Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/ZpPHkeZ_D9zOR1r9ddv8P5qN5Bs.roa
File: ZpPHkeZ_D9zOR1r9ddv8P5qN5Bs.roa (raw, json)
Hash identifier: A59UxRRGgR+JT73G/bb/9C8OAUpYZN7HTOO2tWj/3N8=
Subject key identifier: 66:93:C7:91:E6:7F:0F:DC:CE:47:5A:FD:75:DB:FC:3F:9A:8D:E4:1B
Certificate issuer: /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial: 019425FC9461F1AC9FC572420401B19EE27A
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/ZpPHkeZ_D9zOR1r9ddv8P5qN5Bs.roa
Signing time: Thu 02 Jan 2025 07:48:17 +0000
ROA not before: Thu 02 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207766
IP address blocks: 213.240.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:94:61:f1:ac:9f:c5:72:42:04:01:b1:9e:e2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Validity
Not Before: Jan 2 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6693c791e67f0fdcce475afd75dbfc3f9a8de41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:fd:50:f5:51:26:9b:5f:04:3b:55:3e:85:
b0:22:c5:55:a5:07:59:47:45:74:1d:7f:fb:d8:9c:
99:21:a3:c4:50:47:1a:47:ed:27:3c:28:bc:90:16:
8c:d1:5f:99:23:e7:14:0b:49:50:fe:02:75:0f:13:
ae:1a:0c:79:02:2c:f1:76:32:f3:3c:0f:28:9a:c9:
7e:28:36:95:6a:86:30:9d:c3:d9:a1:a9:9f:a5:10:
37:72:db:a8:f2:b9:92:b3:8a:94:b3:2d:5a:19:22:
98:f8:db:63:98:0d:a2:20:97:fe:19:fa:11:d0:f0:
3d:05:e5:de:bd:d5:fc:c1:a3:0e:cb:ac:b7:8e:47:
c2:57:6b:a0:8b:78:9c:37:a0:29:76:65:13:94:3c:
79:7e:fa:5b:27:c3:6d:60:b8:fd:1a:e3:dd:a0:9f:
a1:2b:1e:15:a2:fd:cd:72:5e:90:b1:a0:48:4c:95:
63:92:73:0d:79:6d:2f:7e:b7:6e:d8:3c:23:64:ed:
91:72:66:30:81:df:c6:1d:fe:4e:d8:88:59:a1:96:
a8:0f:ff:f6:f8:3f:41:7f:a2:d5:58:e1:3d:fe:17:
c4:ec:a0:ec:cb:d8:75:ca:34:f9:0a:ce:3a:91:fe:
f8:b1:c9:b9:db:f4:c6:c7:16:9e:e1:de:be:82:5c:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:93:C7:91:E6:7F:0F:DC:CE:47:5A:FD:75:DB:FC:3F:9A:8D:E4:1B
X509v3 Authority Key Identifier:
keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/ZpPHkeZ_D9zOR1r9ddv8P5qN5Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.240.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:67:73:29:99:b2:2c:03:f0:23:7d:24:5f:9c:d0:32:5b:a3:
2b:85:af:37:04:d2:d8:1d:43:bc:63:b7:bc:b3:b1:71:ae:13:
9c:a3:cc:5c:dd:66:86:6d:c6:ba:15:bb:49:18:d8:a1:09:0e:
c4:3e:cf:20:15:7c:a7:1f:12:d2:fe:1b:88:f3:e2:eb:10:50:
cb:eb:61:a5:eb:23:62:e7:26:00:d4:16:ef:01:c3:77:fc:ca:
ee:65:3c:65:a5:2a:20:d2:44:fe:20:3b:c9:5e:8d:8f:33:6e:
8d:ce:ed:a6:24:c5:4b:22:cd:ad:82:9b:38:5c:61:93:a9:ac:
e6:19:a1:0d:d1:d5:02:fb:ec:b9:68:7b:8d:8d:8c:e8:cd:8e:
eb:7a:99:2a:ae:c2:5d:a4:f6:54:37:cf:d1:53:12:cb:dd:f3:
a2:03:5c:83:f6:0d:b2:be:62:d3:35:9b:8e:e9:59:ce:ce:cb:
8f:0e:1e:15:41:85:74:d3:ae:ac:55:83:31:8a:50:65:a4:bd:
ba:2b:7b:1a:04:f3:b6:ce:a5:df:31:36:5f:c1:99:4e:ab:0c:
e1:79:b5:47:0a:a7:d8:cf:98:7c:f0:aa:17:36:54:7c:72:c1:
42:18:38:6f:98:03:2a:03:90:cd:78:08:c7:dc:c7:de:ef:59:
d7:59:18:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 17:48:32 2025 by rpki-client on console.sobornost.net