Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa
File: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (raw, json)
Hash identifier: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=
Subject key identifier: CF:48:56:9F:34:91:98:72:F2:01:83:18:97:59:CA:09:93:96:6E:0C
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 019420D62E2EA64C410A9ADA34714A13991B
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206325
IP address blocks: 178.157.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2e:2e:a6:4c:41:0a:9a:da:34:71:4a:13:99:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf48569f34919872f20183189759ca0993966e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:f7:cc:f9:e2:52:56:db:53:51:8f:e3:ee:
2a:04:d0:c5:80:86:01:de:79:23:3e:2f:2e:6c:56:
6a:c6:bf:22:14:a6:3e:ce:9b:bd:b7:8e:30:0f:2c:
07:02:2d:89:03:16:77:31:7e:b0:a8:28:d5:5f:56:
ec:29:98:a2:93:46:54:9e:ad:ac:db:ed:b8:9c:6d:
b9:70:c5:49:4a:eb:0d:c7:cb:78:f8:ad:7e:f7:e9:
23:4f:a3:bf:2c:fd:dd:e5:5c:8b:20:25:67:12:31:
13:cd:94:7e:55:e8:70:32:57:76:22:5c:91:18:ce:
10:eb:e1:20:e7:79:ca:8b:5c:b0:1a:d5:1b:22:3d:
96:ba:53:90:2c:01:bb:98:4a:11:04:5e:b2:f8:a2:
98:ca:28:b3:80:9c:84:19:50:e9:83:00:7a:26:21:
54:f1:6c:85:9f:d0:9a:64:dd:e1:78:5a:fc:af:f4:
f2:bf:19:1d:4e:d4:78:e3:ca:cb:5d:e4:bf:b8:ee:
75:8c:2b:53:33:b6:30:0b:a9:8b:9c:ff:8f:7e:dc:
25:30:32:33:e2:9f:e1:03:0d:e7:8e:8c:a5:e6:98:
fe:f7:48:25:df:af:f2:37:f3:f7:db:3a:e5:15:b5:
be:3d:42:ef:a0:37:76:7d:9c:cf:1a:97:46:d7:bf:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:48:56:9F:34:91:98:72:F2:01:83:18:97:59:CA:09:93:96:6E:0C
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.1.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1b:28:90:a6:9d:0e:2b:0a:be:ff:e1:6f:91:2f:2c:e6:45:
f9:5e:32:bd:ba:3f:12:78:9a:6f:cc:86:37:ef:68:85:11:45:
d2:ba:12:cb:47:42:c7:b8:8f:8c:9f:41:a4:13:8b:a6:e6:91:
05:c6:36:6d:ac:14:a9:2f:3f:05:9d:f3:ed:a4:fd:21:3b:0a:
52:b1:af:d2:ae:17:c4:01:b8:c6:a2:67:f4:a0:32:42:15:5a:
f3:82:c4:ef:71:51:15:c0:78:09:81:c2:88:2b:b3:af:ee:e7:
c6:56:db:f9:ee:65:fa:5a:58:ff:d3:d7:06:a2:c2:1e:88:6f:
9e:56:fd:18:1f:95:2d:95:25:1d:0e:bc:8c:35:87:cd:49:88:
3d:3d:87:7c:e5:14:43:9f:bd:74:ef:77:a3:b5:85:0c:d1:ca:
39:70:2d:1c:3e:61:99:76:f6:75:a6:5a:78:05:66:bf:2d:74:
b4:a2:0d:6d:ab:e8:91:30:1c:cb:b3:94:bc:07:c1:5a:ce:1e:
71:74:9d:4d:e6:2f:b4:79:fd:b2:ab:3a:11:06:62:ae:0b:d0:
1e:ee:c4:8e:a9:1b:7e:7a:78:6d:e8:9b:5d:71:2a:df:3e:05:
92:f7:0f:69:3d:95:6a:07:0b:0c:26:be:e3:41:c2:cb:20:33:
cb:db:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:29 2025 by rpki-client