Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/rznOCTPZyadrsSzyPCChz69ZAxU.roa
File: rznOCTPZyadrsSzyPCChz69ZAxU.roa (raw, json)
Hash identifier: 2zkH1SRaKlvMmrIdmVipWy+g7uH2rfqKdzk0RNlqPlA=
Subject key identifier: AF:39:CE:09:33:D9:C9:A7:6B:B1:2C:F2:3C:20:A1:CF:AF:59:03:15
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FFA03918866FC46FB48BCA77DB23218
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/rznOCTPZyadrsSzyPCChz69ZAxU.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 109.172.80.0/22 maxlen: 22
178.130.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:03:91:88:66:fc:46:fb:48:bc:a7:7d:b2:32:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af39ce0933d9c9a76bb12cf23c20a1cfaf590315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:7c:ed:15:df:c7:c6:00:cc:77:68:ec:85:
51:7c:b1:b3:4b:06:7d:53:e8:7f:6c:af:22:cf:98:
2d:f9:60:23:36:c7:56:6c:78:aa:22:19:8f:47:e4:
f1:37:70:a5:ff:2f:fd:12:4f:9d:a8:90:e5:f0:68:
c8:75:26:fe:16:14:26:5b:44:61:5c:5c:7b:ad:2c:
7b:04:ff:1a:9e:18:8b:dd:d9:b2:e9:98:dc:81:c1:
73:f6:b3:44:33:39:3b:62:c6:6c:fd:7f:65:25:09:
aa:31:0f:4b:be:ee:51:b5:c8:70:7a:5a:1b:2a:63:
43:96:a4:10:1a:94:30:75:fb:86:2e:60:91:2c:d7:
d7:97:b6:04:cc:e4:f9:94:dd:40:b7:7b:f2:f1:97:
ff:39:ca:26:85:de:6e:50:93:13:61:03:59:7b:44:
1a:2d:31:79:ef:43:f8:70:db:1d:8b:e9:af:89:04:
ac:41:07:74:9c:3d:08:71:23:a7:30:e7:25:e5:df:
35:e0:af:2f:4d:8e:d2:5b:97:cd:f7:d7:42:fb:62:
e5:25:b3:7c:64:9a:5c:16:16:e1:8f:d6:63:32:a4:
44:50:f5:87:c8:0d:95:d6:f7:38:e0:51:df:c5:37:
73:f0:88:3e:8d:a6:39:79:d6:37:99:b5:30:00:86:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:39:CE:09:33:D9:C9:A7:6B:B1:2C:F2:3C:20:A1:CF:AF:59:03:15
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/rznOCTPZyadrsSzyPCChz69ZAxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.80.0/22
178.130.132.0/22
Signature Algorithm: sha256WithRSAEncryption
73:8b:be:21:76:a3:45:ce:33:10:22:53:63:71:fc:9e:61:e1:
ab:ca:52:ae:21:7d:f7:7f:7c:1a:de:98:15:e6:b6:ad:ec:ea:
15:5d:46:99:10:92:8b:59:ce:c8:c6:f9:b1:de:0c:dd:0a:40:
fe:51:4d:48:fb:53:25:90:12:e1:19:e0:af:d6:26:49:e7:03:
4c:9b:bd:96:5b:f8:c0:81:51:0e:8d:76:1b:bb:3c:bd:82:a8:
ad:65:19:9a:54:c8:dc:5e:ff:5b:c4:af:6c:d2:6d:90:1b:92:
97:a0:6f:ad:8a:32:7f:a2:27:54:14:cb:c0:32:82:2d:a3:d9:
0b:8a:c2:f8:4f:25:51:5f:87:12:a7:cc:00:4e:fc:22:55:8b:
b0:fb:72:94:14:ec:4d:5a:6d:11:be:01:aa:e4:a8:e1:4e:3d:
3e:54:66:81:a7:37:58:8e:52:77:99:c1:c1:32:3e:4a:e4:19:
b6:71:c2:24:a0:e2:40:98:07:61:79:1a:a1:8a:39:37:b6:26:
4c:af:5f:f1:36:56:74:97:8d:e7:0b:de:25:1d:d1:f3:cb:b9:
33:eb:95:d6:e6:6c:b1:97:46:e1:0f:c4:78:23:7b:ae:68:d1:
36:fe:31:a6:f9:ae:3c:42:b1:9e:2e:97:fa:78:2d:28:43:33:
8a:3b:fc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:05:17 2025 by rpki-client