Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/zzTnnwQkHzs_ElQNqigVL1ArRdQ.roa
File: zzTnnwQkHzs_ElQNqigVL1ArRdQ.roa (raw, json)
Hash identifier: us40hEG1NcVWjJDpzrMVHHjC6ox4uAMOwbjwuL6+2HM=
Subject key identifier: CF:34:E7:9F:04:24:1F:3B:3F:12:54:0D:AA:28:15:2F:50:2B:45:D4
Certificate issuer: /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial: 019422FC3D62D443A9A1C5C2BB903D41FA37
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/zzTnnwQkHzs_ElQNqigVL1ArRdQ.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58031
IP address blocks: 91.238.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3d:62:d4:43:a9:a1:c5:c2:bb:90:3d:41:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf34e79f04241f3b3f12540daa28152f502b45d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:de:46:12:55:cf:16:41:94:77:fe:3c:89:
62:e0:b4:2d:e3:8d:9d:91:2f:4e:27:3b:ac:e1:21:
fe:eb:70:63:6e:f8:bb:62:38:16:a8:a4:8d:57:7b:
41:a0:55:98:74:97:bf:e7:ec:5e:42:4a:66:68:80:
52:7c:d5:35:9b:ae:88:96:da:05:35:f0:de:07:b6:
6d:05:c1:f1:ab:d8:e5:79:8b:16:e6:2e:15:c6:52:
d0:e7:9e:5a:1d:6f:39:ff:bd:bd:26:83:38:be:f3:
37:38:13:24:23:82:b7:3e:4b:54:98:54:fd:5e:be:
cc:77:6e:0b:2f:db:58:7c:65:43:a2:1c:d6:5e:16:
86:8f:dd:6c:85:b4:55:6f:3a:be:2d:03:13:98:0c:
de:31:a8:fa:d4:82:6e:1f:a4:a1:b8:9b:57:8f:c4:
da:fe:20:ca:9c:2e:62:3e:6d:ca:e5:02:a5:5e:32:
8c:d7:1e:0e:9f:e5:00:25:5e:eb:85:81:8f:8f:af:
51:d4:8c:2c:e5:ba:32:54:39:d7:dc:30:d8:4f:48:
42:f7:e9:a1:02:c3:41:f1:e9:9a:1b:e7:2d:2c:7f:
ab:a0:3a:c1:31:41:cf:67:c2:e6:bf:2c:38:b5:c4:
57:ee:1b:21:64:a5:00:6b:35:fd:06:7c:10:db:dc:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:34:E7:9F:04:24:1F:3B:3F:12:54:0D:AA:28:15:2F:50:2B:45:D4
X509v3 Authority Key Identifier:
keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/zzTnnwQkHzs_ElQNqigVL1ArRdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.2.0/23
Signature Algorithm: sha256WithRSAEncryption
15:a6:cc:72:32:44:7f:90:44:f0:35:9b:e5:45:b5:08:fb:be:
c7:1e:a0:57:51:02:7a:bc:3b:bb:93:7d:88:b1:83:aa:c3:3d:
e3:d3:ec:fd:d7:48:e0:27:da:bc:8f:f5:3d:e7:a7:95:a2:f6:
bc:46:ea:86:88:5a:6c:de:6a:cf:4e:c1:e2:08:4e:6f:69:c5:
17:bb:83:0f:1d:fe:45:55:3f:4e:e0:10:bb:42:51:32:2d:e4:
7b:fe:32:5a:71:7c:c4:28:ca:e3:b6:3a:c0:00:62:cc:9a:d9:
49:56:61:bb:06:a0:38:3b:aa:62:14:4b:39:8c:83:ca:c1:e0:
bb:00:90:5d:64:d8:b6:da:62:b8:5f:a7:2f:c3:42:e1:5b:58:
d6:b5:a5:2e:19:44:7b:b8:fb:4c:6c:21:f8:1f:18:c4:59:e0:
21:f6:65:95:c8:66:d0:f3:ce:a3:49:c9:57:89:66:3c:c2:1b:
a9:f9:9a:e7:2d:2b:aa:03:56:c6:01:e9:d7:71:0f:b8:76:f7:
51:92:1e:e0:6f:c3:17:5b:2e:06:aa:7c:eb:22:f5:1f:26:c8:
48:0a:c9:cd:69:5e:6c:1f:38:36:cf:3c:63:d2:fc:38:54:6c:
8d:49:2d:5b:6d:40:6c:56:63:0a:41:ce:13:bc:b4:2c:6d:a5:
34:ef:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:39:57 2025 by rpki-client