Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa
File: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (raw, json)
Hash identifier: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=
Subject key identifier: 64:B2:06:93:43:81:36:98:16:BC:81:0F:33:71:56:EB:84:F2:57:A4
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 0194252134EFB9C243A8810985A7CF1BDA21
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa
Signing time: Thu 02 Jan 2025 03:48:40 +0000
ROA not before: Thu 02 Jan 2025 03:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44049
IP address blocks: 91.199.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:34:ef:b9:c2:43:a8:81:09:85:a7:cf:1b:da:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Jan 2 03:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64b206934381369816bc810f337156eb84f257a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:12:ca:fb:b9:82:93:ff:75:25:c4:e0:83:
82:26:64:eb:cc:bf:96:38:4d:7a:e3:03:8d:be:be:
59:cb:7e:47:b5:27:b5:3a:bd:71:5f:85:3b:39:d3:
2e:5b:d6:40:47:4d:c7:f5:6e:a0:4d:d5:8e:eb:de:
3f:6c:a5:68:07:97:67:c4:64:39:0d:b3:2e:1c:b7:
b0:46:68:ad:82:41:ef:4b:e7:ed:1c:c6:1c:d1:0d:
08:49:a2:51:6a:14:ce:b8:2e:ff:e7:9a:96:ca:6f:
d2:fc:66:a0:59:c0:a0:60:59:8d:30:7e:f0:e8:b5:
27:79:06:10:73:c7:1f:9f:cb:b8:bb:4a:cd:2a:ac:
0a:0e:29:9f:57:ae:a6:6f:fc:e3:1a:6d:f6:ae:f9:
5b:90:4e:d5:f7:9b:65:c2:93:a9:83:6c:12:47:3b:
3f:08:40:26:d8:86:36:01:c0:f5:ef:72:06:91:fd:
74:a5:89:31:4b:94:9f:8e:90:18:f6:d3:ee:10:d9:
71:a5:13:27:4d:60:62:f3:f8:e5:5c:ea:7e:ca:1f:
5f:18:41:f8:dc:a1:f9:52:3f:3f:91:28:3f:27:dc:
a9:96:92:a0:7d:f3:24:af:5e:3e:24:f5:c0:93:bc:
fe:91:17:62:5f:57:6b:f8:fa:d1:3d:f5:11:4a:7e:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B2:06:93:43:81:36:98:16:BC:81:0F:33:71:56:EB:84:F2:57:A4
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.13.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d0:a4:60:b9:d8:87:f8:55:62:bd:69:f8:ac:ef:74:df:95:
b0:ef:c5:95:ae:cf:f3:d9:fa:a1:49:c1:24:2b:17:40:ca:71:
a3:e0:c5:0f:23:12:05:ab:2b:f0:d4:84:2f:fc:d3:0f:7c:74:
2e:f1:5a:fe:8a:54:89:26:15:ef:d9:bb:18:e7:02:2c:70:b5:
60:53:83:eb:be:bd:ae:b3:58:a4:b6:28:55:b1:f7:a6:f3:d1:
75:0a:57:bd:87:e4:df:e7:c0:b9:2a:1a:82:45:2e:68:3a:fe:
a1:c1:71:65:4b:38:e8:b4:d0:db:54:3d:31:fb:f9:80:e8:29:
a1:7a:c0:09:9f:55:3d:63:b0:3c:13:72:42:19:26:28:8f:47:
e3:66:9d:f6:e2:38:34:3c:33:3b:b6:13:ef:38:c6:d4:76:61:
f1:21:57:1d:2c:90:ab:b3:41:97:a6:4f:f3:93:05:1f:12:72:
44:93:a0:bc:23:94:10:84:9f:05:25:1f:3c:8b:65:49:4c:3f:
88:51:4f:1f:69:10:9c:64:e5:2a:12:e0:af:1e:ea:79:16:d4:
8e:9b:79:be:50:e6:c5:36:a8:0a:8d:57:2d:b5:9a:08:25:aa:
4d:8d:08:44:15:a4:11:4a:aa:07:31:8b:8a:e2:92:60:39:15:
1d:24:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:23 2025 by rpki-client