Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa
File: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (raw, json)
Hash identifier: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=
Subject key identifier: CE:68:10:FD:A5:A1:A7:A7:04:1B:1E:32:D2:C7:96:9F:81:AC:B2:CE
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 0194228D5BDC92456625390D30749AC1813A
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa
Signing time: Wed 01 Jan 2025 15:47:56 +0000
ROA not before: Wed 01 Jan 2025 15:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202468
IP address blocks: 45.82.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:5b:dc:92:45:66:25:39:0d:30:74:9a:c1:81:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Jan 1 15:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce6810fda5a1a7a7041b1e32d2c7969f81acb2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:18:64:b7:77:36:d9:82:69:ee:7a:81:fb:
2e:64:47:cc:44:23:bf:58:38:c3:8b:ad:9a:fd:da:
87:70:68:a9:de:23:fe:cf:34:0b:db:4e:7d:50:fc:
ea:db:26:57:c7:1b:d2:7f:7d:74:7e:65:cc:0e:9f:
12:2f:fc:5b:b9:06:e6:ca:72:e8:80:aa:92:ad:9e:
f2:87:46:bb:eb:34:bd:b2:82:22:e1:e6:1e:a7:cb:
e1:8c:e8:f9:4b:f1:09:80:ea:57:93:15:a2:c7:63:
a4:06:88:55:0a:b7:fd:e4:80:75:82:48:bf:25:70:
d7:f7:ca:eb:34:86:ea:2f:ca:b2:39:77:24:e6:2d:
4f:06:dd:0d:79:bb:7b:d6:40:14:49:35:44:5e:d4:
4c:39:d2:49:58:c3:ce:9f:7d:d6:94:5c:2e:e7:c8:
2f:66:5d:34:86:88:5c:0b:12:92:ef:e5:f0:48:67:
18:60:83:0b:62:6c:99:75:16:45:b6:6d:60:b5:72:
9a:95:b5:4f:cb:62:40:9b:64:a6:66:cc:96:b6:80:
a9:73:72:4a:43:f8:13:05:47:39:ea:56:b2:80:5d:
c6:0b:16:00:7b:a8:15:69:7e:30:a1:7d:4e:29:1a:
e4:bd:e8:a3:15:cc:6d:68:0a:d7:83:cc:8e:0b:32:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:68:10:FD:A5:A1:A7:A7:04:1B:1E:32:D2:C7:96:9F:81:AC:B2:CE
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.136.0/22
Signature Algorithm: sha256WithRSAEncryption
93:d3:c2:cd:cb:d2:9a:3e:0b:44:12:35:d2:87:8b:4e:fd:6c:
95:ea:51:c9:48:13:c1:7b:f4:91:76:d0:53:d5:8d:9c:32:e4:
51:a8:18:49:61:63:f8:20:78:bf:df:ae:21:f7:e2:b3:6d:f8:
f1:51:d6:45:26:fc:e2:01:28:b7:39:10:a4:1c:eb:27:f1:63:
49:cd:bb:01:f6:cb:a2:04:cd:0f:a7:03:9e:5d:4c:79:7f:a2:
ef:82:5a:95:b7:d3:ca:ff:e7:7c:63:80:57:be:0d:a5:b4:b6:
72:37:e1:81:3e:72:2b:08:62:a2:f8:cb:68:1f:fe:f3:ed:47:
c3:d6:6b:b4:73:a1:64:40:64:1b:7b:ed:8f:f0:c3:11:9b:2d:
48:10:97:46:3f:4d:f1:73:43:5c:91:36:73:1e:f2:69:16:74:
d6:f3:43:6e:51:92:ee:75:e4:68:4d:98:8f:e6:b5:ff:51:bf:
86:91:bc:a4:bc:30:91:6e:45:07:16:de:ed:81:b4:34:b4:e2:
05:2a:d1:3c:be:c8:7b:94:05:d7:3e:04:33:e7:a2:28:ba:ea:
b6:12:eb:13:f8:e7:3d:8c:5f:35:2f:a3:b8:d3:6a:65:d9:ce:
65:b5:15:67:8a:ac:f4:c0:ba:bf:6e:d4:bf:b2:31:42:64:fd:
41:68:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:33:01 2025 by rpki-client