Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/zN4M9ushRv2eJEtcHiMPxFXDJ2E.roa
File: zN4M9ushRv2eJEtcHiMPxFXDJ2E.roa (raw, json)
Hash identifier: EY53g+j6lDJf8Xi7dtwys2yZTOHPOSV8fH6blNwAPKA=
Subject key identifier: CC:DE:0C:F6:EB:21:46:FD:9E:24:4B:5C:1E:23:0F:C4:55:C3:27:61
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 019424B3AC97CB8574DD63CDB482A80B34C9
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/zN4M9ushRv2eJEtcHiMPxFXDJ2E.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 46.31.78.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ac:97:cb:85:74:dd:63:cd:b4:82:a8:0b:34:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccde0cf6eb2146fd9e244b5c1e230fc455c32761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:04:64:09:94:24:c2:c8:1a:2b:e7:dd:73:
a3:72:86:38:b1:fb:56:03:8e:bf:c2:94:61:1d:a8:
4d:24:c9:35:d2:c1:a3:a2:35:8b:be:c5:a8:d3:f5:
56:a0:05:e1:b0:5e:d1:87:61:38:70:30:e5:f5:b6:
3a:11:0c:93:3a:ee:1d:05:67:24:4f:07:b7:27:ab:
ce:4e:72:e4:6a:0d:1f:95:1d:82:84:eb:7d:e7:36:
da:46:fc:6c:94:81:99:0d:95:f7:2c:d6:84:51:dd:
27:19:6b:67:9b:52:69:15:d8:69:09:3e:d1:b7:b2:
cf:70:0a:53:44:31:5a:a6:1b:11:c0:9f:d7:92:aa:
d6:e0:b6:eb:24:4b:9f:6f:71:18:88:dc:a3:f9:ce:
a4:ac:ee:e7:df:de:5d:c0:f7:9e:42:fb:be:8d:91:
c9:25:d8:4c:19:5a:00:4a:7d:ef:a5:83:47:de:38:
60:94:20:e8:7d:15:be:dd:83:7a:ca:58:ed:da:e4:
bd:ab:ef:03:d5:87:c9:9c:00:01:25:78:ee:a4:66:
99:8b:c6:c8:4f:3d:7d:b6:99:1c:c4:f2:2e:1f:31:
a2:b3:02:6d:d1:11:1d:35:51:d9:56:f7:e5:50:b9:
6d:54:44:49:4b:ec:99:f4:20:f2:0d:c4:36:9a:38:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DE:0C:F6:EB:21:46:FD:9E:24:4B:5C:1E:23:0F:C4:55:C3:27:61
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/zN4M9ushRv2eJEtcHiMPxFXDJ2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.78.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c8:ce:1c:be:f1:82:25:81:c6:b6:b2:33:70:7e:a8:c0:ac:
cb:96:9c:d6:81:c6:60:5c:20:fa:41:80:de:2a:89:6c:56:24:
fd:73:39:d9:d5:24:4a:52:a5:72:6a:c6:f5:21:fa:95:b0:d4:
9a:a8:20:5a:89:20:d2:ae:a0:1b:f2:6d:dd:22:a5:6a:3b:13:
ef:35:45:6e:62:d3:07:c4:0b:bf:72:86:42:4f:bf:96:c5:ce:
94:b6:1a:0d:b4:5e:7e:58:38:7a:85:45:ae:f0:48:76:09:f1:
d3:98:ff:6f:c5:3a:06:11:fc:eb:dd:0e:0a:10:58:6c:fb:f4:
62:86:12:99:ec:b0:fa:04:69:0b:0a:11:9a:d3:08:cf:b3:42:
de:66:e5:95:c4:89:3e:9f:31:37:60:e4:22:c5:b9:58:df:e2:
dc:70:8a:39:d7:b7:85:0c:9c:80:58:a4:b9:84:9e:b0:f8:d2:
47:86:3c:d6:be:2e:fe:ff:80:6d:6d:8e:49:1c:2d:c3:78:98:
0c:b6:09:6a:62:41:8a:26:7b:2b:b9:5b:de:ef:e7:5a:1f:8f:
cf:ab:96:6c:04:96:10:92:11:05:a1:15:29:31:3c:29:3f:30:
e0:4d:4a:93:ca:75:ea:a6:f6:36:ac:87:79:37:46:e8:5b:f9:
7b:0f:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:31:05 2025 by rpki-client