Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/zNpNQl9NSaLChe4B635hRjw02-o.roa
File: zNpNQl9NSaLChe4B635hRjw02-o.roa (raw, json)
Hash identifier: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=
Subject key identifier: CC:DA:4D:42:5F:4D:49:A2:C2:85:EE:01:EB:7E:61:46:3C:34:DB:EA
Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial: 019426D99EE57C0179F9F7090AC56447D457
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/zNpNQl9NSaLChe4B635hRjw02-o.roa
Signing time: Thu 02 Jan 2025 11:49:43 +0000
ROA not before: Thu 02 Jan 2025 11:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39310
IP address blocks: 79.98.144.0/21 maxlen: 21
195.90.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9e:e5:7c:01:79:f9:f7:09:0a:c5:64:47:d4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccda4d425f4d49a2c285ee01eb7e61463c34dbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:69:27:0f:bc:fa:af:1b:b3:d0:b5:c5:51:
6d:f6:7d:f9:96:55:5f:27:75:0b:d2:31:f4:98:d5:
b2:9c:20:33:93:9f:91:21:10:e0:e4:72:cc:c9:f2:
25:7f:66:09:94:77:bc:e4:9c:44:99:77:54:48:7c:
ed:99:f0:05:7d:36:96:cd:58:17:5b:03:73:ba:8c:
71:fa:7c:c2:a2:7a:d6:13:ad:e1:52:36:bc:8b:38:
8e:f3:ec:e2:6f:3c:0a:29:81:84:ba:db:0e:02:f0:
af:c7:56:0d:ce:36:6d:5c:4a:cb:84:20:c4:51:26:
1e:31:17:5d:a7:94:35:f0:86:c9:60:23:13:e6:c9:
f1:20:a3:cb:19:80:6c:6c:23:92:f1:1c:b5:51:e4:
07:07:e5:40:e0:7c:f8:f9:f3:25:7f:29:9d:60:83:
1f:76:0e:4d:ad:ea:1b:90:b0:bc:5c:d2:04:58:e9:
56:8a:b8:fc:7a:80:07:48:66:c3:35:2d:06:28:e6:
82:96:95:a6:bd:aa:53:bc:db:78:d8:a6:57:6b:65:
4d:31:f2:4d:2c:36:dc:f6:38:20:50:da:b7:00:bc:
8b:29:b4:d7:53:a7:3f:ce:43:90:a8:4e:d1:bf:98:
da:cd:69:23:52:a5:4d:98:a1:ba:fd:a6:8e:0d:b0:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DA:4D:42:5F:4D:49:A2:C2:85:EE:01:EB:7E:61:46:3C:34:DB:EA
X509v3 Authority Key Identifier:
keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/zNpNQl9NSaLChe4B635hRjw02-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.144.0/21
195.90.106.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:59:eb:a9:93:8d:67:f7:7a:4a:f9:28:e7:92:64:8e:6b:12:
58:53:4c:9d:51:71:36:62:9b:2b:5c:40:56:e6:d7:a4:6f:e7:
9f:75:36:4f:4e:a0:fb:02:a3:0d:ca:c4:46:cd:50:c7:a8:cc:
d7:ae:b9:24:54:66:46:5b:17:a8:93:82:f9:9a:3f:90:05:46:
cb:f3:7e:ef:83:ce:69:d7:47:f6:f7:63:e7:41:60:96:8a:dc:
51:91:61:06:b1:48:b7:27:be:34:a5:20:17:28:c8:a1:76:f4:
44:66:d8:fc:46:28:0e:a0:30:f6:b7:01:09:a8:00:c6:2f:3e:
c3:e2:78:b0:54:af:82:a5:00:76:2c:26:18:0b:f8:0f:7f:55:
09:67:17:ee:f9:3a:66:51:3c:ca:74:33:88:16:f3:31:48:7a:
f8:38:33:40:79:ab:a1:f7:b4:20:37:08:96:70:bd:f8:ae:ae:
97:c2:e3:93:4b:2c:a0:70:e3:e2:60:bc:14:e0:7e:1d:12:69:
a4:e9:88:a9:2e:9a:1b:73:d4:60:19:1e:f8:27:f0:81:fc:21:
c2:9e:43:b3:8f:16:1f:27:22:d4:53:4d:f1:08:b5:8d:5f:c6:
ed:e4:32:a1:28:df:51:d8:68:12:20:4d:79:c3:19:23:24:d5:
d9:5a:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:09 2025 by rpki-client