Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/ZzpjGuJKoEH-93kWJTayHVRApFE.roa
File: ZzpjGuJKoEH-93kWJTayHVRApFE.roa (raw, json)
Hash identifier: A4Ka+IMT+cV/ewopSeUwmPzCgbuEvYTmUq4jUsXlSl8=
Subject key identifier: 67:3A:63:1A:E2:4A:A0:41:FE:F7:79:16:25:36:B2:1D:54:40:A4:51
Certificate issuer: /CN=9b6866d9af8f43bb0e9e1fc9c42d13b919e2eec7
Certificate serial: 01831D303B87DA36594680072B668A7085D3
Authority key identifier: 9B:68:66:D9:AF:8F:43:BB:0E:9E:1F:C9:C4:2D:13:B9:19:E2:EE:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2hm2a-PQ7sOnh_JxC0TuRni7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/ZzpjGuJKoEH-93kWJTayHVRApFE.roa
Signing time: Thu 08 Sep 2022 13:00:43 +0000
ROA not before: Thu 08 Sep 2022 13:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42695
IP address blocks: 31.12.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:30:3b:87:da:36:59:46:80:07:2b:66:8a:70:85:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6866d9af8f43bb0e9e1fc9c42d13b919e2eec7
Validity
Not Before: Sep 8 13:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=673a631ae24aa041fef779162536b21d5440a451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:8c:4e:9d:08:a8:13:f3:0c:19:9d:d2:e7:
1b:86:f2:7d:b9:a8:c8:89:dd:34:35:4d:46:c6:aa:
14:d9:25:4d:8b:41:57:6a:e3:2f:69:dd:b8:10:bb:
b0:a8:49:33:cf:2b:2b:2f:40:59:b5:0b:a8:16:d6:
09:4c:d7:2e:74:ce:63:23:3a:d3:34:52:e4:a6:0a:
7d:cb:c4:30:22:16:ba:91:70:62:d2:0e:cb:7d:48:
58:69:81:d4:59:fb:f9:4c:1a:f2:59:b9:79:f9:da:
31:9d:12:0f:bd:e4:a6:06:e7:f8:0d:0a:a8:85:20:
c5:60:56:d5:6a:17:3f:7b:4c:12:45:71:ef:82:21:
24:93:e2:6e:bd:16:94:3f:22:4f:56:de:4a:4e:99:
c6:19:0c:ae:98:2f:27:5d:30:92:1f:cc:12:31:5c:
10:0b:79:85:28:db:89:a7:d0:78:80:8b:72:e9:08:
13:28:b0:3d:24:f0:dd:b4:8a:99:b2:dc:49:64:f2:
81:ca:9c:d0:66:55:95:4f:48:de:33:0f:4d:c1:f3:
26:c4:d5:94:b8:63:69:39:ba:a9:83:7f:80:06:26:
62:8f:53:b4:68:32:52:65:58:04:22:5a:8d:2e:9d:
62:56:29:9b:7e:1c:16:61:af:c9:12:36:bb:73:da:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3A:63:1A:E2:4A:A0:41:FE:F7:79:16:25:36:B2:1D:54:40:A4:51
X509v3 Authority Key Identifier:
keyid:9B:68:66:D9:AF:8F:43:BB:0E:9E:1F:C9:C4:2D:13:B9:19:E2:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2hm2a-PQ7sOnh_JxC0TuRni7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/ZzpjGuJKoEH-93kWJTayHVRApFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/m2hm2a-PQ7sOnh_JxC0TuRni7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
Signature Algorithm: sha256WithRSAEncryption
44:d2:a6:51:4e:45:cf:ab:ce:ca:5d:7a:50:a4:cc:9a:57:6b:
9f:ce:f2:d6:3b:19:d2:ad:3f:4e:f7:30:af:8e:4d:26:7f:34:
c2:d7:ec:7a:3c:ce:81:0a:0b:d1:70:28:f1:05:41:07:56:af:
84:43:f4:09:95:6f:d8:22:f2:23:fc:a5:38:54:20:d0:1e:99:
f7:83:81:3f:47:e6:1d:af:27:1c:0f:d1:69:6d:44:11:d7:a5:
66:3e:21:ff:68:d6:55:f4:0f:dd:de:0e:1f:25:07:16:a5:fe:
7b:d8:72:72:55:6b:eb:a2:35:11:22:b4:c1:89:b2:92:8c:82:
16:a0:9a:55:f1:7a:33:18:d4:9f:19:6b:7f:56:15:10:63:2d:
74:5e:6d:b6:bf:b4:ce:c3:23:de:b1:92:bb:98:92:09:b9:4e:
fc:19:9b:97:10:3a:1c:8c:0f:a5:79:57:89:f9:3b:16:0a:0b:
fd:d9:50:49:80:b4:e9:8e:3e:93:97:fd:72:f7:56:a2:e1:1a:
90:0d:cb:fe:3f:e0:85:c9:00:5d:2a:56:31:33:3d:9b:d3:fe:
94:fc:b1:06:3a:ca:11:64:72:10:db:ef:76:ad:1e:c1:cb:af:
66:ee:79:ba:ca:18:85:d0:2e:12:54:c5:9f:1c:2f:8f:64:bc:
5f:8c:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:27 2025 by rpki-client