Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/zN7bolKHX5-8_T6xAiHUcxzsXEU.roa
File: zN7bolKHX5-8_T6xAiHUcxzsXEU.roa (raw, json)
Hash identifier: Ja9ytSf2n5JngXin2znXRtSQXJwWKPjF0nquQXGWBgE=
Subject key identifier: CC:DE:DB:A2:52:87:5F:9F:BC:FD:3E:B1:02:21:D4:73:1C:EC:5C:45
Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial: 0194258F763784FA7D3A3BF2BDFF7DFE1809
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/zN7bolKHX5-8_T6xAiHUcxzsXEU.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205367
IP address blocks: 81.30.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:76:37:84:fa:7d:3a:3b:f2:bd:ff:7d:fe:18:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccdedba252875f9fbcfd3eb10221d4731cec5c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:b8:3f:a1:89:d0:9e:8a:44:87:72:0d:48:
47:a1:74:ac:b6:7a:38:81:7f:70:45:4c:1f:40:0f:
b7:f6:3e:3f:a9:6b:bb:d2:3a:54:5f:46:f6:4f:17:
3a:7f:8a:51:b2:f9:74:da:2e:f6:05:cb:c9:87:ef:
cf:f2:6d:6a:67:92:72:dd:36:e2:94:bb:34:fd:cb:
ea:b2:32:84:81:5f:b3:c6:4f:fb:48:66:6d:3c:2c:
49:dd:58:08:26:12:31:95:a9:53:0e:5b:29:73:94:
b6:db:4b:db:aa:99:97:06:85:39:06:c4:a0:0d:30:
a5:ab:3f:17:9a:d8:e4:ee:3c:ab:ad:2b:eb:c2:9e:
4a:75:88:19:b8:f2:19:71:ac:72:e7:e8:01:0d:9e:
e7:c4:bf:5f:ed:d7:df:c8:bb:1f:10:84:7d:89:aa:
1e:fc:03:30:f5:8f:c3:93:5c:aa:e0:8e:05:45:b7:
fb:f8:a0:64:55:27:90:be:c9:f6:2c:72:75:29:aa:
7d:f5:88:c3:f9:e9:f2:2e:54:23:aa:f7:5a:f2:7f:
77:9d:a4:58:53:3d:7c:cf:5c:53:35:30:ba:34:05:
1d:83:79:38:32:a7:01:cc:30:21:ed:00:85:14:36:
a2:2e:36:49:dc:30:d0:fe:b3:7e:a4:0e:32:b6:d8:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DE:DB:A2:52:87:5F:9F:BC:FD:3E:B1:02:21:D4:73:1C:EC:5C:45
X509v3 Authority Key Identifier:
keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/zN7bolKHX5-8_T6xAiHUcxzsXEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.97.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1f:ac:85:39:e9:1d:26:58:7a:9b:a1:96:94:e0:96:7d:e1:
6b:d3:2e:1c:9a:3a:25:2d:9b:ea:4e:ae:3c:4c:10:42:fb:c3:
a9:53:8b:7d:a4:72:00:ee:be:4c:76:68:d5:14:6e:37:14:27:
36:c0:fc:47:a7:e6:10:71:d5:05:d0:d2:a5:19:d3:7d:80:84:
3f:e7:1e:d5:08:31:ab:bd:85:0d:64:a7:2e:05:9c:39:4c:bd:
60:a7:4a:1a:d8:2e:64:44:43:58:ea:ad:a2:de:26:54:4a:12:
d0:26:20:ae:a3:77:10:05:1c:b2:bc:ce:dd:de:2c:fb:be:4f:
9f:6d:c6:f8:27:94:8c:a0:ab:95:16:c1:99:5c:09:ad:0d:83:
63:63:86:0c:b6:f0:72:e3:64:df:89:59:6c:b7:d2:d1:9d:68:
91:50:1f:45:4a:69:e0:be:bf:40:43:b7:26:4a:63:57:33:2f:
ce:43:87:09:83:9d:a3:e6:b4:8b:a0:68:ef:8e:76:2c:9e:cf:
fc:06:cb:80:c2:bb:c1:1c:2f:5b:15:8d:a0:ee:b7:2b:83:6e:
9e:bd:71:d6:82:a0:34:dc:8f:85:6b:a5:ce:59:90:5c:5a:63:
a4:2e:63:41:02:39:00:92:0d:6a:0e:6c:6d:7e:a2:ed:cf:e1:
2d:3b:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:04 2025 by rpki-client