Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/ZPNM7KgQKfcGyvV7_2daewtnAlI.roa
File: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (raw, json)
Hash identifier: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=
Subject key identifier: 64:F3:4C:EC:A8:10:29:F7:06:CA:F5:7B:FF:67:5A:7B:0B:67:02:52
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 019422FBF6CC1BB0C6BAD7AD2D0597B4187B
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/ZPNM7KgQKfcGyvV7_2daewtnAlI.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24971
IP address blocks: 91.216.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f6:cc:1b:b0:c6:ba:d7:ad:2d:05:97:b4:18:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64f34ceca81029f706caf57bff675a7b0b670252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:63:90:40:a1:03:d5:6f:8d:7b:5c:93:28:4f:
30:44:f3:3f:a1:10:3b:29:9c:ab:e2:26:ee:88:30:
0f:e4:aa:93:fa:85:02:7f:21:aa:50:5b:3d:e0:9d:
12:a0:1a:9c:c1:e4:df:97:61:61:70:45:49:67:db:
08:f8:07:2f:ad:00:19:c2:56:45:ef:d6:77:7d:96:
4b:35:a1:ca:95:30:04:16:e9:f2:da:e0:c0:72:62:
f4:df:57:af:df:94:6b:0f:93:86:f0:68:ab:cf:03:
51:55:64:ae:90:d7:93:e1:69:a3:99:31:15:e8:43:
a1:ec:8b:b4:e4:bc:ca:37:41:ca:65:a3:11:32:76:
bd:c6:cc:75:2a:42:81:64:4a:fe:eb:fb:ee:03:ed:
06:bc:52:84:87:85:2c:32:a4:23:0d:c4:14:18:17:
8d:2c:66:48:80:8b:ae:07:d8:8a:f7:c4:99:29:74:
97:77:98:da:ed:96:2b:2c:4f:04:2e:10:8b:e9:bc:
8f:fc:3b:f2:76:ba:dd:14:81:05:f1:fe:e0:16:bb:
7e:32:58:5b:d9:9c:1d:46:7d:2c:c4:c4:9a:78:4e:
a5:99:28:dc:ae:87:f8:7d:1a:2a:5c:7d:e1:ca:a4:
e4:2e:da:94:66:a2:b6:85:d1:86:ec:1f:b2:f0:1a:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F3:4C:EC:A8:10:29:F7:06:CA:F5:7B:FF:67:5A:7B:0B:67:02:52
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/ZPNM7KgQKfcGyvV7_2daewtnAlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:48:8b:51:46:56:1c:db:0d:e4:fa:86:5e:0c:02:10:12:41:
a7:47:a5:6d:75:33:ff:68:25:bb:3c:07:ed:69:84:1e:3b:8b:
59:27:ba:db:19:05:51:26:c7:c1:e9:a3:25:b3:40:99:b5:32:
da:b5:56:98:04:c2:ce:c3:fb:a7:87:d8:b5:ee:d5:c9:4c:4e:
85:ca:16:9f:f0:db:9d:b5:70:d2:f6:0a:08:56:97:1b:cd:ca:
82:8a:67:5f:c4:34:42:67:fb:c4:b9:0b:4d:43:c1:55:b7:11:
12:02:5b:c3:b9:df:da:6d:6a:b8:04:1d:6a:a1:9e:16:7f:83:
5d:39:44:04:27:1f:ca:b5:72:7d:65:85:a6:3a:2e:ec:4f:3d:
63:60:db:5a:a6:9f:9f:30:b3:7c:90:09:a9:17:b1:c6:37:d9:
46:19:43:ae:d4:bd:e4:5a:60:f9:08:b2:06:91:b8:b8:0a:6e:
72:c8:6f:b7:68:c9:08:e8:df:6c:3b:15:0f:b0:e0:c4:f5:61:
56:d5:29:64:ff:d1:44:bb:a5:68:7d:db:72:9d:ca:44:1b:dc:
37:2f:60:f9:3c:ae:b5:57:3a:80:9c:3e:50:15:d0:fa:b8:81:
de:e1:b8:f3:fa:02:8b:0a:0b:d3:15:92:4e:79:37:ab:b7:aa:
b8:15:77:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:22:44 2025 by rpki-client