Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/mzwYJyswo8l1JsA6hfRfIoCBafA.roa
File: mzwYJyswo8l1JsA6hfRfIoCBafA.roa (raw, json)
Hash identifier: Gfotfil+ck185Eo+qC6OPzrlOf4CHvljp/doqgLnc0M=
Subject key identifier: 9B:3C:18:27:2B:30:A3:C9:75:26:C0:3A:85:F4:5F:22:80:81:69:F0
Certificate issuer: /CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Certificate serial: 018CC493169D319F8C5B839F983641F0F800
Authority key identifier: BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/mzwYJyswo8l1JsA6hfRfIoCBafA.roa
Signing time: Mon 01 Jan 2024 10:30:22 +0000
ROA not before: Mon 01 Jan 2024 10:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.133.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:16:9d:31:9f:8c:5b:83:9f:98:36:41:f0:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732
Validity
Not Before: Jan 1 10:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b3c18272b30a3c97526c03a85f45f22808169f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:09:33:6d:30:73:e3:a3:52:69:98:7b:c4:
33:6b:dc:35:dd:b8:1b:9c:45:89:cf:0d:14:99:c9:
d9:2c:e8:cc:25:70:0e:08:01:54:58:78:35:c3:80:
e4:60:4a:04:cc:55:f7:df:42:2a:3e:e6:1b:71:7d:
d9:27:e0:62:c6:9b:b1:df:e1:0c:a7:9d:0c:2c:f9:
38:4d:2c:f9:65:e9:dc:17:ed:7e:df:7c:e5:56:30:
48:07:84:fa:52:56:8a:5f:8c:ce:7e:43:dc:de:5a:
37:33:ca:23:0a:f4:46:e8:55:f8:e8:8c:62:c2:32:
8c:fb:b4:84:17:89:8a:77:16:f2:7a:ac:09:6a:bd:
22:84:9f:aa:8d:ca:2a:67:b7:bd:41:85:65:69:01:
1a:54:50:a7:bc:68:51:96:66:b5:13:1f:a0:c6:df:
eb:23:c9:82:c5:ee:d2:82:f3:59:d1:3f:0a:90:e3:
ea:be:04:fd:99:d4:2f:48:5a:50:55:e8:d4:a5:0c:
bc:4f:79:f5:a0:30:2f:23:fa:7b:14:bd:4b:af:e3:
cf:8b:ef:24:f2:a5:64:59:2a:4d:3d:8a:96:a2:d7:
0c:e1:f1:86:87:df:74:92:56:21:ef:f9:84:a3:8c:
d4:fe:85:f1:e0:ee:d1:58:fc:8c:cd:8d:88:1b:53:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3C:18:27:2B:30:A3:C9:75:26:C0:3A:85:F4:5F:22:80:81:69:F0
X509v3 Authority Key Identifier:
keyid:BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/mzwYJyswo8l1JsA6hfRfIoCBafA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.76.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:19:4d:50:3d:9a:8e:cf:35:25:c4:89:e4:0d:fa:62:f4:3e:
bf:5a:98:d6:15:7a:a8:6d:1e:f3:9d:2a:71:d5:9d:50:5f:a2:
88:ca:be:a4:62:db:18:d2:37:39:3c:ce:58:87:93:5d:ee:57:
d0:19:80:b5:9f:8b:d4:97:be:1a:48:97:5e:74:da:99:6b:ef:
28:a9:f9:b0:30:db:e1:68:77:5a:cc:5a:d2:89:82:cc:ba:0f:
f3:16:24:94:3d:60:97:42:3b:c0:8e:4a:e7:21:93:00:cb:85:
d9:2b:34:00:0c:75:60:42:d2:c5:90:30:e3:c2:82:38:87:a9:
63:4b:e4:a9:db:a8:0d:24:83:a5:c7:87:b8:6c:55:01:67:59:
51:e7:d6:dc:fc:7d:f6:1c:05:1e:39:49:9b:9c:2c:6c:86:37:
f5:c8:58:8d:34:24:9a:e2:63:3e:9e:44:e9:b6:9d:84:8c:c6:
12:63:e0:59:c8:2a:51:47:5e:eb:b6:7b:4f:29:5c:20:e5:25:
5a:95:d9:2b:65:b5:1b:ec:f8:d0:f3:6e:60:fb:8c:1c:de:1c:
bd:8f:7c:8f:ca:ef:96:b3:4c:a6:06:ce:fc:36:4b:f9:02:62:
b0:ed:5a:2e:5f:c2:92:63:ad:66:6e:89:a3:2b:3b:d6:b1:4a:
58:82:74:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:07 2025 by rpki-client