Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa
File: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (raw, json)
Hash identifier: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=
Subject key identifier: CF:04:1E:55:EE:8A:8D:3E:E6:2B:B0:B3:0E:38:5B:FA:85:1F:51:E6
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 019421438B1B4DDE326C7D517FC6F3810971
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa
Signing time: Wed 01 Jan 2025 09:47:42 +0000
ROA not before: Wed 01 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 45.86.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8b:1b:4d:de:32:6c:7d:51:7f:c6:f3:81:09:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 1 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf041e55ee8a8d3ee62bb0b30e385bfa851f51e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:80:f7:aa:69:b0:55:65:c6:26:f1:3a:18:
58:dd:ae:64:0e:44:07:da:8b:f5:2b:60:f8:19:51:
1c:d9:5a:0d:fe:d3:4b:e3:b9:59:5e:7c:27:59:a1:
16:a8:41:f2:a0:3c:32:9b:8c:37:8d:91:ed:1c:d8:
e3:4d:df:7b:88:0a:8e:38:56:47:cf:62:0f:48:1e:
11:d4:75:0e:7e:0f:b4:4d:c7:df:07:23:70:8d:80:
6e:32:2d:66:6f:f9:14:67:72:62:e3:99:d6:a5:fa:
7e:0f:0c:a9:bc:50:10:15:e9:23:9f:b9:d5:db:81:
4b:99:4c:66:3b:2f:fa:c6:b9:24:63:0e:2b:8c:6d:
fe:22:e7:64:0f:52:f4:00:de:35:78:c4:45:cf:43:
80:03:95:dd:b0:80:49:86:9f:b7:14:6b:d6:e2:ca:
f4:2d:21:d7:58:3d:f5:67:dd:11:9a:22:2d:e3:58:
cb:95:2e:5c:5b:25:ed:87:4b:dc:7b:1f:69:0a:2b:
e0:19:32:2d:59:7c:65:73:5e:03:97:2a:87:11:e4:
43:19:7a:ed:31:9c:60:01:af:13:0e:66:41:0c:d9:
69:f8:bb:a6:91:ee:7a:39:af:c1:85:cc:88:52:ef:
fe:74:db:bb:31:15:6e:f6:d8:23:b0:37:a1:3d:ef:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:04:1E:55:EE:8A:8D:3E:E6:2B:B0:B3:0E:38:5B:FA:85:1F:51:E6
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.52.0/22
Signature Algorithm: sha256WithRSAEncryption
25:b4:30:d2:82:d0:78:a7:c6:24:ad:b9:12:19:b7:f4:62:0f:
17:ea:47:ce:4f:c5:f1:fc:30:b0:0d:4f:e0:07:5e:2d:6e:1d:
8f:05:39:af:79:58:7e:8c:ba:49:bb:13:fe:8c:da:44:9f:cd:
07:19:dd:e6:21:99:f4:d9:10:3a:b7:be:ff:67:d5:16:d1:a1:
70:63:a7:dd:3e:d3:a1:b4:77:2a:1a:a1:f0:89:f3:f0:25:be:
ed:92:54:c2:23:e0:57:8b:01:9b:ce:d2:8f:36:c9:be:05:97:
21:9d:9e:54:aa:8f:26:e9:24:83:04:e9:d6:93:c0:03:2b:01:
0a:87:a4:4b:a7:35:23:ce:e8:9e:9e:3f:d7:0b:00:0b:53:99:
78:87:e0:f3:ae:14:1c:20:e6:be:ff:25:91:ab:59:6f:30:fb:
96:81:e2:fc:82:df:ee:5b:e2:96:56:f7:ca:70:65:7a:5b:67:
31:09:06:21:5d:8a:37:62:88:f0:be:e0:7e:31:26:c8:25:77:
5c:9e:c0:50:ce:3f:08:28:bc:ce:ee:70:ad:6a:75:c0:b7:28:
41:83:6e:25:cf:71:fd:ec:45:d9:ea:47:3f:b6:a4:a6:14:15:
95:bf:8b:3b:ac:72:e9:db:86:59:bf:0f:6d:b4:32:aa:c0:a0:
e0:f4:14:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:41 2025 by rpki-client