Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/ZMF2Y9q561kXaTBQ4t89zr0lDYc.roa
File: ZMF2Y9q561kXaTBQ4t89zr0lDYc.roa (raw, json)
Hash identifier: UdPY/zqbZWjWwLmgxqb4FQw1KPzVA4rF4zGBmlupa9U=
Subject key identifier: 64:C1:76:63:DA:B9:EB:59:17:69:30:50:E2:DF:3D:CE:BD:25:0D:87
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 0194258F752C173D42F8DE27C831BBF20B59
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/ZMF2Y9q561kXaTBQ4t89zr0lDYc.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207871
IP address blocks: 45.151.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:75:2c:17:3d:42:f8:de:27:c8:31:bb:f2:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64c17663dab9eb5917693050e2df3dcebd250d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:94:39:1c:f7:5f:66:87:e0:c8:ce:d8:26:
5f:5f:43:69:5f:0b:62:75:8f:b1:cd:c2:00:e6:d6:
17:ef:c4:5b:cc:5b:78:b2:06:36:a7:8f:13:da:4e:
47:40:56:1a:d8:22:09:28:6f:91:d5:94:56:2e:47:
36:67:e9:21:01:6f:72:8f:5a:b2:89:99:c3:45:f5:
94:f6:99:d4:83:83:3f:a2:d3:b4:4a:e6:db:56:c4:
65:58:58:2b:25:f8:04:03:d4:cc:57:25:9f:67:14:
eb:1f:92:e6:ac:a3:18:0d:6a:66:16:c2:bb:c7:f6:
2c:14:27:4c:c5:fa:94:a2:71:28:13:e5:ac:2e:18:
e8:aa:14:e0:b4:8d:bf:73:ac:7a:29:4e:1b:28:39:
eb:ed:e4:a7:5a:fd:9c:6d:21:6b:c6:e9:a4:c2:8c:
8d:cf:01:17:8b:25:dd:d3:26:ca:9d:c7:54:e8:38:
ec:0f:5c:31:98:ce:bb:83:6b:77:fd:ed:d7:69:52:
bc:0d:85:64:6f:5f:61:b2:65:44:a9:6c:09:27:8a:
c5:ca:be:b5:0f:05:ca:e0:3c:f8:3b:4b:6a:c0:d6:
04:2f:99:90:a4:81:e9:2d:f6:79:ea:db:89:9b:1b:
26:fe:1f:ab:da:c9:cf:49:9f:f2:13:6b:b1:bb:66:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C1:76:63:DA:B9:EB:59:17:69:30:50:E2:DF:3D:CE:BD:25:0D:87
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/ZMF2Y9q561kXaTBQ4t89zr0lDYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:20:0e:9b:21:26:eb:7f:27:83:a7:28:c0:8f:0e:40:8f:51:
03:a8:90:6a:15:86:b9:59:00:af:5c:76:e8:f8:01:af:ed:7a:
e0:d0:c4:2c:e7:16:35:ff:3b:ee:06:fe:1d:7b:a1:57:ef:27:
9c:8d:c8:79:9b:ec:73:dc:43:4a:f8:a7:f6:bf:9e:df:8a:01:
3c:5d:9f:ec:84:bf:c7:c7:12:cd:7b:72:4e:b5:9e:cc:49:9a:
b5:39:60:08:ee:85:84:bd:da:e8:ff:48:3f:bb:c4:e8:d3:fa:
38:19:1b:de:06:0a:b3:b3:38:fa:23:99:bf:cd:cb:d0:6a:6a:
35:2a:92:79:02:23:59:7d:9f:ff:ce:bd:d3:94:f7:93:e6:22:
5e:1e:06:d2:0e:47:ef:b3:05:b7:e0:e0:62:ac:9f:de:e6:8f:
42:82:cc:a8:fc:8c:99:de:25:a6:6c:3d:a2:37:56:03:d5:ab:
36:1b:30:8e:f4:fd:bd:d8:1d:43:f8:71:c1:5e:f8:7e:6c:ab:
75:4d:1c:31:0e:5c:b0:d9:4e:09:be:09:12:84:b0:e4:5a:8d:
c0:31:79:cf:46:4d:60:32:31:78:43:73:6d:18:93:7a:3f:ff:
a5:63:03:20:4b:c7:7d:32:62:43:ab:9e:ca:bf:49:94:2c:65:
94:a1:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:12:36 2025 by rpki-client