Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa
File: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (raw, json)
Hash identifier: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=
Subject key identifier: CD:E6:5F:0C:5E:85:41:55:DF:C9:75:1F:93:DC:91:7D:EA:09:64:80
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 0195CDD2F7F18FA559A88B053EEF8104CCFA
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa
Signing time: Tue 25 Mar 2025 15:01:50 +0000
ROA not before: Tue 25 Mar 2025 15:01:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213445
IP address blocks: 45.8.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:d2:f7:f1:8f:a5:59:a8:8b:05:3e:ef:81:04:cc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Mar 25 15:01:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cde65f0c5e854155dfc9751f93dc917dea096480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:ef:2f:19:c7:b9:27:82:98:fe:7a:15:a6:
c3:3f:b2:58:52:c7:e4:20:99:aa:8b:b5:02:42:5f:
e9:af:2a:ce:fe:69:49:95:b6:84:86:55:64:c7:99:
5b:61:4a:57:cd:4a:d6:61:cd:10:19:69:2f:59:4c:
d3:2a:92:33:04:ae:82:be:83:d1:1f:fb:87:56:34:
a8:d7:df:a6:fd:d3:38:49:ab:75:c7:e3:e0:85:ff:
c3:98:8b:2c:7b:b1:90:04:d1:5e:b9:16:c3:88:5e:
a8:b3:df:2e:30:5a:ca:7a:df:5b:88:ea:d2:ed:b5:
a9:03:66:67:65:79:86:5d:e8:1e:55:79:a5:19:85:
bc:04:e1:59:df:a9:c5:d1:d6:d2:38:b3:15:57:c1:
5f:c3:65:60:5d:38:ef:08:1f:c1:31:27:48:d0:15:
54:f5:c1:f6:74:b9:31:89:c9:f8:2f:d3:5c:f7:c5:
cc:44:79:58:c8:46:5c:e7:dc:02:5e:6d:71:0f:7e:
76:83:6d:1c:29:88:d6:b4:16:82:30:9a:20:0a:c0:
86:2a:da:32:30:e4:ba:5c:46:62:ca:23:fe:ba:0e:
71:36:e3:fa:30:72:35:af:0a:ff:4e:9a:c4:0f:28:
8c:33:d0:d9:7f:29:4d:dd:51:d1:2c:09:d5:6e:df:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:5F:0C:5E:85:41:55:DF:C9:75:1F:93:DC:91:7D:EA:09:64:80
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5c:e1:9a:b8:39:d1:01:e7:cb:d1:40:29:4a:8b:70:67:b8:
bc:1f:5b:32:26:9d:aa:b4:6e:d8:48:56:2a:77:b7:e0:0c:32:
8c:b7:b9:e1:96:44:7a:de:a0:45:2b:f4:80:de:51:60:dc:c2:
60:af:3d:50:eb:6f:39:ba:9a:ff:32:fd:28:a4:73:41:ce:29:
7e:b6:33:30:bf:b2:75:39:b1:9f:03:8e:f5:9e:29:a8:d1:57:
25:07:b1:f5:c1:90:6f:5d:8c:13:80:47:bc:5c:e9:87:0b:63:
19:a6:d6:fb:23:eb:a6:6d:dd:01:3e:7f:9f:9d:cd:5b:8c:20:
94:99:d1:1d:1a:17:47:9a:ff:0d:7d:e3:35:76:36:b9:84:ce:
e3:7d:4f:8d:d8:37:99:3d:9c:2e:ad:97:6b:b7:30:b2:b1:cb:
7f:a6:48:87:2d:95:ef:1f:32:3a:3e:81:2b:aa:0c:41:b6:1f:
f5:04:b5:ee:4a:90:8f:3a:e4:fa:27:33:99:9e:d3:e7:2a:2c:
b1:7d:3a:08:2f:cf:5f:b3:2f:64:9d:ea:c1:b9:36:fe:a4:63:
2f:62:a7:51:a6:84:89:ab:2a:30:28:d0:b4:78:fa:06:b6:5a:
76:16:eb:d3:0f:ac:31:e6:31:04:ce:ab:79:cf:f8:d3:b7:7f:
72:f6:da:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:17:23 2025 by rpki-client