Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/Zul1tgj5h7XyL00R81W1mi6g1V0.roa
File: Zul1tgj5h7XyL00R81W1mi6g1V0.roa (raw, json)
Hash identifier: JA2Lp3OQPetYYVSiRbEJs9OwBpQrX9gJ6sScomlZ4Xo=
Subject key identifier: 66:E9:75:B6:08:F9:87:B5:F2:2F:4D:11:F3:55:B5:9A:2E:A0:D5:5D
Certificate issuer: /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Certificate serial: 01942444C23E060F1949A7F8C8E90ADF0FE3
Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/Zul1tgj5h7XyL00R81W1mi6g1V0.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31164
IP address blocks: 193.25.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c2:3e:06:0f:19:49:a7:f8:c8:e9:0a:df:0f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66e975b608f987b5f22f4d11f355b59a2ea0d55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1e:5b:69:23:c4:55:9e:84:91:60:a2:87:58:
9c:4d:d6:c2:7c:ca:82:52:ab:75:74:0c:8c:7c:6f:
62:26:1a:14:b5:1e:55:94:4f:e3:c7:d0:f2:80:4c:
18:17:d4:0d:40:84:88:37:97:e1:2f:9d:ec:fd:58:
35:ec:d4:47:44:a8:6b:b9:7c:43:4c:d2:84:7e:09:
58:a1:77:11:73:23:23:ff:6d:a2:8b:34:5b:ec:b1:
05:a6:0f:d9:38:54:8b:62:a1:12:0a:bc:19:85:c0:
13:ef:9e:a3:22:12:84:09:a9:e9:12:9a:86:e6:59:
3e:a8:e6:d5:1a:6f:82:38:38:f3:75:ee:9f:1a:54:
00:44:c3:8b:c4:26:74:0e:3b:66:30:4d:dc:e4:25:
9c:a8:87:0b:49:6f:6a:08:56:01:f4:35:12:1a:7e:
cc:b6:1c:64:13:5d:22:76:8a:f6:ef:15:fc:96:08:
c1:6c:c6:a8:fa:4b:29:ef:9c:f9:e8:b1:b6:95:76:
2d:99:07:8f:51:d6:df:53:5f:e0:f9:03:14:72:1f:
17:64:e9:08:d4:41:56:51:b3:dd:71:52:76:e0:e1:
56:2a:9e:f9:4a:4c:4b:25:05:21:c8:24:85:54:37:
5e:b1:22:5a:da:df:b0:93:46:53:34:72:f9:e5:6a:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:75:B6:08:F9:87:B5:F2:2F:4D:11:F3:55:B5:9A:2E:A0:D5:5D
X509v3 Authority Key Identifier:
keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/Zul1tgj5h7XyL00R81W1mi6g1V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8b:59:c6:ef:6b:78:3a:fa:58:5f:8a:e6:fe:9c:a4:59:c0:
d8:a0:6c:58:c5:61:c5:2b:3d:64:cd:aa:cb:6b:cc:7c:3d:1a:
8d:21:e7:0b:8d:79:86:52:c8:f1:28:d9:1d:cb:17:e7:cc:d3:
aa:01:7d:a8:81:23:d1:34:87:af:5b:d0:93:38:8c:bc:04:ed:
4a:01:d8:d2:47:e0:3c:7d:a9:c1:69:23:94:95:55:0c:b0:c0:
df:16:6d:e4:00:98:9a:79:34:cb:9d:bb:a9:3b:2c:4c:f1:e0:
3c:56:92:d1:f5:c4:8c:b2:64:86:5a:9e:6b:dd:dc:01:ad:41:
54:1b:39:a2:13:95:42:ad:e1:7f:d2:9c:06:fb:12:ed:2c:db:
7a:90:11:4e:51:3a:35:ad:f5:46:41:c8:f4:b8:0f:3d:20:36:
a4:ca:0d:92:85:32:4c:8d:1b:f1:f7:04:d9:8a:80:d9:bc:6c:
01:1f:f8:f1:1b:b0:f0:da:f6:3f:81:b4:cc:34:93:d2:b9:3b:
b9:44:a9:a6:a3:33:26:7a:5c:0e:23:e6:40:bd:88:98:28:8c:
d5:73:ce:51:0e:10:3f:ae:3b:f3:24:f6:73:4b:f4:2e:95:6d:
20:41:b1:32:b0:cd:44:bc:43:9b:e2:74:ef:2a:70:2a:d7:cb:
ff:ba:c6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:15 2025 by rpki-client