Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/ZtZZEAiMokBjnJ6RL0fW_WRtUvg.roa
File: ZtZZEAiMokBjnJ6RL0fW_WRtUvg.roa (raw, json)
Hash identifier: HYmFAXxKVnFTMBP2WvTIUya5uxGXpwouKqV1Y54fjKg=
Subject key identifier: 66:D6:59:10:08:8C:A2:40:63:9C:9E:91:2F:47:D6:FD:64:6D:52:F8
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 0194236927FA64DAC012AE3D9A290E6EF01D
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/ZtZZEAiMokBjnJ6RL0fW_WRtUvg.roa
Signing time: Wed 01 Jan 2025 19:48:01 +0000
ROA not before: Wed 01 Jan 2025 19:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60649
IP address blocks: 150.129.11.0/24 maxlen: 24
2a0f:6bc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:27:fa:64:da:c0:12:ae:3d:9a:29:0e:6e:f0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Jan 1 19:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66d65910088ca240639c9e912f47d6fd646d52f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:92:b2:d3:4f:2d:e1:6b:b7:5c:d1:0d:2e:
29:65:d8:8d:7d:b1:13:9d:14:b3:16:4a:69:bf:dc:
16:25:32:82:df:d5:ea:0c:78:46:d4:e0:01:d5:37:
ec:15:37:21:3f:82:00:51:19:41:33:79:ec:65:e6:
65:58:d6:3d:65:e7:af:86:33:10:25:34:79:81:fc:
47:0c:76:b7:50:42:77:20:0f:f9:9b:e0:4d:d7:e8:
9a:3a:34:a6:4e:27:73:31:a2:e5:69:13:a8:d8:66:
3f:0b:a8:8e:ff:02:2f:e2:54:01:29:27:d5:ff:4e:
25:a0:1e:5e:7f:cf:c8:62:f5:71:0f:cc:03:07:c8:
64:89:f5:a8:39:7f:6f:f3:ee:a2:a2:1e:5e:de:21:
07:88:ad:4d:f5:b2:04:e2:44:49:79:a8:75:bc:ce:
87:d5:31:07:b2:96:36:64:49:05:1a:5a:27:35:ea:
c6:35:3d:24:9b:9f:fa:3a:4c:0a:3c:aa:c4:f0:2b:
e4:ef:68:5e:ed:45:bb:be:4d:b4:05:89:de:7f:14:
e3:99:1d:2b:f7:1b:9a:6d:a3:96:6e:17:6b:d0:bd:
a9:80:09:9e:c3:2f:b3:a6:ff:55:44:04:34:fd:17:
fd:15:7e:6f:3d:15:51:63:a0:cc:08:bc:c6:5f:73:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D6:59:10:08:8C:A2:40:63:9C:9E:91:2F:47:D6:FD:64:6D:52:F8
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/ZtZZEAiMokBjnJ6RL0fW_WRtUvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.129.11.0/24
IPv6:
2a0f:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:46:59:47:9f:d5:63:9e:b2:d6:9a:d6:3b:91:2e:fa:43:1d:
bc:ae:3c:8d:2a:0f:7c:7a:cb:d2:84:87:01:3d:c1:1f:f0:33:
76:cf:50:9c:1b:a5:35:ea:3a:73:99:83:24:50:7d:d0:4e:bb:
08:d2:b0:46:83:a4:0d:45:d7:47:01:ef:de:41:a3:47:39:70:
ca:75:22:91:79:21:0b:c3:ae:f9:a4:49:a1:b7:0a:15:09:32:
8e:5a:94:5b:61:aa:9e:80:aa:3f:19:45:c6:2d:76:69:d4:9d:
49:60:63:5a:67:ed:47:7e:9d:eb:b2:d1:a4:cc:58:93:d0:fa:
8e:99:cd:ab:9f:b8:5d:75:a6:04:89:a1:38:67:5f:b2:c8:34:
4e:55:f6:65:62:81:e3:ff:ce:09:be:9f:12:39:92:bb:6d:e4:
22:60:36:24:5d:07:77:a9:b6:10:5b:2c:a0:96:37:a5:c0:fd:
a4:b4:8a:ce:fe:d3:d5:52:d7:57:cf:9f:50:42:81:81:d0:94:
c4:81:bb:7a:c2:02:dc:7b:2e:4b:9a:bc:4f:19:8d:46:f9:cd:
26:2f:36:92:76:37:ca:69:5b:b0:51:32:f3:0a:e8:e6:90:58:
cb:a1:06:5a:84:51:6a:91:73:48:9a:fb:8b:4e:af:da:6f:a4:
79:9b:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:47 2025 by rpki-client