Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa
File: 2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa (raw, json)
Hash identifier: 1DssY9QtTEut1NYlrrYk3dvjYOvc/xqpRvFLT8I4S4E=
Subject key identifier: D9:9B:E9:67:4B:19:E8:FE:B2:75:38:82:0C:41:68:94:A3:2F:7E:1D
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019426D9AB7C1ABAE23F1064A41E7DA5298D
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa
Signing time: Thu 02 Jan 2025 11:49:46 +0000
ROA not before: Thu 02 Jan 2025 11:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62336
IP address blocks: 213.244.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ab:7c:1a:ba:e2:3f:10:64:a4:1e:7d:a5:29:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Jan 2 11:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d99be9674b19e8feb27538820c416894a32f7e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:6e:ff:19:14:58:53:97:ac:c7:db:08:a3:
32:c3:9b:64:9b:5b:c5:3d:19:0f:39:a0:79:c9:df:
df:51:b2:b5:df:c7:a4:c2:66:11:70:61:95:fb:df:
c1:a5:34:34:6c:57:45:69:14:9f:8d:dc:e5:6b:1e:
a6:f6:19:ec:f9:59:59:ad:40:38:ee:ab:50:d4:d1:
61:23:d0:8f:c4:ff:2f:b3:10:31:7c:e3:30:88:f7:
d3:47:61:1f:6b:e8:db:41:a4:ca:7b:32:6c:b6:67:
a6:0b:e2:c7:8f:79:58:7d:06:c0:ab:20:b2:63:69:
35:96:0f:1c:1e:70:ac:a9:38:d5:03:ad:72:81:d3:
be:c8:a4:77:26:f2:2a:9a:11:33:03:1a:9d:80:c7:
cc:8a:15:65:40:88:d4:1e:18:27:57:d5:bb:ae:d7:
b3:95:15:5f:f6:0c:31:db:94:a5:1f:54:28:f7:b6:
93:8b:3f:a9:20:46:0d:77:3c:14:f3:b3:85:09:2e:
64:d2:9e:a9:1a:e2:16:ef:d3:61:46:17:a5:8a:bb:
77:75:eb:a1:e7:86:42:3a:d0:a7:a7:0b:6b:bb:81:
de:72:34:04:b1:fa:cb:07:f8:e2:91:41:86:3b:99:
b4:bb:dd:ff:22:cd:26:36:8c:9f:97:c3:f6:3e:d2:
a3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:E9:67:4B:19:E8:FE:B2:75:38:82:0C:41:68:94:A3:2F:7E:1D
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/2ZvpZ0sZ6P6ydTiCDEFolKMvfh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.244.48.0/20
Signature Algorithm: sha256WithRSAEncryption
73:19:d0:25:c7:30:5a:bc:7f:74:a2:9e:54:ae:e5:6e:f5:8f:
7f:07:b9:3a:5e:31:e5:6f:48:d2:45:61:3b:ac:7c:91:06:0f:
63:63:a4:9d:e0:d3:cd:9c:db:72:1a:6d:0f:b8:de:dc:65:1d:
74:27:97:94:29:b5:cc:1b:00:c7:d8:1b:c1:3d:c1:bf:41:da:
e1:2e:06:ab:01:2c:2a:97:a8:9d:66:df:ef:15:6b:0d:31:18:
d1:4c:6c:53:23:eb:d1:ae:7f:4a:58:4d:c3:3a:5e:59:f2:dc:
35:f3:b8:27:e9:3a:7a:7d:1b:cd:5d:5d:0c:e1:0f:84:e0:7d:
42:93:86:f7:74:80:5b:bf:ff:8f:d4:b6:09:c0:ef:ee:e4:c6:
61:b4:40:f2:f0:00:9f:6e:13:0f:05:c5:ed:bc:47:c0:15:76:
6e:98:3e:5d:24:2d:5b:7b:d5:58:09:c0:b5:2e:db:7a:b9:c7:
09:86:29:e9:4c:fd:ea:63:d9:c5:a2:c4:73:e1:1b:2b:70:af:
72:c8:c6:ec:c9:9f:76:c3:62:15:49:ed:b3:04:22:31:aa:4c:
fe:d4:97:e6:19:b2:2a:41:d6:c1:db:31:49:ca:ed:1e:20:d3:
e7:dd:b3:d8:3e:77:b1:73:aa:b7:56:44:78:16:f2:09:17:69:
a0:43:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:18 2025 by rpki-client