Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/ZdFfZs_T55hRNy5u2FArWOKfvsA.roa
File: ZdFfZs_T55hRNy5u2FArWOKfvsA.roa (raw, json)
Hash identifier: I+eBFzd/8A/wm8G7cmmWqK+Y/yQe2ekHVPMVNEA7s44=
Subject key identifier: 65:D1:5F:66:CF:D3:E7:98:51:37:2E:6E:D8:50:2B:58:E2:9F:BE:C0
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01823E8646DB3D9E5F08EA90CCA7575A4E3C
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/ZdFfZs_T55hRNy5u2FArWOKfvsA.roa
Signing time: Wed 27 Jul 2022 07:19:23 +0000
ROA not before: Wed 27 Jul 2022 07:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29802
IP address blocks: 45.15.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3e:86:46:db:3d:9e:5f:08:ea:90:cc:a7:57:5a:4e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jul 27 07:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65d15f66cfd3e79851372e6ed8502b58e29fbec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:9b:4e:3c:48:f3:a9:cc:0c:db:be:14:a7:
0c:d2:23:f0:31:03:c8:f4:fb:3f:cc:6e:6b:17:9f:
b4:d8:03:d1:d0:f1:2b:e6:28:ab:54:9b:c8:e9:7b:
3f:9d:27:cd:df:e3:4b:b1:19:20:80:54:90:6d:b2:
2a:a5:b2:d7:8d:8f:2a:66:dd:ac:22:d5:14:2e:0c:
8c:da:ff:05:44:89:c5:39:4e:df:6d:6d:a7:6f:31:
bf:9c:3f:3b:a5:1b:22:26:7e:87:8d:10:83:17:0f:
61:8b:90:eb:62:0f:35:1a:ae:50:d6:15:fb:51:fd:
3c:46:1c:d8:7d:ee:8b:5b:2d:ce:14:eb:c8:5b:5d:
15:b9:9e:29:4e:18:22:f4:28:db:04:a2:df:83:f9:
2a:84:7a:0d:12:a5:19:6c:d2:9d:87:86:58:1a:1b:
bd:33:54:6b:5b:9a:e0:e0:db:55:85:5d:13:91:7d:
8f:c4:b3:dc:76:44:44:8c:dc:20:66:54:fe:47:4c:
9a:f9:d0:40:fb:c3:05:ba:75:1d:21:f8:56:bc:3a:
34:df:14:b9:50:b3:fd:b1:1c:d0:6a:7c:d7:c6:87:
27:3b:3b:14:b6:d5:1a:f6:c7:2d:46:90:dc:6f:ed:
30:26:32:14:bc:c2:7a:6d:14:0e:2c:8c:9c:c3:51:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:5F:66:CF:D3:E7:98:51:37:2E:6E:D8:50:2B:58:E2:9F:BE:C0
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/ZdFfZs_T55hRNy5u2FArWOKfvsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.17.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1c:15:a2:06:e6:85:de:6c:e8:42:cb:0b:98:32:3a:11:35:
ec:9c:56:ae:ed:5f:b0:59:bd:af:73:50:47:65:0c:1b:fa:ac:
f7:06:95:21:31:f7:61:5e:04:60:f3:22:4f:54:1c:b4:32:4e:
01:7a:2b:f8:98:89:d0:4e:7a:87:b4:8a:62:a4:0e:ad:ec:3e:
e9:9e:ab:1f:3a:c3:45:ce:48:9f:42:1e:d4:48:cb:41:d9:bd:
93:c3:ca:d1:ee:cc:ec:c9:ee:25:87:bc:ad:f9:e9:ed:01:9c:
aa:93:64:a0:d3:94:27:fc:c2:66:0c:68:23:71:dc:5f:6b:2b:
c3:61:63:c5:e5:53:61:b0:13:05:67:42:0e:74:0d:38:72:2b:
86:03:e6:b3:e7:b6:e3:bf:92:d9:32:69:63:65:23:55:0f:0b:
5d:94:88:cc:7d:2d:1b:a8:4a:80:1a:16:b4:ca:b5:6e:e5:50:
09:0f:ea:0d:8d:28:a7:9f:02:3f:47:97:14:63:b2:e0:52:81:
d0:d7:5a:a1:1d:b5:79:8f:70:81:db:1e:1f:eb:d4:48:13:f1:
7c:b0:0f:b1:dc:42:81:a2:f5:85:d5:53:76:87:75:07:29:34:
e5:10:68:6d:a0:3f:26:50:4a:88:aa:8a:57:5f:9f:c5:e5:37:
89:86:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:45:48 2025 by rpki-client