Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ZasgQLj553uShFx9qygvcO1idVY.roa
File: ZasgQLj553uShFx9qygvcO1idVY.roa (raw, json)
Hash identifier: xV4yVjOGaxnmU8uKE6oE/eSTkUdEZQ/Ub4WuQWWJos0=
Subject key identifier: 65:AB:20:40:B8:F9:E7:7B:92:84:5C:7D:AB:28:2F:70:ED:62:75:56
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019427B427A250DB7EAD16C1169FFCE43415
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ZasgQLj553uShFx9qygvcO1idVY.roa
Signing time: Thu 02 Jan 2025 15:48:25 +0000
ROA not before: Thu 02 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50256
IP address blocks: 213.252.240.0/24 maxlen: 24
213.252.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:27:a2:50:db:7e:ad:16:c1:16:9f:fc:e4:34:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65ab2040b8f9e77b92845c7dab282f70ed627556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:f8:8d:34:ab:67:91:b9:e3:27:52:0c:92:
9d:fa:b6:1e:38:59:2c:fe:1f:9e:4a:5f:c5:54:ec:
a9:b9:be:63:ac:11:b4:df:f9:93:a5:80:9f:c9:67:
a5:d2:e5:10:bf:3e:96:e8:1f:32:dc:b5:40:9e:6e:
86:cd:8e:88:32:b5:97:85:95:5f:c0:34:46:09:97:
60:57:52:9d:a7:34:94:8d:1e:e5:de:e2:7c:e5:46:
81:90:8d:67:9d:42:c6:b1:28:5a:82:d2:60:7b:ed:
cf:e1:39:8f:12:df:50:d2:69:0e:67:d5:5a:b5:cd:
9f:af:c7:37:1b:76:9e:13:08:f9:87:b7:27:d8:0f:
a3:d1:94:0c:ca:c6:8f:71:6f:c3:70:ed:54:48:11:
69:b4:28:e7:81:9d:3c:6a:c0:8c:14:cf:da:8c:7c:
ea:11:df:20:de:e4:37:a7:93:fc:2f:ad:67:e7:31:
28:df:33:ef:39:be:50:2a:cb:3c:b9:06:e4:6c:98:
58:20:c5:7a:ab:2b:23:58:b6:87:85:8c:be:cf:f2:
d7:94:39:6c:c7:d7:6f:d8:ac:9c:18:44:8e:7c:fd:
a4:bd:9b:9a:79:34:82:e7:a5:55:d7:81:e2:ab:7e:
40:06:d1:5d:df:7c:3f:03:5c:cc:de:b6:ea:1f:f1:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:20:40:B8:F9:E7:7B:92:84:5C:7D:AB:28:2F:70:ED:62:75:56
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ZasgQLj553uShFx9qygvcO1idVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.240.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:fe:33:8d:98:0b:b7:13:2f:39:2f:58:37:b5:79:2b:87:4d:
c8:94:e6:a3:0d:ab:fd:36:a7:2f:d5:fa:89:e9:94:f1:3e:38:
9c:9f:d9:ac:46:18:87:ca:46:08:e2:e1:e6:be:4e:ad:73:11:
91:ad:bb:b5:9b:d7:66:66:25:b6:c9:d6:8d:e3:76:d0:dd:4d:
f6:81:03:46:72:a6:c0:e6:9f:e7:0e:02:e6:a6:56:bd:25:74:
22:6f:42:81:f4:bf:1c:31:fe:de:a8:ce:c0:fb:a8:e3:59:da:
65:ec:74:30:ab:eb:db:b6:f5:84:34:3a:df:01:66:d9:b3:0a:
cf:47:27:d9:29:8f:e3:63:9f:8f:e4:8a:8c:b2:34:e2:8c:dc:
27:f5:f7:0e:8a:10:f1:9f:9e:c0:de:90:4a:c9:78:8c:46:a9:
88:12:35:8c:8f:93:84:3b:99:f3:ac:51:57:84:f8:9d:bb:89:
ff:8a:af:9f:9c:c5:3c:57:93:af:96:95:b5:43:c8:d1:ff:9c:
05:dd:ce:0f:e6:a4:b3:2c:92:7d:28:f4:33:ac:5e:15:d4:cc:
0a:b9:51:0b:08:51:b9:d5:64:de:d5:3d:e1:a1:d0:73:47:da:
14:11:73:ec:a3:50:e5:c9:48:62:5f:96:69:67:4b:05:67:8f:
2c:89:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:39 2025 by rpki-client