Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/ZLmfDyi4aWqpFE0PZT7YouoFqII.roa
File: ZLmfDyi4aWqpFE0PZT7YouoFqII.roa (raw, json)
Hash identifier: nbnap/bdTVrLKLJNTBuHrEznwfwZ3oyER6dX2ESBqQ4=
Subject key identifier: 64:B9:9F:0F:28:B8:69:6A:A9:14:4D:0F:65:3E:D8:A2:EA:05:A8:82
Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial: 019547C7A055317BE4631DF0E49E36C397FB
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/ZLmfDyi4aWqpFE0PZT7YouoFqII.roa
Signing time: Thu 27 Feb 2025 14:20:19 +0000
ROA not before: Thu 27 Feb 2025 14:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8835
IP address blocks: 45.9.23.0/24 maxlen: 24
193.36.4.0/22 maxlen: 22
2a0b:6dc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:c7:a0:55:31:7b:e4:63:1d:f0:e4:9e:36:c3:97:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Validity
Not Before: Feb 27 14:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64b99f0f28b8696aa9144d0f653ed8a2ea05a882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:57:35:89:eb:cc:0a:e3:87:c2:a6:1b:75:
bd:2e:25:10:f3:e6:d8:9b:d6:1b:5c:8d:67:61:b7:
37:dc:fb:c6:34:dc:c4:d2:58:d0:df:12:43:7c:aa:
49:8d:98:83:4c:e4:28:a2:2b:c1:53:64:a4:d6:c4:
23:83:07:37:75:a9:3d:c0:9a:25:01:ab:b1:3e:6f:
60:e2:ce:ba:ff:ea:7c:ed:0b:24:f8:ad:f6:e1:fa:
51:b9:f7:fd:6e:3a:63:20:b0:9d:88:dd:e8:e0:06:
e0:23:0a:2a:6d:ae:45:91:28:42:4c:26:9b:ce:90:
01:eb:a3:72:68:9f:64:57:44:cd:a7:f3:fa:5e:07:
d2:9e:78:92:9d:83:26:02:1c:f0:70:ad:e7:07:c4:
4f:e1:34:af:ed:ec:89:05:c4:b0:4d:db:6b:eb:f8:
87:82:f2:4f:4d:1a:94:4e:e1:73:cd:c1:58:e8:3b:
9e:1a:15:29:2d:7c:3a:03:11:6f:cf:de:3e:35:85:
2e:ee:45:10:0d:54:1c:2a:f3:39:c4:e7:a9:05:0a:
a8:32:56:89:d3:f8:d5:6f:51:cd:11:18:a0:cc:55:
0b:46:21:3e:6b:a6:1f:de:c5:3b:23:7f:f6:a4:19:
ab:f9:b5:dc:de:04:39:71:63:b4:cb:e9:f0:d4:55:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B9:9F:0F:28:B8:69:6A:A9:14:4D:0F:65:3E:D8:A2:EA:05:A8:82
X509v3 Authority Key Identifier:
keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/ZLmfDyi4aWqpFE0PZT7YouoFqII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.23.0/24
193.36.4.0/22
IPv6:
2a0b:6dc0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:cc:78:07:20:c4:55:63:cf:ac:cd:3c:e0:b1:6d:01:e2:c2:
16:50:43:a4:8a:c4:7c:74:64:03:62:7e:57:0e:5c:37:4c:b8:
fe:04:c4:28:09:ef:4a:02:d0:d0:c8:5c:f1:ea:1c:b2:33:6d:
13:e7:9d:61:14:ae:94:b7:d9:b2:f6:8c:04:f1:0d:2f:a5:94:
05:21:09:1c:7a:5d:39:19:48:83:17:ae:22:73:e8:6b:2a:70:
8d:1c:6f:e3:2c:18:33:ab:c2:32:8f:e1:05:7d:45:c0:7a:64:
c9:ee:aa:49:2e:9c:c5:2c:7c:5b:80:64:4c:62:35:2c:a7:42:
3f:c4:83:56:1d:c1:71:c8:f8:da:a2:d8:ca:63:78:04:20:f0:
f7:54:fd:3a:46:a2:64:08:0f:07:33:ac:63:f7:15:d9:dd:ad:
b6:2c:c5:86:94:63:23:0d:9e:07:ab:72:fe:bb:8f:ec:2d:5d:
fe:92:3a:47:c6:08:a6:ef:fd:e0:3c:8c:41:97:86:38:5a:00:
63:53:a9:f9:0e:8c:80:09:f3:d1:6b:0f:4f:8c:52:76:4e:2e:
a6:5a:de:a9:3a:0d:c4:a1:e2:3d:2d:96:b5:43:a9:6e:35:90:
16:57:bb:86:b5:92:96:f1:50:b9:8c:6e:85:31:eb:92:db:a4:
f8:17:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net