Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa
File: 1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa (raw, json)
Hash identifier: 4fwNFjC/KzIgxsaWUD66CE+7p9ui38GyV7XXtJ3qf8o=
Subject key identifier: D5:95:BC:B6:77:4C:E4:0B:41:F8:13:E9:4F:EA:15:7D:7E:D4:75:62
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 0194C094D46971B5BE0EB71B85CC05CC90B5
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa
Signing time: Sat 01 Feb 2025 08:16:06 +0000
ROA not before: Sat 01 Feb 2025 08:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.85.12.0/23 maxlen: 24
193.43.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c0:94:d4:69:71:b5:be:0e:b7:1b:85:cc:05:cc:90:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Feb 1 08:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d595bcb6774ce40b41f813e94fea157d7ed47562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:35:f2:09:38:17:ab:f3:62:a1:b7:f4:bc:70:
77:65:db:48:5a:71:e4:1f:4c:b6:c4:c9:37:03:30:
9a:56:96:be:85:47:0b:cd:6b:15:63:16:97:af:b9:
63:8b:df:e6:31:ec:1c:27:bb:a3:1e:f1:51:79:a8:
16:1c:96:5c:08:e4:28:c8:67:d4:19:60:d5:5d:7a:
21:51:48:68:ce:98:b2:fe:49:6c:1c:b7:e8:f1:2b:
1f:92:97:e1:01:d6:7b:be:53:de:43:d4:f9:1f:6f:
d2:d5:7e:e1:d6:2a:b3:88:9d:f6:1e:e5:a6:5e:f8:
dc:91:2c:b9:e9:1d:93:1c:af:95:8b:48:65:c4:ec:
0a:15:a0:30:87:29:9f:49:94:94:21:d9:1a:c3:f2:
c5:56:36:f1:e7:8a:57:28:be:3e:77:e8:42:d5:5a:
18:4c:90:f7:fd:b1:b6:85:52:9a:02:e9:1a:a5:48:
e6:73:8a:f5:81:82:d1:1a:c1:92:0c:3d:df:26:d6:
fb:c5:75:73:f8:ce:81:b2:67:94:0c:95:b6:45:bb:
ea:2a:ea:6c:6b:e1:d9:bb:8b:3b:ac:83:cd:99:73:
63:26:99:4e:2f:de:e0:6a:bc:6d:9d:74:4e:0b:19:
a8:67:58:b3:2a:62:16:9b:e1:af:bd:8b:e1:f0:b7:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:95:BC:B6:77:4C:E4:0B:41:F8:13:E9:4F:EA:15:7D:7E:D4:75:62
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.12.0/23
193.43.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:89:ec:53:55:49:82:48:a6:ea:9a:30:49:53:9b:7c:48:f4:
00:ae:5a:91:f2:81:e3:a4:ff:95:ab:dc:d1:03:d5:52:35:61:
11:2d:ab:45:b4:d5:19:08:67:10:e7:a2:03:9c:09:e6:7b:94:
3f:c6:6a:76:8e:2f:3c:d5:56:2e:3a:6b:de:f6:bb:89:73:6f:
d6:62:db:6b:2f:80:50:71:b9:fa:c7:7a:e5:08:89:1a:c6:88:
2d:6f:bc:82:4f:b6:25:26:d8:87:c6:5f:3f:84:10:ac:d2:22:
c0:b3:48:a4:e2:91:9d:1e:a2:28:16:b0:85:41:99:ab:d4:88:
65:a2:ac:78:60:4b:95:10:dc:94:3b:02:d9:d8:04:9c:dd:cf:
d1:c5:59:86:00:18:16:39:ac:8a:b8:74:c8:d0:86:4c:ac:fb:
1d:78:54:52:b4:88:92:90:01:90:6a:b7:4e:d9:d7:bf:af:e8:
a1:67:67:fc:80:d1:55:39:17:eb:77:83:ea:96:04:73:65:27:
78:13:4f:d4:90:9b:8c:20:84:a4:07:bc:70:84:bc:32:f4:49:
28:b7:66:39:66:86:b3:5a:e1:8c:cb:53:73:f0:95:07:1b:13:
ee:27:ab:19:93:cf:a6:f4:97:c1:2c:af:6b:95:1c:8b:92:83:
c0:ea:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:17 2025 by rpki-client