Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZhlFXHa0g6VGPaJmFBv50p6qfFQ.roa
File: ZhlFXHa0g6VGPaJmFBv50p6qfFQ.roa (raw, json)
Hash identifier: Xre3kTNe8uDgzCnTLAGfpO2+0JoZ4UdxwtdsXs0/RmQ=
Subject key identifier: 66:19:45:5C:76:B4:83:A5:46:3D:A2:66:14:1B:F9:D2:9E:AA:7C:54
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018B8B32FC0D6D3991DE9B1785689E839E92
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZhlFXHa0g6VGPaJmFBv50p6qfFQ.roa
Signing time: Wed 01 Nov 2023 14:04:16 +0000
ROA not before: Wed 01 Nov 2023 14:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42849
IP address blocks: 193.200.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:32:fc:0d:6d:39:91:de:9b:17:85:68:9e:83:9e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Nov 1 14:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6619455c76b483a5463da266141bf9d29eaa7c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:76:2b:ed:c6:9d:ca:52:99:b8:22:59:13:
8f:04:75:5d:1b:16:4f:20:c5:3d:79:ae:96:ca:be:
54:b6:03:9c:a6:e7:1e:44:17:d4:b9:36:18:ad:6c:
d5:b2:ed:e1:93:88:43:1a:51:7e:01:1b:40:6a:84:
f7:4b:fd:62:f8:16:dc:c6:a8:f3:d1:9c:76:fc:b3:
86:2b:5c:31:7e:b7:a7:46:f7:8c:4c:0c:f4:a6:23:
5d:8c:72:f7:b1:22:69:ce:03:e3:90:f0:b5:8e:65:
80:81:eb:63:80:a8:cd:7b:df:9e:f6:80:b9:a6:7e:
89:2c:bf:2a:1d:2e:12:d6:ba:9b:d9:c0:db:d9:50:
2d:9f:18:ca:d4:82:01:1c:ad:de:9d:9e:34:f8:15:
8f:58:1b:de:b2:e3:e2:56:43:20:cb:e1:f8:10:d7:
26:1b:ce:73:88:74:a5:b6:05:6a:dc:22:ed:59:a2:
aa:e8:74:cb:14:0a:6e:8b:bf:25:b2:44:7d:02:9f:
ab:bc:2d:40:eb:71:1b:b9:67:f7:01:ed:6c:86:cc:
6d:98:74:6c:8e:b8:9c:39:f8:e2:91:b3:60:83:1f:
39:64:89:96:89:5b:4b:25:04:5b:63:cb:30:26:01:
7b:0d:b2:a7:d5:0e:04:e4:ca:4d:cc:58:0b:a4:c1:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:19:45:5C:76:B4:83:A5:46:3D:A2:66:14:1B:F9:D2:9E:AA:7C:54
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZhlFXHa0g6VGPaJmFBv50p6qfFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:08:55:c8:4a:fa:f5:bb:ad:11:21:d3:5d:ee:61:6e:ae:9b:
77:ee:2a:4e:34:37:12:db:1b:0d:2a:53:be:4d:ae:c9:4a:21:
02:9f:6c:63:d3:bf:dd:38:53:1f:c8:43:41:7a:7e:c8:7c:d7:
ea:46:84:1f:90:f6:12:7a:b4:23:74:48:db:68:25:c2:a7:a7:
cd:e6:de:6c:af:96:ba:ee:5c:8d:e8:e4:e5:32:66:97:e7:7e:
98:8e:de:35:26:34:4e:33:31:76:9b:20:19:c4:9b:02:a4:aa:
32:5c:f5:3c:ae:8c:a3:9f:86:cc:02:2c:e5:b1:6b:0c:41:13:
89:88:9f:fa:c1:e5:a8:ff:9b:fc:bf:08:64:53:99:ce:3f:55:
ae:4f:a4:f0:00:71:8e:66:eb:1a:6e:e9:32:6f:13:e3:b8:4f:
bd:20:a0:40:21:bf:8f:ad:e5:fe:77:27:10:7c:c2:5b:32:91:
93:e7:7b:81:82:c2:36:de:bf:fd:95:6f:ed:57:e7:f3:d9:0d:
4b:4a:40:f5:f8:71:1c:70:8e:ee:a1:d7:3d:ec:8f:40:8e:86:
a1:4d:71:b6:27:a1:7e:ff:8e:a2:dd:fc:39:bc:c1:a1:dd:db:
41:2c:71:8a:d3:bb:db:35:d1:c9:f8:e1:44:49:40:7e:83:33:
c6:aa:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:24 2025 by rpki-client