Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa
File: zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa (raw, json)
Hash identifier: jAK0gwv0VcbXBTEIIqlyy6XCdTitcUhhvcmF8ss17m0=
Subject key identifier: CC:57:53:25:7E:76:80:F0:B0:DA:22:C3:DC:D6:14:54:EF:95:CB:1A
Certificate issuer: /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial: 01942067C4D71EEB22B8736F48BAA23BE159
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.134.148.0/24 maxlen: 24
193.134.149.0/24 maxlen: 24
193.134.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c4:d7:1e:eb:22:b8:73:6f:48:ba:a2:3b:e1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc5753257e7680f0b0da22c3dcd61454ef95cb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:db:2d:f3:a5:8d:a5:ec:37:cd:04:22:d9:
db:a9:88:4e:e6:79:52:1a:be:42:64:95:be:d9:59:
37:56:68:d1:bf:db:8c:7e:51:83:a4:b8:3f:8d:84:
ee:0d:fa:b6:eb:66:fc:63:6a:ff:03:db:9a:f9:1b:
a4:47:8f:12:ca:de:90:c1:3a:d3:b3:ad:81:9e:a1:
34:b5:de:8a:7c:d5:d8:53:fc:f7:4e:60:75:9a:d2:
95:f3:ae:12:d7:93:67:08:cd:5f:72:ba:ee:d8:65:
87:1a:e3:bb:97:0f:75:ce:c4:9c:27:9e:2b:7b:7a:
40:6f:6d:03:40:e4:1c:f3:a6:77:3d:15:8d:02:a3:
c1:73:fe:81:59:04:e4:3a:2e:6c:f5:10:6c:12:c8:
dc:5b:15:20:62:43:c1:17:80:69:ad:9b:c2:19:1c:
d9:89:05:7c:a2:38:29:34:fa:a3:5c:ed:bd:0b:4d:
50:b9:50:91:7b:14:46:79:8f:b4:dc:73:cc:50:ce:
68:ae:0c:66:7b:88:54:e4:86:38:52:37:bd:a9:3b:
86:37:b8:a6:b6:0c:1c:9c:70:3b:76:9b:dc:14:e9:
32:9f:bc:1b:a0:2d:ad:e8:56:ff:80:c7:0f:b5:af:
68:66:48:2e:8d:5e:2c:30:47:99:2e:cd:fb:eb:e0:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:57:53:25:7E:76:80:F0:B0:DA:22:C3:DC:D6:14:54:EF:95:CB:1A
X509v3 Authority Key Identifier:
keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.148.0-193.134.150.255
Signature Algorithm: sha256WithRSAEncryption
e2:73:31:19:f9:d4:ec:aa:84:ca:06:e2:04:57:2e:86:42:2c:
9c:0e:23:77:5c:b6:88:c8:ac:d4:d2:3a:22:ff:09:be:81:bb:
d9:1e:12:66:fc:da:b5:f1:95:8b:c4:fd:d3:0d:10:16:36:8d:
f2:3f:9d:79:12:96:78:7e:5d:b9:4a:dc:c4:75:a5:a7:9d:d2:
90:63:66:05:9e:2f:be:f2:98:3e:32:c9:67:a7:40:26:04:b9:
64:ce:8c:03:70:6d:f0:4a:b0:44:e9:ca:dc:57:a7:bd:90:5d:
f7:42:cf:14:6f:e2:f3:42:51:e1:01:fc:bd:54:0e:a8:0c:fb:
d0:61:6c:0d:d5:ea:84:6d:0c:fd:75:46:8b:51:46:2b:39:7b:
ed:fa:86:c3:7f:5b:89:c7:b2:35:1c:6e:c9:37:24:bb:82:8b:
dc:db:73:34:c9:d1:17:f5:47:8a:b8:75:60:90:aa:3c:ba:1d:
3b:8e:06:a6:66:5a:0d:9e:13:92:1f:e7:9e:11:5c:e2:2b:3e:
75:d0:ba:c8:b9:23:09:fb:b0:48:64:6a:45:b7:60:52:7a:05:
f3:7d:78:e4:49:68:26:e9:43:46:45:d2:3d:ae:15:53:82:23:
e4:8f:33:4e:2c:e4:88:60:9a:79:b5:5a:d4:10:40:64:a5:ac:
aa:49:e4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:12:47 2025 by rpki-client