Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZVmpKJojOUdHniTIDhGWlDq1V2E.roa
File: ZVmpKJojOUdHniTIDhGWlDq1V2E.roa (raw, json)
Hash identifier: TpdCetkRyz8OYsmnpeJ5zamp+p2cA7UbPfQQPmdw8oI=
Subject key identifier: 65:59:A9:28:9A:23:39:47:47:9E:24:C8:0E:11:96:94:3A:B5:57:61
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9CE9D594EFFDA4A8502B9CFC7266
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZVmpKJojOUdHniTIDhGWlDq1V2E.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60139
IP address blocks: 90.156.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9c:e9:d5:94:ef:fd:a4:a8:50:2b:9c:fc:72:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6559a9289a233947479e24c80e1196943ab55761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:3f:2a:35:b0:d9:22:f3:91:82:5f:4a:fe:
e5:2a:4f:af:8f:8d:2a:c1:36:e4:a4:84:be:51:89:
00:ee:a7:5b:2e:c2:2e:b7:d1:a7:f2:74:35:9f:a1:
66:c9:c1:49:88:a2:91:13:50:1c:9f:09:e9:f6:2a:
73:a0:1d:15:03:a2:e2:89:e0:81:69:35:7d:ff:56:
46:47:a0:7f:b5:06:ec:85:d2:80:ef:ee:eb:68:89:
43:f6:10:03:16:91:c7:db:2c:36:8a:10:dd:61:71:
80:a9:b7:18:4b:f2:45:53:b9:e1:3b:f6:a7:41:de:
c3:3c:cd:9c:56:ab:c6:5c:c8:aa:dd:3c:17:2e:31:
36:63:6e:11:63:31:e1:57:d4:e3:0a:e3:f8:fe:42:
ff:e3:45:2b:09:06:84:97:2f:80:25:af:b8:12:82:
bf:fb:71:35:59:e1:d3:4a:80:67:1d:f9:18:96:a7:
83:01:f6:34:30:10:06:83:3f:83:11:a9:93:61:86:
be:86:3e:12:20:86:e8:37:8b:ce:eb:51:69:97:fc:
b8:72:a1:d3:55:66:79:55:f0:2c:a6:ed:b7:b5:8c:
67:8b:e2:17:a4:cd:65:41:98:93:22:bf:14:07:90:
4b:6a:05:24:ba:28:4d:86:7f:1c:97:1a:f4:ae:cf:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:59:A9:28:9A:23:39:47:47:9E:24:C8:0E:11:96:94:3A:B5:57:61
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZVmpKJojOUdHniTIDhGWlDq1V2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
66:16:23:0f:b5:18:76:3b:da:bd:b2:c5:21:b8:a0:bf:04:ab:
52:eb:ff:93:5d:ad:6b:6d:44:de:39:a2:3d:48:fd:06:fb:a1:
bc:a6:b0:54:bf:32:c8:2c:52:1a:a3:56:0a:f1:15:9a:73:36:
81:4a:34:b4:37:19:57:b9:50:59:96:96:93:b3:5d:78:59:9c:
6e:9b:7f:97:17:55:36:44:4d:50:45:f1:0c:67:6d:58:36:5e:
17:80:46:49:29:e2:47:9d:01:df:cc:da:58:82:34:af:b3:f7:
bf:32:3d:8c:59:81:02:58:8f:25:ae:6c:db:d8:1e:d5:60:8b:
43:74:15:b3:8b:96:55:07:59:f5:20:52:09:27:bb:34:3e:bb:
7c:ad:76:e9:a4:ff:ae:e3:69:7f:5e:aa:6e:ee:01:59:aa:c3:
fc:cc:4a:db:9a:6e:71:e2:9e:2a:b4:0c:97:37:ff:0c:2c:5c:
69:0f:9f:d7:95:0a:ac:82:77:d4:da:80:05:61:80:c7:e1:76:
c0:21:dc:a3:5f:3e:2b:2a:1f:2d:97:d2:04:b7:f1:64:63:32:
85:12:a6:af:a3:01:f0:6a:22:3c:51:0d:2c:13:88:5d:da:ac:
e7:5e:c8:6b:a1:87:db:d0:c3:4b:86:00:ee:08:d6:1d:f9:0c:
d3:d8:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:17 2025 by rpki-client