Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bc2e97-3b11-49ad-b730-47936f8662be/1/ZwBDDHGfZj1L8IkqEwOLFJ9Ma1o.roa
File: ZwBDDHGfZj1L8IkqEwOLFJ9Ma1o.roa (raw, json)
Hash identifier: qXYoZO956JXeU+aSXsEZ9tGxNP7Z35elemnbr7ukuzM=
Subject key identifier: 67:00:43:0C:71:9F:66:3D:4B:F0:89:2A:13:03:8B:14:9F:4C:6B:5A
Certificate issuer: /CN=ed0c0ff3b474e760e8474a2c3d0eedb5be5398a6
Certificate serial: 018571154B2157A60181B524810F60B71363
Authority key identifier: ED:0C:0F:F3:B4:74:E7:60:E8:47:4A:2C:3D:0E:ED:B5:BE:53:98:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7QwP87R052DoR0osPQ7ttb5TmKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bc2e97-3b11-49ad-b730-47936f8662be/1/ZwBDDHGfZj1L8IkqEwOLFJ9Ma1o.roa
Signing time: Mon 02 Jan 2023 06:04:58 +0000
ROA not before: Mon 02 Jan 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 5.253.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:4b:21:57:a6:01:81:b5:24:81:0f:60:b7:13:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed0c0ff3b474e760e8474a2c3d0eedb5be5398a6
Validity
Not Before: Jan 2 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6700430c719f663d4bf0892a13038b149f4c6b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:e4:26:88:61:3f:ae:dd:86:da:90:b5:64:
a2:34:59:1f:3a:f6:7b:31:92:3d:ed:5b:00:48:80:
12:50:a3:c5:3b:de:a9:4f:53:26:48:52:d8:bb:3b:
b5:d1:a0:9b:31:67:17:50:51:57:51:1f:85:98:6b:
b8:86:07:fe:02:56:53:fb:f6:7d:25:74:10:46:3c:
da:26:59:0a:a8:2c:dc:3a:01:7f:91:e3:31:68:b2:
50:f6:49:dd:d6:2b:ff:26:fd:80:ce:bc:6f:f9:89:
2d:ac:9c:cc:78:8c:91:b4:e7:cc:73:8d:23:ce:e6:
5b:d1:ac:9f:3e:c7:b5:80:ec:10:a7:d6:26:65:b5:
31:a7:cc:04:5d:fc:2c:45:98:69:c4:4a:89:8a:7b:
fd:8b:3f:fa:28:48:8f:62:76:91:f4:d8:d5:c1:07:
be:5e:5b:8b:1f:82:52:1b:70:57:38:37:29:31:b6:
54:c8:a5:f2:9f:55:65:5b:fc:45:18:d8:d3:08:7e:
64:c6:a4:05:88:8a:a3:6d:6e:3f:04:78:0f:a5:62:
c8:53:8b:38:06:9b:2d:f6:d0:8e:22:d4:41:c5:f6:
32:4b:37:c9:3b:25:a2:12:cf:d3:1e:2a:01:42:25:
13:e8:2c:e9:17:50:b6:76:08:86:27:73:17:18:e0:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:00:43:0C:71:9F:66:3D:4B:F0:89:2A:13:03:8B:14:9F:4C:6B:5A
X509v3 Authority Key Identifier:
keyid:ED:0C:0F:F3:B4:74:E7:60:E8:47:4A:2C:3D:0E:ED:B5:BE:53:98:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7QwP87R052DoR0osPQ7ttb5TmKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bc2e97-3b11-49ad-b730-47936f8662be/1/ZwBDDHGfZj1L8IkqEwOLFJ9Ma1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bc2e97-3b11-49ad-b730-47936f8662be/1/7QwP87R052DoR0osPQ7ttb5TmKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.226.0/24
Signature Algorithm: sha256WithRSAEncryption
07:46:7c:01:10:22:1b:15:9a:e0:4a:c0:7f:38:a0:d3:11:ea:
a4:6c:bf:2d:53:ee:15:52:35:a0:85:4a:fa:ca:7a:93:00:93:
93:6c:fa:4c:dc:1e:46:12:90:e6:6a:e9:ba:e1:f3:57:be:ed:
4f:66:41:c8:8c:2e:b1:45:11:09:cd:98:2f:81:fb:83:00:6a:
a2:e6:d2:fd:48:00:02:0e:72:3f:4b:ec:12:0c:0a:42:28:40:
72:98:c0:b1:fb:82:f5:39:67:f6:7f:d2:91:95:f6:db:b4:53:
9f:76:cf:e6:10:f7:b2:0b:4b:ff:11:0c:5b:a4:d9:19:c9:06:
57:28:e9:f0:83:1c:c8:d9:db:72:be:79:38:a7:f1:60:83:c9:
79:8f:c7:51:55:ef:9c:32:96:e5:5b:a3:3f:aa:67:6e:83:c0:
9a:dd:9f:38:11:62:5d:52:28:9c:bd:08:7f:33:fa:c2:16:7c:
95:a8:a5:52:bd:16:0e:46:d6:31:6a:f2:6b:62:cc:c6:4b:59:
a3:4e:09:df:95:4b:99:20:60:14:86:2c:d4:8d:79:58:dd:67:
d8:f8:59:13:b0:31:be:98:cc:ca:6d:68:8b:f2:c9:6e:a0:f1:
47:39:1f:fb:7c:a1:6f:4e:d8:4d:71:f0:f9:03:c3:dd:e5:e6:
8c:b7:c4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:53:45 2025 by rpki-client