Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/ZZmhbXaiwnlvoTzrIPKT393zeQY.roa
File: ZZmhbXaiwnlvoTzrIPKT393zeQY.roa (raw, json)
Hash identifier: h/DL+p5qUcE0X2Aplnohyf125A4LIxDH/WhCa+Rudu4=
Subject key identifier: 65:99:A1:6D:76:A2:C2:79:6F:A1:3C:EB:20:F2:93:DF:DD:F3:79:06
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019428273E7A85EC27B953C22C4D42F6325B
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/ZZmhbXaiwnlvoTzrIPKT393zeQY.roa
Signing time: Thu 02 Jan 2025 17:54:08 +0000
ROA not before: Thu 02 Jan 2025 17:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 45.87.48.0/22 maxlen: 22
45.91.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:3e:7a:85:ec:27:b9:53:c2:2c:4d:42:f6:32:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6599a16d76a2c2796fa13ceb20f293dfddf37906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:85:ee:69:70:38:10:d7:82:00:b3:9b:ca:
81:a8:36:7c:8c:c7:17:4f:a0:99:d3:17:2f:d7:62:
c8:ad:45:ad:67:e1:7b:a2:2a:d7:9a:53:ea:ee:6c:
88:ad:3f:39:04:f9:0b:e9:c8:f0:12:fe:2b:85:9c:
ab:0d:a6:66:d8:59:a6:29:60:9d:3e:88:6a:79:5b:
de:ef:d2:7b:e8:9f:88:23:56:c7:c8:75:2b:ff:00:
91:78:81:f9:be:ed:d6:ca:c7:dc:44:98:c7:e9:f7:
68:a2:b5:8f:ec:ef:e8:8c:e5:85:df:f7:02:54:9a:
73:bc:93:2f:c5:e0:26:7e:a8:8b:9c:32:41:50:c8:
3e:3f:b3:ce:df:84:8d:61:0c:c2:ee:86:f8:4e:53:
ae:86:44:76:40:46:67:d0:1f:4a:b7:5d:d6:71:cc:
ee:b8:cc:b1:21:69:0f:e9:02:b8:e1:d7:c9:4d:d5:
33:9c:62:89:aa:54:13:13:c5:f5:26:66:a0:06:5c:
a6:cd:d3:87:3a:d9:4c:b4:c3:d5:ee:c9:df:88:41:
58:26:a3:2f:d7:e2:27:d6:5a:b3:a9:7a:5a:74:68:
31:93:50:9f:f4:61:e5:cc:00:e3:64:e2:cc:e4:9d:
b2:af:b4:6a:8c:ff:9d:db:24:18:f2:7b:5b:af:05:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:99:A1:6D:76:A2:C2:79:6F:A1:3C:EB:20:F2:93:DF:DD:F3:79:06
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/ZZmhbXaiwnlvoTzrIPKT393zeQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.48.0/22
45.91.164.0/22
Signature Algorithm: sha256WithRSAEncryption
76:b3:6f:b5:12:da:a6:0c:95:89:46:32:86:83:79:90:be:c5:
ae:83:72:82:57:4d:8a:18:67:77:94:e7:cb:4e:da:b8:8d:f8:
3f:f7:8d:e0:2c:31:59:01:93:51:14:58:71:b0:b1:0c:26:0a:
9c:86:b6:30:70:ef:88:f2:ad:17:17:49:01:6a:d8:a4:35:09:
fc:27:c3:75:51:72:66:5d:0d:d7:2b:d2:28:37:8c:57:ad:ef:
82:5d:0c:b8:4b:fb:d2:aa:74:9c:39:48:85:a0:22:bb:0f:ee:
94:27:e1:3d:be:fe:42:75:7b:f0:c9:ea:0d:e2:a3:a3:2a:94:
41:61:b2:72:6d:41:b4:80:70:f2:ea:8d:80:ce:5a:51:01:b8:
e6:21:ae:b0:23:40:c8:47:8e:82:6f:86:59:ba:8b:f9:59:b3:
5f:d0:f1:b4:9e:f2:9c:e0:27:a5:83:4e:03:74:73:3c:41:d7:
8a:6e:6b:72:12:c5:94:83:26:6d:6e:cb:b3:ea:7c:23:4a:70:
29:b2:0f:90:9c:e3:b8:cc:6d:ff:24:e7:1c:b8:f4:f9:88:ae:
97:53:38:5c:da:79:b3:36:f1:46:ad:c1:4b:25:6f:e0:e4:cf:
bd:0e:1f:36:03:a7:2c:fd:83:d2:d0:15:8c:a3:f4:8e:aa:b3:
28:cb:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:47 2025 by rpki-client