Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/zDL_THkFuQHLJwbg-SI_E4lpZ3A.roa
File: zDL_THkFuQHLJwbg-SI_E4lpZ3A.roa (raw, json)
Hash identifier: krJTySa4xAIWcd+RLsqPBRipwsimqCaZxlGeTrQ72GM=
Subject key identifier: CC:32:FF:4C:79:05:B9:01:CB:27:06:E0:F9:22:3F:13:89:69:67:70
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 0194258E934C68B9BD10BBDE5F9C901E8F13
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/zDL_THkFuQHLJwbg-SI_E4lpZ3A.roa
Signing time: Thu 02 Jan 2025 05:48:08 +0000
ROA not before: Thu 02 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57903
IP address blocks: 213.109.52.0/22 maxlen: 22
213.109.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:93:4c:68:b9:bd:10:bb:de:5f:9c:90:1e:8f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Jan 2 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc32ff4c7905b901cb2706e0f9223f1389696770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:0c:2b:f2:af:2e:df:76:02:06:75:6d:88:
6f:cb:c8:c1:ea:d0:fb:e5:97:40:ce:e7:c1:d1:a0:
88:0f:f4:4f:e8:83:fe:4b:25:89:a2:4e:b5:98:43:
dc:20:25:e3:9b:64:86:d1:db:e9:1e:91:54:85:5f:
3c:a2:8e:77:22:ea:83:f8:bc:1e:bf:00:f1:85:4a:
a7:d3:a8:d4:ef:5d:d9:af:05:d1:0e:47:ec:5e:52:
47:d0:d0:2c:bf:08:f4:22:14:d2:c4:c4:c5:87:2c:
fb:98:59:03:53:b4:24:58:20:79:ac:c2:19:51:3a:
e3:64:81:7b:9b:88:5d:59:82:ce:26:45:e0:8a:4d:
d9:ca:4c:f4:6e:71:8a:da:04:1a:31:27:31:71:f2:
5d:97:6b:29:7d:73:8d:28:40:69:37:7f:23:87:05:
64:2c:d6:b7:0a:76:e6:96:8f:fb:f4:14:13:cf:d9:
85:b6:48:0d:e5:3e:0d:81:3b:c5:ff:0a:b6:63:fe:
61:12:03:6f:4f:06:b1:17:51:e0:46:ca:41:f9:5b:
d9:96:b7:3f:82:b8:b2:54:4f:da:d3:0f:12:e8:0d:
3f:1f:17:73:b4:96:a5:42:94:56:05:43:12:f9:f5:
33:8a:6a:c6:12:be:86:e3:c7:71:38:7b:2b:e3:1b:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:32:FF:4C:79:05:B9:01:CB:27:06:E0:F9:22:3F:13:89:69:67:70
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/zDL_THkFuQHLJwbg-SI_E4lpZ3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.52.0-213.109.63.255
Signature Algorithm: sha256WithRSAEncryption
9d:a1:71:d4:98:9e:9f:0c:cb:39:cb:5c:6d:14:20:e7:11:5f:
c7:6c:c9:d2:92:bd:e4:d9:11:f4:a6:a7:fd:cb:0e:3c:46:d2:
08:04:2d:38:fe:c4:bc:ad:2b:59:34:65:70:cd:a5:95:35:85:
20:95:60:90:86:74:79:81:cf:c7:59:17:b3:e6:b3:90:df:ea:
2f:83:c2:08:b3:ea:63:6d:71:96:ad:56:83:7c:46:67:12:53:
11:ff:af:0e:c6:e9:e2:f3:77:26:fa:81:fa:8c:52:00:4e:4a:
31:4c:88:75:2c:fa:84:de:96:3c:b2:9a:e7:11:3c:f9:2a:72:
14:1c:b1:a5:69:e0:f2:2c:a2:a1:99:93:d5:d7:07:63:b2:99:
c6:a4:7e:1b:25:74:b2:1a:96:04:c3:5e:64:05:95:04:e7:35:
99:64:0e:d2:b9:57:a6:ec:04:37:60:91:2d:2b:e8:45:54:64:
f9:45:50:4e:40:60:04:01:e6:ec:c8:cc:7b:37:f4:6b:8a:dc:
f2:83:1f:13:d9:72:74:47:ff:d3:6d:e7:51:18:28:7f:cf:c6:
89:bf:98:a9:5f:ad:9b:4c:28:cb:1e:5f:69:d5:24:ac:26:52:
2b:32:f9:9e:17:78:f3:48:30:7b:ab:a8:07:3c:c7:bc:a0:68:
04:32:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:17 2025 by rpki-client