9:
7e:51:7e:58:a9:52:00:95:63:c5:d8:15:88:35:e6:
50:e2:e9:55:c1:80:3b:fe:f6:27:ee:d9:f0:b7:3a:
3c:31:fb:d3:a3:09:e9:64:63:0a:ef:a4:6c:ba:1c:
4a:b5:25:b3:65:4c:68:c0:44:2d:99:3c:1a:13:b8:
c5:bd:e3:53:9c:3b:0d:35:88:f4:cc:21:32:02:31:
e0:00:b6:2f:3c:86:09:df:dd:bd:a7:72:a3:0f:65:
d8:37:f0:f8:6b:dd:19:b4:d0:2c:23:73:ce:19:1e:
19:a6:c7:dd:35:5c:70:bc:c0:fb:55:07:34:be:5d:
88:6b:b0:c5:bb:ea:5b:9f:9c:a3:c7:28:50:24:47:
a1:88:ff:4a:a3:71:d9:a3:82:fa:13:71:41:b9:06:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:16:95:E5:BA:08:37:30:FF:69:F0:14:4F:30:58:C0:27:80:9C:C2
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/ZBaV5boINzD_afAUTzBYwCeAnMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3d:bd:dc:38:f1:fb:f0:c7:49:71:3c:cc:47:8e:45:15:0a:
77:a7:b6:c8:fc:9b:20:72:24:c3:33:3a:79:4b:6e:f8:2b:8f:
36:e8:7d:b3:6b:5c:b3:c2:94:f3:cb:23:01:d0:8a:13:d4:44:
eb:e9:99:2a:10:cd:e4:e8:9a:bc:2a:04:42:41:9b:ee:f9:79:
5c:82:e4:a0:76:35:59:32:b0:eb:80:24:4e:92:0d:98:72:99:
cd:c6:0f:4b:6b:61:10:1b:74:99:0d:17:18:7a:b1:ce:cc:37:
af:b8:f0:3f:d6:7b:c8:18:a4:47:8f:42:fc:23:b2:17:9a:26:
1e:74:aa:3a:1d:08:8c:74:ae:c3:59:b8:8f:14:4f:89:60:31:
ed:a2:b9:8a:c7:2f:fb:41:d7:b9:94:44:1e:32:6a:bb:88:1e:
a3:a3:89:2a:dc:b1:cb:24:66:6e:39:ad:fc:c5:38:e3:b1:e4:
49:fb:28:86:0b:55:bf:13:43:a5:61:df:f1:ce:58:9f:15:fc:
9d:07:ba:91:3c:f7:c8:08:37:81:de:d9:d3:cd:1b:66:3c:0e:
d6:1b:dc:6e:a1:32:c3:24:f9:76:2c:c2:43:70:30:f3:f2:20:
0c:94:99:d4:fb:9e:db:2a:16:dc:71:5e:34:f6:07:cf:1b:a0:
09:a4:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:23 2025 by rpki-client