Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/zticNdKOcKpGZ7y9nSwo2z1Ata4.roa
File: zticNdKOcKpGZ7y9nSwo2z1Ata4.roa (raw, json)
Hash identifier: 8+4soy6gmx5EG7p1nRpzUiPyWHyd7/QxOctDatWj2cE=
Subject key identifier: CE:D8:9C:35:D2:8E:70:AA:46:67:BC:BD:9D:2C:28:DB:3D:40:B5:AE
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 019425FBF21902D59CB1A623F2662F7741AA
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/zticNdKOcKpGZ7y9nSwo2z1Ata4.roa
Signing time: Thu 02 Jan 2025 07:47:36 +0000
ROA not before: Thu 02 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 45.92.12.0/24 maxlen: 24
45.92.13.0/24 maxlen: 24
45.92.14.0/24 maxlen: 24
45.92.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f2:19:02:d5:9c:b1:a6:23:f2:66:2f:77:41:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Jan 2 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ced89c35d28e70aa4667bcbd9d2c28db3d40b5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:59:d7:a7:ba:86:a8:b7:b5:68:a0:92:19:
bf:53:b9:84:cf:d8:81:e5:e1:f0:ea:45:cd:51:1f:
94:99:ca:1e:09:da:c0:95:cb:fe:db:c6:94:f5:ca:
79:bc:24:84:b4:be:2c:6f:95:b0:d2:e2:e2:32:4d:
20:cb:34:62:0c:38:36:5a:ce:a8:8b:07:75:9a:23:
02:86:68:87:cf:22:99:a9:a6:21:4d:95:87:8d:e6:
27:60:ed:b5:98:10:63:10:2a:39:93:88:0e:ca:28:
a1:9c:b2:ff:90:05:df:92:04:57:9b:6c:d1:cb:6e:
92:98:73:2b:01:83:7a:e4:39:d9:da:8f:b7:ff:c6:
97:d7:c9:c2:4c:b9:3e:1a:d2:a8:c0:04:c7:2e:be:
17:07:da:ec:f1:fc:9b:9b:5a:f8:0b:67:1d:3e:53:
4c:8e:82:2e:47:41:33:5c:7b:b3:b8:29:f2:3c:7f:
01:bd:9d:b7:78:5a:79:ac:3f:dd:9a:3f:77:aa:7f:
e1:15:2d:8b:9a:c0:35:67:7c:15:cb:fd:13:79:e7:
b2:21:1f:70:88:a0:1a:06:61:03:ca:89:53:3f:70:
71:ec:f2:fe:58:4f:6d:1a:f0:6c:94:d9:fa:4e:2a:
3a:44:9f:78:0f:20:46:d5:d9:ab:18:59:8f:78:6e:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:9C:35:D2:8E:70:AA:46:67:BC:BD:9D:2C:28:DB:3D:40:B5:AE
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/zticNdKOcKpGZ7y9nSwo2z1Ata4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.12.0/22
Signature Algorithm: sha256WithRSAEncryption
33:44:f3:f7:87:76:13:f5:ac:d5:2d:3b:d1:76:9f:18:06:e9:
2d:74:eb:bf:7d:0f:95:3e:e1:22:f7:60:e0:ca:ff:e6:14:68:
b4:6b:af:a4:60:64:c1:42:59:05:92:aa:ba:e9:f5:7d:c2:15:
82:a7:14:a5:f7:1f:24:ea:60:61:6f:72:45:36:64:da:e6:3e:
03:f2:34:c9:6b:4a:dc:89:35:ee:43:85:ce:4c:3e:c9:11:4d:
99:49:a2:0f:de:e1:eb:0e:6c:b2:6a:41:19:64:09:5e:3e:ae:
00:20:bf:84:d8:b2:71:66:e7:cb:c6:b3:94:da:5e:8a:b7:05:
21:33:d8:80:d4:40:e6:04:8a:91:f0:f2:59:0b:83:52:8a:05:
ce:ca:d4:71:b8:bc:43:7b:d3:64:bf:e5:7c:63:ee:49:25:3f:
6f:69:81:9a:56:f1:ed:f3:c1:37:6d:b0:84:93:c2:c0:1b:dd:
6c:94:8c:8d:ef:ee:6f:a1:b5:89:16:c7:74:81:85:89:0f:22:
9a:e0:56:74:80:7c:6f:64:96:9b:b6:d8:83:c4:0d:12:ae:3f:
c8:b0:70:4f:58:c9:e0:bf:a0:db:d9:3d:7d:20:b6:1f:dc:bc:
85:ee:24:26:a9:24:1f:a9:56:f8:32:89:84:08:55:7e:4c:48:
76:c7:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:38 2025 by rpki-client