Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/zijtuBvUTHoACL0vLKqZfOgzwrA.roa
File: zijtuBvUTHoACL0vLKqZfOgzwrA.roa (raw, json)
Hash identifier: /MUioQ1kaDrTgFZ5Z1TeKDrxhjrVzyNRI36qm2VszV8=
Subject key identifier: CE:28:ED:B8:1B:D4:4C:7A:00:08:BD:2F:2C:AA:99:7C:E8:33:C2:B0
Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial: 019423D742F447FF33D0682E56F8438BA244
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/zijtuBvUTHoACL0vLKqZfOgzwrA.roa
Signing time: Wed 01 Jan 2025 21:48:17 +0000
ROA not before: Wed 01 Jan 2025 21:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34878
IP address blocks: 129.13.0.0/16 maxlen: 16
141.3.0.0/16 maxlen: 16
141.52.0.0/16 maxlen: 16
2a00:1398::/29 maxlen: 29
2a00:1398::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:42:f4:47:ff:33:d0:68:2e:56:f8:43:8b:a2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce28edb81bd44c7a0008bd2f2caa997ce833c2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:d2:52:b8:8c:45:e9:57:7d:2e:52:b7:bf:
a2:8a:a9:5b:d5:9f:3e:c2:6e:8c:f8:e9:0a:98:d5:
6a:17:3b:9f:dd:28:b0:e5:02:8c:70:b1:3d:ae:8a:
99:04:00:23:9c:f2:99:96:30:e0:d9:09:b4:4d:e0:
39:a6:7c:fa:56:3a:86:a5:71:76:0c:23:2a:47:73:
2c:0d:55:8e:fe:63:5b:54:b4:62:62:fc:f0:84:ce:
d3:37:be:e6:c1:22:e0:bf:e8:67:9e:8e:08:0e:64:
90:90:ea:3e:f8:35:23:58:00:64:3f:9d:b1:a6:cc:
1d:bb:81:b4:e5:d9:00:e2:2f:cc:93:34:7f:7d:d3:
98:ca:0d:d6:d5:09:74:d2:29:1f:87:aa:3a:bb:8e:
2b:d0:fa:cf:bb:c5:a0:27:7f:ab:d0:2a:de:ed:ea:
7f:0c:74:ed:35:27:42:b6:32:59:af:a4:97:49:8f:
5b:c7:e4:33:25:93:3a:ce:84:66:1f:73:c5:8b:2b:
34:c8:11:fb:56:f4:6c:c4:e0:ff:aa:4d:e0:0f:99:
7b:62:35:73:de:fd:5c:d5:5f:76:ea:2c:86:29:30:
82:4d:3d:ac:29:b1:19:5e:8d:2e:94:fa:58:e9:35:
57:31:87:3f:c2:d7:ec:67:a9:e1:71:82:d7:51:42:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:28:ED:B8:1B:D4:4C:7A:00:08:BD:2F:2C:AA:99:7C:E8:33:C2:B0
X509v3 Authority Key Identifier:
keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/zijtuBvUTHoACL0vLKqZfOgzwrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.13.0.0/16
141.3.0.0/16
141.52.0.0/16
IPv6:
2a00:1398::/29
Signature Algorithm: sha256WithRSAEncryption
6f:7e:98:b8:3b:0a:d8:4b:67:22:4c:14:46:2a:26:c6:ba:de:
63:ca:08:69:de:a3:f8:dd:a8:43:33:9e:a6:45:85:48:f8:98:
5b:3d:17:22:a0:98:1c:3c:0e:c8:eb:4c:e5:b0:1a:90:61:d0:
3c:f6:50:ec:ee:08:13:00:f5:ae:87:1e:ad:0f:b0:53:62:8c:
a9:fc:d9:52:87:43:6e:e7:4b:e4:ac:88:28:47:cf:dc:69:4d:
6d:c1:9a:88:da:e2:11:55:5b:70:c3:ed:2b:e1:35:ba:5b:83:
ad:bd:38:1f:c5:ba:53:a9:31:e2:5d:cb:00:9e:6a:29:68:6b:
92:31:8f:c8:6d:c6:b4:c7:58:af:a4:5c:71:7d:5e:d0:3d:b1:
af:fa:e9:63:20:49:2c:08:ef:86:29:9e:df:08:c7:be:8f:26:
c7:9c:84:cd:0f:bf:fe:c6:5f:29:c2:e1:79:b5:94:4a:d9:8b:
f2:db:56:38:a9:e0:df:5d:eb:68:0e:70:ce:09:79:16:45:24:
33:38:c3:0d:b1:68:c6:83:77:52:e0:1a:a9:c3:82:6d:1b:e5:
9f:dc:0c:3d:5a:0a:4e:09:a4:3c:76:c1:da:fe:13:43:9a:fb:
17:ca:bd:2c:98:fa:33:1e:28:77:bb:06:02:96:c6:ae:be:a1:
65:c2:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:19 2025 by rpki-client on console.sobornost.net