Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/asZg-PdTL0cTe20--AnYoKNheJY.roa
File: asZg-PdTL0cTe20--AnYoKNheJY.roa (raw, json)
Hash identifier: HQTMVo/LUFvSv8ERBhRxbtow95X9E5Jt/9p1zHsRUsY=
Subject key identifier: 6A:C6:60:F8:F7:53:2F:47:13:7B:6D:3E:F8:09:D8:A0:A3:61:78:96
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 019427B63504C0B8004080D99C9C80B82724
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/asZg-PdTL0cTe20--AnYoKNheJY.roa
Signing time: Thu 02 Jan 2025 15:50:39 +0000
ROA not before: Thu 02 Jan 2025 15:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57327
IP address blocks: 192.211.0.0/24 maxlen: 24
2a0a:3507::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:35:04:c0:b8:00:40:80:d9:9c:9c:80:b8:27:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jan 2 15:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac660f8f7532f47137b6d3ef809d8a0a3617896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:70:ef:17:40:c4:db:3f:e0:54:44:65:32:
15:a2:eb:c0:e0:a6:73:4f:31:ce:2c:c8:21:dc:00:
26:9c:d3:72:25:f8:51:88:28:dd:58:df:23:3e:0d:
96:5e:ea:23:99:b2:c8:0e:5a:8f:a2:11:aa:70:aa:
7e:93:5a:77:4d:2f:a6:b4:de:0f:99:0a:2a:3a:47:
c6:7b:82:c0:56:55:c0:0e:da:a3:4f:9c:72:da:6e:
05:00:27:f2:5f:d1:12:47:cf:2c:e5:53:99:4b:12:
df:aa:d1:21:30:e9:af:4e:31:04:2f:74:13:0d:9f:
d5:7b:05:82:a0:39:7a:6e:9b:11:90:b2:ef:3e:7f:
f5:99:07:88:c9:75:10:76:b9:31:93:a8:f3:a4:53:
ca:69:ab:fc:b0:aa:b2:4d:6a:3f:06:c6:46:df:3e:
28:59:3c:2c:b9:cd:5d:88:3b:de:f4:67:7a:00:bd:
26:8c:f6:62:d9:7a:c3:1f:46:75:bf:4a:f0:bc:a0:
82:7d:be:8d:b8:2d:0b:ca:73:01:04:7b:b3:9e:c9:
8d:3e:49:f5:5d:49:98:9f:a1:0a:bf:a7:2b:41:8c:
71:ec:54:90:ab:3f:c0:ea:6b:ef:7e:e1:f9:2d:8f:
57:07:c7:00:2b:4f:67:e4:5b:f5:72:d0:0b:6e:ce:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C6:60:F8:F7:53:2F:47:13:7B:6D:3E:F8:09:D8:A0:A3:61:78:96
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/asZg-PdTL0cTe20--AnYoKNheJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.211.0.0/24
IPv6:
2a0a:3507::/48
Signature Algorithm: sha256WithRSAEncryption
7f:d3:d1:f3:63:bb:bf:82:d5:79:2d:bc:b9:ef:ea:5c:0b:9d:
ab:41:72:13:62:8a:ec:11:32:c8:68:e6:42:85:3a:1e:14:92:
ae:86:c1:f7:c8:ff:af:20:6e:ee:fe:0d:50:c2:ac:bf:a8:9c:
6f:1c:34:09:5b:77:e5:3e:17:48:78:0f:d7:4d:28:fb:3a:f6:
2c:2c:af:24:3d:5c:ff:6c:a4:7d:03:e7:ad:69:5d:3f:d8:86:
ad:f3:ab:1d:cb:f0:63:8b:99:c1:58:32:13:20:64:33:a1:42:
e5:3e:f8:5e:7f:a7:bd:d4:e8:a4:9f:fa:2b:52:69:79:5e:62:
64:17:5a:72:e5:d3:a8:fa:95:39:23:45:6b:81:bf:5e:88:bf:
79:6a:dd:5d:c6:35:76:e6:5d:06:19:1e:02:ae:12:48:bc:b3:
fa:fa:03:a3:5f:b5:92:4c:45:e6:6c:5a:93:f4:1e:4a:86:1e:
03:a7:a3:cb:7f:ea:cb:68:04:7b:01:54:67:1e:d6:e0:67:62:
22:d1:86:a1:90:19:65:51:30:31:df:7b:d8:f4:5b:ce:a1:fc:
e6:c1:c1:1a:40:19:3f:0a:a6:92:8c:23:3b:39:6b:6c:88:62:
dc:ae:f9:44:36:bc:f9:29:d6:7a:4c:35:60:4f:60:e0:5e:63:
85:46:b3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:41 2025 by rpki-client