Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/zikRvY768723iyo08jZe02hR3F0.roa
File: zikRvY768723iyo08jZe02hR3F0.roa (raw, json)
Hash identifier: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=
Subject key identifier: CE:29:11:BD:8E:FA:F3:BD:B7:8B:2A:34:F2:36:5E:D3:68:51:DC:5D
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 019425215F8B6B313EE4680CBD6176AF531A
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/zikRvY768723iyo08jZe02hR3F0.roa
Signing time: Thu 02 Jan 2025 03:48:51 +0000
ROA not before: Thu 02 Jan 2025 03:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13136
IP address blocks: 80.85.128.0/21 maxlen: 21
2a02:13d0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5f:8b:6b:31:3e:e4:68:0c:bd:61:76:af:53:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Jan 2 03:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce2911bd8efaf3bdb78b2a34f2365ed36851dc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:83:19:84:75:1e:af:51:95:e9:95:48:89:
59:e2:ae:a0:9d:99:91:6e:47:60:cf:aa:dc:95:d5:
8f:e2:09:30:27:da:90:4e:03:54:31:a9:7d:f1:c2:
a8:13:4a:9a:9f:7c:46:91:0d:9b:85:49:67:fc:89:
71:87:dd:6a:32:e4:94:46:4e:91:08:b7:37:d0:24:
b7:b1:28:14:14:1b:d6:ef:96:53:bb:83:56:04:8e:
34:65:bc:71:ef:bb:29:f7:14:ac:20:38:61:fc:d5:
22:b8:1a:68:9d:07:5c:8b:b9:31:d2:27:b7:9f:64:
f2:8b:ff:0a:6d:3a:77:f8:4e:cb:1e:27:14:66:d1:
55:cd:1f:d7:64:cc:e8:1d:da:c8:c6:ac:75:7e:2a:
2d:99:9f:b2:c4:9b:30:b5:9b:3f:00:5e:46:a3:a1:
45:52:bf:4f:04:52:f8:0e:85:30:f7:74:c8:b5:4e:
f0:74:07:2a:59:09:25:8d:58:41:e4:80:45:b4:db:
1d:00:ca:13:18:68:2e:2d:b3:09:a0:cb:c0:3e:75:
45:43:c7:ff:f5:4a:05:4b:75:1b:e8:95:9c:93:9f:
c6:a6:da:7c:53:78:06:fa:65:66:d4:12:af:b6:51:
c2:dc:09:ae:dd:3c:cd:66:ae:d8:d7:f9:09:0c:f3:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:11:BD:8E:FA:F3:BD:B7:8B:2A:34:F2:36:5E:D3:68:51:DC:5D
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/zikRvY768723iyo08jZe02hR3F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.128.0/21
IPv6:
2a02:13d0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:1d:44:12:36:4f:18:ee:bd:13:00:41:ac:ee:d3:dc:1a:c8:
7b:4d:a0:a0:3e:ea:44:2e:e1:a4:5a:1a:85:11:a6:33:ad:4b:
60:d7:c5:6d:d1:08:98:f8:b2:fd:2a:2e:dd:b2:8f:12:6f:0a:
29:20:5d:30:b2:d2:d9:9e:46:f1:2f:55:c5:ad:fa:e6:f2:4f:
c9:af:5e:a0:69:48:ad:db:6d:4a:6e:e0:8a:6e:b9:34:07:63:
be:c7:9b:d5:c3:a4:73:94:d6:60:14:5c:81:af:82:2c:2f:19:
b1:4a:93:be:bf:2a:31:d5:c0:3b:d6:b5:60:e7:12:3b:67:10:
5e:68:78:13:ee:0f:ac:50:d0:25:bf:94:4f:a5:ca:dc:98:a1:
70:67:48:a6:dc:f8:a0:bf:a2:92:cc:f8:71:f0:7f:5e:06:c3:
a4:34:23:2d:10:3a:34:be:dd:2e:75:e0:2a:b0:2d:43:4e:f4:
31:99:12:ca:52:2c:61:74:de:e4:f0:f3:ed:62:c0:fa:32:b3:
3e:5b:95:82:02:0c:95:f2:ef:c2:b6:56:c9:96:8b:4e:00:fe:
29:a1:f9:e9:c2:2b:14:4c:23:4f:f4:66:c4:61:47:16:f6:23:
f1:7f:c2:a5:37:ee:db:15:5a:d6:da:e9:ed:f9:ac:25:31:d0:
aa:a7:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:31 2025 by rpki-client