Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/zFplkI-jekZ1WexKJkNCvR3gKDE.roa
File: zFplkI-jekZ1WexKJkNCvR3gKDE.roa (raw, json)
Hash identifier: 1q8DoRCpAh+3qke5582Epuo/79FVU0mcOLaI7R/pGvc=
Subject key identifier: CC:5A:65:90:8F:A3:7A:46:75:59:EC:4A:26:43:42:BD:1D:E0:28:31
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 019421B1F6BFBEF6D75B7BF85E7970DEB32E
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/zFplkI-jekZ1WexKJkNCvR3gKDE.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 46.102.240.0/21 maxlen: 21
77.81.240.0/21 maxlen: 21
2a06:cd40:300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f6:bf:be:f6:d7:5b:7b:f8:5e:79:70:de:b3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc5a65908fa37a467559ec4a264342bd1de02831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:61:cc:ea:56:3a:d9:50:f8:85:8f:b0:26:
00:ec:e9:0e:9b:b3:d3:33:8a:df:46:dc:b6:67:39:
2e:35:81:b8:9b:67:8f:d4:47:2b:88:e4:33:52:1e:
d5:f4:d4:03:13:2b:33:d2:d9:d4:cf:bb:49:f0:78:
dc:ea:90:56:24:5c:db:b5:3b:29:f8:40:e7:e0:33:
9e:0f:d6:21:9d:4a:5d:fe:5b:4f:6b:c9:99:68:f3:
d4:89:4a:0e:49:05:28:20:0f:ef:25:82:2a:19:f3:
20:28:49:42:79:b0:3a:8b:a9:44:37:af:3c:2d:24:
be:99:92:34:5d:1c:9b:c8:12:1c:5c:a4:38:28:50:
1b:7c:a7:7b:cd:df:38:0a:cc:47:0d:6c:a3:ff:3e:
0f:16:26:b9:de:83:88:a0:c4:03:97:f3:ce:3c:d3:
c0:a8:06:96:8f:fb:30:01:74:57:77:0c:91:32:46:
52:2c:69:c0:c5:9c:be:98:c8:b9:50:c9:67:8e:25:
46:ce:31:a7:77:77:57:01:20:9d:9e:0e:94:3e:9e:
ff:99:b3:56:ee:24:64:49:da:67:a8:21:ee:5c:0f:
43:4c:f5:b0:d1:89:a6:6d:ca:19:38:c9:5a:8b:87:
d3:29:1f:ab:4e:e6:5d:9b:3a:78:87:51:62:cd:5b:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:65:90:8F:A3:7A:46:75:59:EC:4A:26:43:42:BD:1D:E0:28:31
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/zFplkI-jekZ1WexKJkNCvR3gKDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.240.0/21
77.81.240.0/21
IPv6:
2a06:cd40:300::/48
Signature Algorithm: sha256WithRSAEncryption
ba:9a:50:21:46:a0:c8:e1:d1:64:d4:4e:93:2b:dc:8a:9f:2a:
e0:d6:b1:87:17:11:5d:f0:59:cc:bb:72:08:03:30:fe:d9:37:
bf:67:49:fc:f5:4f:51:ab:d8:89:d5:34:9a:13:66:d7:d2:4f:
3e:69:a4:0e:dd:e1:6b:e6:13:88:6b:6a:fe:c3:47:6a:9f:33:
92:70:fc:2c:b2:0e:94:8b:1a:44:f6:3f:10:4e:a8:88:57:63:
14:3c:bb:59:a6:fd:90:21:eb:cb:0f:eb:d3:d3:39:a5:20:2b:
ef:9d:ff:71:30:10:6d:5c:74:fe:6b:3c:c3:6b:5a:e3:1e:62:
f0:da:48:b6:96:fe:1c:b9:96:7f:d9:ae:db:a1:28:bd:10:a8:
8b:73:3a:dc:37:c9:fa:f1:54:6e:14:6a:1d:17:53:7f:4d:52:
80:b1:72:76:bd:c5:85:8b:91:d1:0f:ce:21:76:44:d5:0c:9d:
78:8b:13:75:a6:60:df:e1:56:de:4e:03:64:ab:30:59:88:d3:
ff:84:93:30:4f:63:c6:16:85:6b:3c:6a:57:b6:cf:60:d6:1f:
fc:d1:36:33:7b:41:1a:8e:a3:09:82:75:35:21:c9:77:83:fb:
17:2b:e2:ef:6a:71:5d:45:00:a4:66:d0:ae:db:2b:cf:bc:e8:
ac:5b:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:11 2025 by rpki-client