Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/zdg7rEYd8dQenAi-bfO2kFmvZDk.roa
File: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (raw, json)
Hash identifier: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=
Subject key identifier: CD:D8:3B:AC:46:1D:F1:D4:1E:9C:08:BE:6D:F3:B6:90:59:AF:64:39
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BC181A03AF731DD1FCAAE7CA47986
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/zdg7rEYd8dQenAi-bfO2kFmvZDk.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 212.16.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c1:81:a0:3a:f7:31:dd:1f:ca:ae:7c:a4:79:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdd83bac461df1d41e9c08be6df3b69059af6439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:a1:be:9a:fa:d6:f4:99:c6:0e:3b:12:70:
28:9d:7a:43:a4:82:32:af:63:1c:09:a8:e6:c1:99:
4d:49:d7:a7:69:2f:b8:e3:50:49:e4:74:69:d7:98:
90:ae:5d:5e:b5:db:0c:b9:d6:50:14:bf:3a:e7:97:
01:c0:f7:aa:36:24:57:48:cd:23:6a:4c:4a:bf:c7:
5f:13:ae:6b:47:0d:6b:5c:62:46:62:fe:10:ea:61:
87:85:85:c2:d8:42:31:83:6c:9d:ad:0a:b5:0a:40:
ce:65:51:e8:87:0d:9b:8d:de:6f:7a:f7:30:6b:f7:
ab:7f:80:d7:b9:30:82:03:76:d5:2a:67:9c:61:4a:
c6:10:29:ef:9a:d0:c5:5b:b3:aa:ac:59:2d:66:9e:
73:9c:06:e2:b4:56:33:80:0c:0d:94:45:a3:3c:19:
1f:aa:50:b9:e0:7a:1d:b7:2a:94:a5:be:d4:a9:18:
3d:70:f3:8d:8c:23:59:a5:e2:c4:6d:6a:2a:89:57:
e5:2d:a2:a7:76:2d:ef:07:57:e3:37:37:21:7a:b8:
b5:19:ca:72:25:4c:15:ce:e1:3e:10:68:bc:8e:96:
40:13:f5:28:88:ad:d1:4a:71:8a:23:3b:f0:14:12:
f4:2b:06:d1:c4:06:a3:3a:0f:9a:25:1c:34:d8:bb:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:3B:AC:46:1D:F1:D4:1E:9C:08:BE:6D:F3:B6:90:59:AF:64:39
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/zdg7rEYd8dQenAi-bfO2kFmvZDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.34.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:65:5f:35:a8:c6:12:50:4c:ee:af:e8:ca:ce:e3:2f:ba:11:
92:35:c9:c4:f9:95:2b:58:1b:ee:aa:2b:17:7c:da:13:78:0c:
84:fc:3e:b0:4d:47:d0:68:e1:fa:1e:6b:47:6f:0a:6f:23:2f:
4c:96:ad:ec:bd:42:f5:40:27:fc:2e:0f:d1:d9:77:c0:70:f5:
c9:6b:3d:54:ff:3f:a0:e8:a4:a7:bf:88:c9:c2:46:6d:f2:7a:
7f:3e:a8:54:01:a2:d2:73:36:e5:02:e8:d4:90:05:3c:e9:79:
e1:30:83:32:ec:23:d0:75:f1:2e:f9:f6:d3:68:b9:ef:db:c5:
b6:2a:c6:70:61:42:0a:cc:59:f1:9e:1b:c9:3d:03:9b:55:aa:
75:5f:4d:fb:46:1c:e9:d0:42:0c:4d:13:5b:1d:01:27:73:91:
c3:ed:17:38:53:6b:7d:7c:1c:20:05:3a:a9:e3:50:a7:65:6b:
dc:fb:e3:0a:6d:80:36:4f:7f:b0:c6:71:a8:31:da:e0:73:46:
72:52:41:6e:14:16:92:e9:ba:37:c9:d5:17:bf:15:3e:b0:2a:
4e:2b:3d:cb:3f:a7:4c:dd:20:f5:ed:89:0b:3f:29:83:ca:a4:
e6:05:95:5e:cf:72:ae:77:ef:68:68:78:00:92:de:93:6b:25:
56:48:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:58 2025 by rpki-client