Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/zIC946FC0tsOsf4Kuz2japvLyHo.roa
File: zIC946FC0tsOsf4Kuz2japvLyHo.roa (raw, json)
Hash identifier: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=
Subject key identifier: CC:80:BD:E3:A1:42:D2:DB:0E:B1:FE:0A:BB:3D:A3:6A:9B:CB:C8:7A
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 01942368F343046D3CD0D23D79F19044AED2
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/zIC946FC0tsOsf4Kuz2japvLyHo.roa
Signing time: Wed 01 Jan 2025 19:47:48 +0000
ROA not before: Wed 01 Jan 2025 19:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42405
IP address blocks: 89.42.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f3:43:04:6d:3c:d0:d2:3d:79:f1:90:44:ae:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc80bde3a142d2db0eb1fe0abb3da36a9bcbc87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:63:87:e0:0e:34:cc:84:e1:15:bf:7e:48:
7b:ef:cc:83:4f:43:96:ef:3f:58:7f:80:b2:50:31:
ed:f4:14:df:f7:bb:20:b8:c2:62:ad:8c:62:ce:1b:
23:c4:2c:4c:b8:13:f3:5d:83:63:36:ce:ed:6d:55:
34:58:4f:bd:37:d5:f4:f2:bd:95:77:9e:1f:8a:75:
11:4a:d0:61:f4:9e:12:da:fd:3a:c3:f2:e1:c4:04:
01:87:a5:7b:9b:1f:ec:35:fa:d6:6e:22:91:1f:97:
de:e2:89:4f:63:f9:44:13:25:ad:47:a3:49:dc:2e:
0c:e0:6c:cb:d9:63:15:9b:f4:a6:a6:c5:35:f0:bc:
b1:e8:26:3d:90:51:ea:80:b6:d0:02:3d:18:6c:7b:
56:93:46:53:29:bd:7d:bd:d8:04:4f:df:f9:f0:c9:
f5:0f:e0:c7:1b:52:b6:67:2d:ef:04:8a:86:fc:ca:
3c:45:b3:c8:5a:11:fa:03:8b:b2:77:8e:66:f3:fa:
09:6a:76:b3:ac:d7:ea:9e:23:e4:d0:6f:3a:86:5e:
c7:7d:7d:57:2b:11:11:c8:34:27:6b:e4:93:a8:30:
f6:84:fb:0a:89:86:51:9b:c5:c5:c8:b8:09:b9:47:
79:64:86:89:93:da:8f:90:14:e9:e9:84:48:ca:f1:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:80:BD:E3:A1:42:D2:DB:0E:B1:FE:0A:BB:3D:A3:6A:9B:CB:C8:7A
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/zIC946FC0tsOsf4Kuz2japvLyHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:57:ce:c3:d4:af:d1:d2:e8:07:ef:d0:a6:41:82:d9:64:fc:
9e:54:c5:7b:1b:f9:bc:33:06:03:15:90:a4:cf:c2:f3:58:df:
56:46:1e:86:81:87:70:91:3d:c1:63:6b:db:b9:d0:84:0d:45:
12:e4:71:38:03:9d:2f:4d:e7:bf:cc:3c:42:77:fc:a6:4d:a0:
a6:f0:f5:a2:7d:b9:4b:28:93:92:66:0b:2e:b9:0c:80:ee:12:
f3:75:16:41:77:d7:f9:0d:e7:5d:dc:7a:2d:30:c7:b0:2c:25:
39:60:13:c1:c5:5a:eb:40:93:a7:1e:3d:1a:d0:38:72:bd:64:
ab:20:39:47:23:3c:30:5c:36:5d:7c:92:ed:ad:9d:2b:2a:cc:
9b:b1:cf:40:24:6f:d8:fe:70:f2:f8:79:61:80:4d:e2:19:59:
8e:bd:fa:b3:33:3c:e7:29:8d:e4:03:6a:eb:86:3b:cc:6a:e7:
8b:bf:11:66:ab:01:3f:3d:e3:14:ab:2d:65:46:cb:f4:1b:9c:
ad:8a:42:e7:70:5f:0e:dc:b5:e2:86:79:e6:e9:83:9d:34:b5:
70:0e:30:7b:90:f0:0f:c8:80:7d:9c:d4:94:9a:f7:18:1c:60:
67:ee:f0:de:0f:f0:4c:80:ab:90:c5:02:56:88:34:7e:5a:7d:
f4:65:39:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net