Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/Zr4zrVa14qTk0DWVyU1eNk28OKA.roa
File: Zr4zrVa14qTk0DWVyU1eNk28OKA.roa (raw, json)
Hash identifier: MNGrogibrbUY/sCU5cxNK572ovoJBrCwCfX27ahi2B0=
Subject key identifier: 66:BE:33:AD:56:B5:E2:A4:E4:D0:35:95:C9:4D:5E:36:4D:BC:38:A0
Certificate issuer: /CN=33f35fc2b5d49828c26e07ca629c012cc1120ab6
Certificate serial: 019428279BD60F242A0DBBA7AC8CF18FEE7F
Authority key identifier: 33:F3:5F:C2:B5:D4:98:28:C2:6E:07:CA:62:9C:01:2C:C1:12:0A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/Zr4zrVa14qTk0DWVyU1eNk28OKA.roa
Signing time: Thu 02 Jan 2025 17:54:31 +0000
ROA not before: Thu 02 Jan 2025 17:54:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204717
IP address blocks: 45.93.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:9b:d6:0f:24:2a:0d:bb:a7:ac:8c:f1:8f:ee:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f35fc2b5d49828c26e07ca629c012cc1120ab6
Validity
Not Before: Jan 2 17:54:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66be33ad56b5e2a4e4d03595c94d5e364dbc38a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:20:4e:33:d5:4d:1f:46:ef:10:ce:16:b7:
d6:e3:16:51:79:91:b9:ad:4c:51:44:87:01:7c:a5:
3f:02:f0:0d:ec:98:89:f5:f1:47:5e:f6:ab:54:86:
91:75:08:eb:f7:a2:b7:f1:93:fe:25:1a:c6:a2:f6:
64:84:b0:df:1f:f0:0e:5f:b1:97:9e:80:40:6f:0c:
a6:6d:6b:47:73:94:9e:17:10:b6:98:5a:55:00:31:
f1:70:c8:7c:80:ce:56:1a:a3:24:21:fd:0f:df:e9:
c7:56:16:7b:73:2c:a3:d4:38:a6:ae:b5:cd:9f:b1:
5d:73:57:8b:68:1e:95:03:80:71:2e:e2:ff:76:c7:
9d:d6:96:95:e4:44:5d:d3:78:31:62:ab:a7:4e:85:
fe:a1:4a:24:ba:39:82:01:28:45:12:bd:9e:db:d1:
b3:5c:76:e7:18:93:e4:7d:0f:2b:03:40:99:01:69:
65:fa:0f:86:9d:4d:a8:56:47:59:42:34:17:4b:90:
79:5f:81:d0:e1:7f:f9:09:66:85:db:76:c9:9f:f6:
04:92:c8:08:a2:37:09:0c:89:e0:95:a6:d9:bf:9d:
6d:10:05:90:d7:52:9d:69:53:df:ad:c9:05:c0:70:
37:f3:8a:73:a8:e5:9e:b9:31:4c:33:61:26:ea:f2:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:33:AD:56:B5:E2:A4:E4:D0:35:95:C9:4D:5E:36:4D:BC:38:A0
X509v3 Authority Key Identifier:
keyid:33:F3:5F:C2:B5:D4:98:28:C2:6E:07:CA:62:9C:01:2C:C1:12:0A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/Zr4zrVa14qTk0DWVyU1eNk28OKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.180.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:60:f8:3c:0a:48:57:b7:6d:09:77:9e:7a:f3:f0:72:49:bc:
1c:ad:0a:76:79:98:1c:2f:82:85:54:10:a5:c5:6b:34:29:c0:
99:8b:26:f0:3f:83:92:e3:e3:f8:9c:c2:79:85:7c:bf:5e:de:
86:86:10:b0:af:86:c7:31:f4:a8:63:61:62:0c:9f:5e:0e:d4:
b0:bd:a8:a9:ac:e5:50:8f:7c:47:f7:6d:9e:ab:19:23:9f:e7:
6c:a9:43:a1:7d:e1:e3:d6:98:dc:2a:5d:3e:26:27:6c:1a:48:
89:63:2d:04:11:1a:72:9a:db:46:6a:28:26:eb:70:d9:f2:1b:
ac:09:d8:c9:bf:6b:05:f2:4a:f6:4e:c7:2a:8e:7a:dd:a9:8b:
be:c4:48:69:32:a6:b9:f7:bb:4f:b7:75:e5:95:61:f4:11:b6:
da:fb:6c:02:d3:7f:07:60:d7:b0:26:c1:cc:29:0c:f5:f7:54:
09:1d:d0:aa:02:72:06:aa:84:6f:73:e2:f8:a7:e2:2a:66:05:
fd:7d:9f:7f:b2:ce:ab:96:9e:c8:31:8f:c0:53:86:4c:fe:7d:
92:a3:a7:36:9f:21:86:31:95:3d:f1:4c:09:8f:d2:bd:ac:bb:
47:99:cc:38:7d:83:6b:02:1b:b9:c1:7a:57:ee:a2:0f:f8:b6:
2a:10:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:59:35 2025 by rpki-client