Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/ZKVdzQrCXu5mzOlv7FGCL2aQx9o.roa
File: ZKVdzQrCXu5mzOlv7FGCL2aQx9o.roa (raw, json)
Hash identifier: YxpuZj2Kv5nLT3u4CJE0gbWGMjfbkqvjdVZv+AJXYYo=
Subject key identifier: 64:A5:5D:CD:0A:C2:5E:EE:66:CC:E9:6F:EC:51:82:2F:66:90:C7:DA
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 019426D960FD71683425B36FC4B1B8DD5E80
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/ZKVdzQrCXu5mzOlv7FGCL2aQx9o.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208700
IP address blocks: 62.192.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:60:fd:71:68:34:25:b3:6f:c4:b1:b8:dd:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64a55dcd0ac25eee66cce96fec51822f6690c7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:94:34:98:f5:24:95:9d:4a:a7:10:e0:25:
55:10:7c:87:ff:a6:58:23:64:23:7a:d9:62:ec:f6:
02:87:c5:3b:ce:96:28:a2:65:15:de:1f:0a:24:74:
c0:5d:da:63:4c:fe:fe:71:2e:b5:89:41:df:5e:e2:
5d:58:ad:0e:e8:d8:80:c4:7e:f5:8e:20:e3:10:5a:
22:e7:87:1a:71:1a:15:e0:be:81:00:88:38:c0:89:
0c:7e:9c:5e:5e:b4:69:d3:e6:26:fc:d9:d9:0c:d2:
08:dc:a7:1e:0a:ff:28:10:84:4d:5e:37:f6:3b:71:
82:0d:24:e6:67:e0:05:a8:7a:71:a1:a6:c6:58:6c:
a8:9a:12:e9:73:f6:2d:48:ac:84:b1:3c:22:1a:cb:
14:e2:b4:2c:2e:53:2e:6b:70:6a:59:ca:f5:84:ee:
d7:72:81:22:6c:92:bb:3d:e5:4e:a5:c6:49:79:ad:
0a:31:b6:c9:1f:10:ea:df:ac:24:14:7f:cb:9b:60:
0c:22:74:21:50:3f:a4:45:48:de:58:2b:cc:e7:9c:
bf:ef:ba:5f:e0:c6:d4:30:4e:ac:ad:c9:c5:f5:a8:
d2:71:ef:2f:f8:15:f6:d2:e5:64:e7:fa:4e:78:19:
52:80:df:f3:b7:0f:6d:09:4a:de:99:71:22:14:1e:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:5D:CD:0A:C2:5E:EE:66:CC:E9:6F:EC:51:82:2F:66:90:C7:DA
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/ZKVdzQrCXu5mzOlv7FGCL2aQx9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.155.0/24
Signature Algorithm: sha256WithRSAEncryption
93:00:be:60:5f:3a:ed:21:31:21:02:fd:b7:a6:d0:2e:3b:66:
2f:2c:9f:b6:40:cf:de:67:65:ae:5e:c0:ab:b5:8e:42:28:9c:
75:c1:76:89:9e:96:61:e7:da:52:30:c4:58:c6:4c:e2:e0:eb:
0d:65:97:ae:0b:c3:0b:f0:04:2b:57:82:88:a0:4f:1b:df:e9:
8e:4b:95:3f:21:48:35:1f:0d:ac:16:6a:ee:36:f6:68:95:9f:
10:c0:bf:45:00:db:72:ab:e6:c3:6c:59:d3:d6:47:3a:dc:65:
77:a6:a5:5a:56:0e:f6:1f:f4:9c:a5:8b:ad:9d:cc:33:51:f6:
f1:43:ff:7a:be:8a:e0:7b:a0:cb:55:fb:e6:5e:84:61:28:55:
a6:df:99:d7:9d:eb:17:c7:6a:c2:be:62:f8:b9:ba:be:d0:98:
44:e2:a1:2c:1f:89:73:da:b8:77:ef:5f:ee:e1:52:ed:7a:dd:
4b:4a:13:11:73:d7:0a:cc:3a:29:a8:f8:16:8e:25:fa:b4:3f:
db:28:53:d8:c2:8a:ed:bd:a7:1f:14:04:1b:f3:ef:13:30:6d:
d5:47:3d:a6:f4:3a:30:55:27:9a:4a:cf:29:9a:90:32:19:28:
1c:60:b2:22:4e:45:ad:99:2c:8b:ed:68:bd:ba:11:de:5d:53:
bc:4d:77:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:14:02 2025 by rpki-client on console.sobornost.net