Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/ZjzUD0PMo0YqwBhx4hKJmEy5Mpc.roa
File: ZjzUD0PMo0YqwBhx4hKJmEy5Mpc.roa (raw, json)
Hash identifier: cE53npZFuyKJ0yUKa8St32zN8sDbq7J8FR9+stEQjAA=
Subject key identifier: 66:3C:D4:0F:43:CC:A3:46:2A:C0:18:71:E2:12:89:98:4C:B9:32:97
Certificate issuer: /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial: 01947AC7902E39EC3E720911F8AE58E0CA7E
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/ZjzUD0PMo0YqwBhx4hKJmEy5Mpc.roa
Signing time: Sat 18 Jan 2025 18:58:06 +0000
ROA not before: Sat 18 Jan 2025 18:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213168
IP address blocks: 91.211.145.0/24 maxlen: 24
212.104.212.0/24 maxlen: 24
212.104.213.0/24 maxlen: 24
2a13:8140::/48 maxlen: 48
2a13:8140:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7a:c7:90:2e:39:ec:3e:72:09:11:f8:ae:58:e0:ca:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Validity
Not Before: Jan 18 18:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=663cd40f43cca3462ac01871e21289984cb93297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:80:ba:ee:dc:ed:e4:c0:b7:ae:9f:34:c9:
b0:e3:78:b7:a7:f4:aa:bb:64:8c:69:c7:e4:c7:b8:
ee:75:e7:e0:9b:00:c6:6e:c8:a1:4c:2a:ad:1b:6f:
f2:14:bd:76:33:e5:9f:ca:35:77:5e:5b:41:b8:78:
e3:3f:f6:37:47:6f:bc:fd:40:da:16:6c:11:e3:7e:
c9:15:cc:ea:cb:7a:66:46:3d:48:58:39:84:5e:47:
a7:db:76:69:78:83:26:28:fa:04:04:13:7c:b4:d2:
ec:db:d8:2b:c8:3e:36:50:bd:fb:9b:a9:0c:b0:3e:
16:bf:9a:e5:52:89:0f:d7:82:1f:32:3a:57:9d:25:
2a:8a:52:31:a5:a8:3c:6b:f1:01:1e:0e:93:d7:4f:
f0:f3:08:78:e1:c7:08:b8:93:52:0f:12:fb:dd:cb:
b2:e1:61:be:ec:65:ef:ab:75:2f:5f:33:e2:5e:b9:
ea:b0:34:cf:65:c5:49:a6:41:e8:ff:9e:9a:d4:3b:
58:9d:ef:fb:17:92:72:7c:25:4f:ba:91:7d:e4:d6:
ac:41:8c:de:77:44:b1:a0:fa:35:7f:41:24:a3:11:
be:51:fb:9f:c1:87:bf:a0:ff:eb:4a:c4:f8:ae:ec:
f8:84:42:f2:4e:cf:1f:98:ed:a5:2c:2a:8c:e3:63:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3C:D4:0F:43:CC:A3:46:2A:C0:18:71:E2:12:89:98:4C:B9:32:97
X509v3 Authority Key Identifier:
keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/ZjzUD0PMo0YqwBhx4hKJmEy5Mpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.145.0/24
212.104.212.0/23
IPv6:
2a13:8140::/47
Signature Algorithm: sha256WithRSAEncryption
4b:ba:02:29:93:3b:f2:80:d9:08:6c:83:a2:aa:42:0e:8a:e4:
4c:83:9e:b1:40:1a:b4:ca:86:cd:df:ab:40:50:61:a8:16:84:
17:46:ff:e1:3d:41:55:6e:57:b0:e4:94:08:04:0f:5c:6d:d2:
23:e6:fd:df:f5:05:39:38:93:e8:a3:f2:4a:2a:f8:4e:a7:30:
00:8e:19:dc:d5:11:de:06:a0:c6:53:7c:d0:97:de:04:5d:0a:
39:d7:10:9c:4b:0b:b5:84:a4:67:65:11:15:ea:7d:bc:9c:7e:
85:31:c7:14:47:0a:eb:6b:5a:5f:49:34:01:c7:5b:de:2f:65:
40:4c:00:86:26:04:71:9a:e1:29:cb:2b:77:27:8e:bd:ac:d6:
e2:ea:9e:fd:c4:14:f1:fe:b5:f3:2c:80:e8:5d:a1:34:ad:4f:
6b:90:21:43:7e:18:c9:1d:b6:91:d2:13:f7:fd:a3:15:23:5b:
e2:ed:2f:97:d0:a3:e3:9e:9f:4f:98:2b:87:0c:88:d1:51:3e:
bd:fe:71:3c:e0:da:4e:51:3e:90:1e:2c:d6:37:7b:47:32:28:
57:f4:b9:53:3b:43:d4:09:3b:a0:58:ef:b5:22:f0:9b:b2:e8:
b4:fa:76:9f:8e:69:c0:5f:d9:ba:02:a1:cd:79:56:a7:a7:bb:
8e:00:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:33 2025 by rpki-client