Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/zzXnyaTo4BATrc17RusBD7eE0wM.roa
File: zzXnyaTo4BATrc17RusBD7eE0wM.roa (raw, json)
Hash identifier: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=
Subject key identifier: CF:35:E7:C9:A4:E8:E0:10:13:AD:CD:7B:46:EB:01:0F:B7:84:D3:03
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 019424B3C08F6C3249B61FEA87C6DAEBF61A
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/zzXnyaTo4BATrc17RusBD7eE0wM.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48740
IP address blocks: 91.212.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c0:8f:6c:32:49:b6:1f:ea:87:c6:da:eb:f6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf35e7c9a4e8e01013adcd7b46eb010fb784d303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:a6:84:fe:3c:2f:7d:df:32:24:98:a6:e2:
52:97:30:33:51:a1:89:82:b5:d1:f3:b7:f3:f5:63:
5d:91:ac:34:8d:c4:2a:51:92:c3:d5:42:20:01:7d:
4b:a9:dc:26:f8:25:af:79:67:6b:d5:f9:ee:62:7e:
09:fa:05:d3:96:76:b7:f2:fc:da:e4:6e:f0:f1:34:
7c:c4:b8:e4:b7:93:23:1f:58:fa:f7:c2:48:67:02:
1e:04:4a:39:66:77:46:c4:d2:45:74:ec:91:33:9a:
e2:b1:1e:9c:6a:34:f1:c1:96:c7:02:7c:fe:d6:6e:
fe:57:a6:9d:7b:14:44:3f:49:fe:49:72:f4:b6:b1:
ea:04:ee:6b:fb:c3:d3:88:99:be:2a:70:bc:67:fb:
da:78:a8:bf:6a:2b:5e:fa:2d:cd:f6:b3:dd:f6:66:
ed:70:02:f1:aa:56:f6:a7:5e:6c:fc:e0:87:e6:87:
6b:94:11:dd:06:56:53:9b:d3:d7:fa:09:f8:24:37:
df:14:1c:b2:d3:e5:4b:e8:ca:38:59:3c:f7:83:c9:
c9:fa:17:a0:a8:ba:b9:1b:8c:16:6c:7d:30:d0:04:
fa:91:05:d6:04:bd:fe:86:53:87:79:a7:99:29:10:
42:3e:54:3b:79:b6:44:dd:82:12:47:f3:1f:9c:e5:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:E7:C9:A4:E8:E0:10:13:AD:CD:7B:46:EB:01:0F:B7:84:D3:03
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/zzXnyaTo4BATrc17RusBD7eE0wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.1.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b6:d1:4b:dc:97:34:8a:05:c9:3a:17:42:97:9b:a9:96:84:
bc:5d:fc:1f:96:82:e4:39:39:ac:e0:af:d4:f5:0f:bd:c4:10:
3a:6b:0b:5a:06:3f:5c:7b:f9:f2:f6:76:4b:5d:1a:12:cc:3e:
13:4d:20:2f:b2:00:98:fc:27:ee:69:46:e5:31:f8:81:a0:98:
ae:ce:f1:27:90:f8:5c:aa:35:fc:24:63:76:2b:1a:a0:24:7e:
ee:04:1b:db:47:97:77:f7:f7:0f:00:3d:f7:6d:94:cf:b7:50:
8d:57:87:a2:10:b1:98:7a:62:b4:76:0c:e6:36:9c:c8:19:11:
a6:bf:cc:13:3c:e4:ca:56:a5:ed:48:c7:64:bb:7c:a4:85:f3:
55:19:02:35:1f:2c:7d:89:40:b5:a4:a6:0a:9c:c2:15:6e:ac:
0a:b3:3b:71:4f:ed:de:4c:a2:78:fa:5f:66:52:b3:f0:39:ca:
95:53:56:7b:17:14:76:d1:0e:38:b5:90:57:19:61:2a:4e:7b:
ca:fe:cc:f8:60:f1:ac:5f:a3:99:3c:5f:c5:aa:ed:37:7f:ef:
6f:44:45:5c:c5:6e:f0:56:99:52:59:b4:61:39:4d:8d:f1:1f:
23:82:5c:f6:1f:31:7d:a9:45:73:f7:1a:6e:de:34:5f:e8:93:
03:53:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:25 2025 by rpki-client