Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/zZBnjqxF7NFh2U2L3EOnE2dcfmI.roa
File: zZBnjqxF7NFh2U2L3EOnE2dcfmI.roa (raw, json)
Hash identifier: 4pUPgeBg+jHqauaZ1NZ1lqCQ55HboVytt+469Tqmmyw=
Subject key identifier: CD:90:67:8E:AC:45:EC:D1:61:D9:4D:8B:DC:43:A7:13:67:5C:7E:62
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 018573F180B2C921E81A951A0EB7335196AE
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/zZBnjqxF7NFh2U2L3EOnE2dcfmI.roa
Signing time: Mon 02 Jan 2023 19:24:45 +0000
ROA not before: Mon 02 Jan 2023 19:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33843
IP address blocks: 45.150.68.0/24 maxlen: 24
46.231.136.0/21 maxlen: 21
85.236.192.0/19 maxlen: 19
2a01:1ee::/32 maxlen: 32
2a01:1e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:80:b2:c9:21:e8:1a:95:1a:0e:b7:33:51:96:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Jan 2 19:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd90678eac45ecd161d94d8bdc43a713675c7e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:3e:a3:47:c3:eb:96:22:86:71:1e:f0:7f:
9f:b4:d7:dc:63:ed:04:76:43:17:23:7d:27:d8:6b:
3f:5d:9c:24:27:2f:7b:0f:13:74:03:82:e6:11:c9:
84:b7:2c:06:4e:a0:0e:04:cf:27:16:8b:de:68:ce:
fa:43:38:ee:9b:83:c0:48:98:e2:f9:14:e1:c3:39:
57:ba:4e:70:58:9d:1e:5c:4f:35:1e:ac:8b:20:43:
f5:31:23:9d:98:c5:b7:64:cd:df:d2:a4:e6:c5:ca:
40:23:05:a6:f4:5d:8f:80:6a:4d:44:f8:02:ca:7b:
4e:3d:f2:33:71:5c:86:1b:4a:78:62:0e:61:35:c5:
69:77:e1:87:a2:7c:9c:31:c6:e0:6c:5b:22:15:8c:
26:d0:4f:17:05:cc:6f:9d:56:9d:5d:d1:94:85:94:
03:8c:80:e5:bd:ea:b3:49:cf:20:e7:d5:02:b8:74:
1e:30:d4:98:f5:9a:ad:80:c5:b2:93:8f:22:00:a6:
c4:97:15:7f:cb:c9:8a:fe:66:fd:c1:37:22:83:18:
0a:c8:e2:15:69:f9:0c:80:3a:c3:67:e5:81:8c:ae:
4d:ad:63:d0:e6:81:d9:d7:84:c2:44:ef:65:2a:23:
52:a4:72:a8:4c:5b:d2:3d:45:d0:f2:c3:de:92:be:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:90:67:8E:AC:45:EC:D1:61:D9:4D:8B:DC:43:A7:13:67:5C:7E:62
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/zZBnjqxF7NFh2U2L3EOnE2dcfmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.68.0/24
46.231.136.0/21
85.236.192.0/19
IPv6:
2a01:1e8::/32
2a01:1ee::/32
Signature Algorithm: sha256WithRSAEncryption
5d:a9:73:08:a5:b6:a6:21:a9:74:03:46:fa:38:6f:d2:6c:8c:
6f:64:41:53:1a:5a:61:82:4a:27:92:62:c2:6e:ef:ad:32:6c:
40:de:32:9a:6c:f1:f8:cb:03:12:00:e2:78:10:2a:23:ca:5c:
7d:de:70:a6:73:b5:6e:81:bc:3c:3a:a3:a7:cf:a6:2e:67:de:
cc:7f:c9:29:01:99:40:19:95:e4:3a:97:ad:85:fe:fb:ac:5a:
16:38:fa:a7:67:ed:a4:20:22:a3:04:99:4e:e0:76:57:ca:27:
e3:a5:c0:ee:80:6b:56:b6:e9:9e:6a:ce:12:94:b9:4a:56:f9:
04:32:58:a5:2e:89:1a:47:25:5a:50:f0:27:14:50:f5:20:d1:
5a:ac:86:14:f4:9e:93:76:78:f1:db:f3:0f:23:43:37:24:c2:
81:fb:43:62:71:9d:ea:38:09:73:0e:bd:3f:3b:e8:8a:8a:82:
b5:84:69:d9:ef:3f:02:2a:07:49:8a:d7:12:8c:f9:0b:f6:98:
79:54:b3:4d:27:74:52:8a:42:7b:72:ef:46:f4:86:54:cb:11:
96:bf:71:a5:b0:bc:09:36:71:a2:20:99:1e:79:95:62:ba:6e:
b2:b9:55:f1:92:1d:4a:6e:42:d9:11:a0:5a:68:3b:05:a0:04:
05:70:1b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:48 2025 by rpki-client