Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa
File: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (raw, json)
Hash identifier: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=
Subject key identifier: CD:CE:0B:CB:86:52:BA:64:50:4C:90:5F:B8:07:98:11:6E:D3:11:87
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 019427488E680B7C67E694B5CD7F2AA0CE2E
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51434
IP address blocks: 91.217.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8e:68:0b:7c:67:e6:94:b5:cd:7f:2a:a0:ce:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdce0bcb8652ba64504c905fb80798116ed31187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:7b:85:a3:96:92:e1:f4:ef:e2:a5:14:4a:
5b:cf:5c:03:cc:52:cf:51:6d:5e:9f:e4:7d:23:32:
dc:4b:33:69:65:14:d8:85:84:0b:ed:2a:6d:00:85:
53:5e:b1:26:f6:c3:cf:70:85:64:d3:f6:95:3a:93:
63:dd:1d:39:f7:49:97:7e:22:81:34:02:be:1b:6e:
d2:53:72:8f:0e:21:6f:b1:12:64:70:55:38:21:89:
ff:a4:95:1a:e3:55:e9:94:ad:ca:75:75:b3:4b:4b:
54:22:e7:33:26:7b:60:65:1e:cf:b3:d1:4a:56:04:
27:1c:91:1b:5f:a8:ee:41:04:77:a2:5d:64:8c:96:
e9:29:fa:b8:d1:5e:ba:5a:6c:bb:b1:6b:ff:b1:9a:
db:d9:4f:4b:85:c1:05:ba:0a:8a:3f:a0:e7:fe:b3:
13:50:03:6d:96:aa:0a:98:f8:35:d4:85:e9:19:db:
df:6e:06:1c:35:5a:cd:b2:8b:4f:15:ec:0a:b2:ed:
a5:6b:e3:86:33:89:bd:07:d8:bb:01:6b:6d:b6:ee:
7d:ba:7c:10:ee:17:59:61:4e:c8:44:e5:d2:73:e1:
5f:45:e9:36:93:0e:db:17:70:bb:3b:28:9f:92:bd:
dc:bb:b7:d7:6d:8f:d2:86:cb:24:de:ca:d7:42:03:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CE:0B:CB:86:52:BA:64:50:4C:90:5F:B8:07:98:11:6E:D3:11:87
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:8b:bb:44:f8:52:5a:46:e7:5c:fd:fe:cc:96:59:a1:03:ea:
64:77:c0:06:15:22:18:d6:70:18:c9:23:60:e1:1a:87:4c:73:
de:96:b7:e2:f3:b0:24:14:3a:d7:4a:47:03:86:d2:c7:57:e5:
f6:c7:44:27:31:d8:17:f4:bb:53:5d:09:63:4c:c9:cd:0b:08:
53:95:0d:f6:80:b4:af:78:72:ca:2a:a7:05:2f:6c:e5:29:b7:
79:95:ac:f5:29:4e:3f:ab:83:d3:49:a5:8d:90:d1:26:fb:df:
7b:d7:d1:25:23:04:65:71:95:20:48:7e:5c:6c:c8:62:dc:08:
b4:84:e1:de:b2:f8:86:e9:ec:81:21:19:4d:cd:7b:7a:78:92:
4b:18:83:b3:9d:2b:12:ca:3a:ca:a5:21:e1:51:03:ed:d5:53:
33:ea:8f:e0:d4:85:a4:c2:00:b8:cc:76:c6:cd:8f:ed:58:2b:
56:ab:6d:a6:10:cb:2d:1f:b8:9e:78:3f:06:61:cf:95:0b:32:
ed:2c:bb:8b:a5:d0:be:a4:96:8b:b2:d2:ef:70:eb:1f:6c:d0:
05:3f:3b:db:13:7c:a1:61:ea:87:b8:c2:f4:a1:e4:10:03:99:
3f:c6:90:32:0a:66:a1:56:5e:a4:f0:79:b6:69:67:97:64:a6:
7b:54:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net