Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ZJAMaWVHMrxP9m-xYOoTAFwEoc0.roa
File: ZJAMaWVHMrxP9m-xYOoTAFwEoc0.roa (raw, json)
Hash identifier: ivEKHirTH+ozDWrlg4NAsR+e0VvvyQ/hwy9bOPpGMSs=
Subject key identifier: 64:90:0C:69:65:47:32:BC:4F:F6:6F:B1:60:EA:13:00:5C:04:A1:CD
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0194B644723706DA251FC62D1AE7D46DA4E1
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ZJAMaWVHMrxP9m-xYOoTAFwEoc0.roa
Signing time: Thu 30 Jan 2025 08:12:06 +0000
ROA not before: Thu 30 Jan 2025 08:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213787
IP address blocks: 212.22.68.0/24 maxlen: 24
2a09:d001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:44:72:37:06:da:25:1f:c6:2d:1a:e7:d4:6d:a4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 30 08:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64900c69654732bc4ff66fb160ea13005c04a1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:2a:1d:b1:5e:ad:7c:29:78:32:6d:a7:aa:
38:4f:90:09:22:92:e5:91:3d:ca:a1:72:37:39:88:
0a:72:19:fd:05:57:86:d2:04:03:ab:ba:33:97:41:
61:04:e6:8b:9e:8a:c5:21:42:53:8f:e9:93:a8:e7:
54:bc:31:d9:84:b8:10:33:83:f4:d8:4a:2d:22:a3:
9e:80:32:08:15:ff:d0:23:b3:38:9d:c4:6d:fc:40:
f6:8d:1d:1a:3f:50:bc:31:b3:35:08:64:57:ed:07:
a9:3b:c8:a1:f8:ea:a6:d6:52:38:68:76:c4:8e:17:
32:f4:34:26:27:8b:0d:9b:13:e6:52:c6:85:b8:d9:
51:52:fc:8c:75:d7:39:84:12:b1:3e:17:0a:0e:a5:
35:71:ed:2f:44:21:20:d1:af:9b:c5:b0:1f:12:71:
a1:c4:7c:40:b0:79:46:0f:89:ce:25:4a:09:b3:d8:
9c:b8:e0:ff:16:de:1f:9e:11:e2:43:e8:84:5a:f8:
39:02:71:a6:e1:29:2a:8c:8a:4c:62:16:aa:6c:c2:
6c:14:ec:3e:07:af:b5:a7:d5:50:45:4c:5f:9c:92:
3e:24:d0:13:c1:54:6c:3f:12:16:6c:f4:ca:88:ed:
3f:0d:ff:bb:21:f1:73:f1:b4:02:f9:7a:4e:e9:4b:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:0C:69:65:47:32:BC:4F:F6:6F:B1:60:EA:13:00:5C:04:A1:CD
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ZJAMaWVHMrxP9m-xYOoTAFwEoc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.68.0/24
IPv6:
2a09:d001::/48
Signature Algorithm: sha256WithRSAEncryption
8f:1d:32:c4:9f:4d:c9:52:c5:c5:68:11:11:f1:df:05:93:74:
2c:99:8d:33:be:d8:13:77:15:36:98:1e:3f:ee:d3:26:4c:65:
74:ff:fe:20:c0:da:cf:71:ee:36:d4:5a:f4:2d:64:44:28:ce:
05:7b:72:01:ce:5c:ec:4b:3c:43:0b:e5:01:dd:d1:3a:28:9a:
7a:60:19:73:30:cc:c8:69:29:9b:67:ec:82:61:48:43:04:9d:
82:1d:4f:64:a1:1e:d4:bc:ef:7f:17:33:16:24:13:35:0d:7c:
48:fa:7c:f6:ff:9d:18:95:16:43:dc:c3:26:7d:ad:50:fb:c6:
d9:19:70:85:40:8e:3c:3d:b1:38:a1:35:cb:9c:29:e6:97:33:
4e:da:4c:3e:85:ff:a7:35:3d:29:4e:ea:ff:1a:29:b3:9c:20:
fc:f7:37:23:63:ad:0c:6a:77:7a:8b:68:f1:4d:fe:20:04:db:
45:fc:ef:f1:08:6a:02:74:fb:e1:02:0a:cf:03:8e:45:ce:f5:
98:73:05:5f:8e:49:c7:87:ec:a9:6f:65:ad:a9:05:e8:75:72:
2a:41:d3:d9:9b:65:5b:a4:ad:54:52:39:94:c4:5b:04:bd:9d:
b9:67:21:ce:c2:5e:2c:7a:2f:c7:1d:2c:e4:77:ad:18:e4:d4:
c4:6b:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:10:43 2025 by rpki-client