Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa
File: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (raw, json)
Hash identifier: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=
Subject key identifier: 65:04:34:80:01:99:2F:F8:C6:0C:3B:91:FD:DC:C0:3C:74:20:8E:AB
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019425FCD32DD1A2CDB4F10567D66FF7A530
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa
Signing time: Thu 02 Jan 2025 07:48:33 +0000
ROA not before: Thu 02 Jan 2025 07:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.9.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:d3:2d:d1:a2:cd:b4:f1:05:67:d6:6f:f7:a5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Jan 2 07:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6504348001992ff8c60c3b91fddcc03c74208eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:f6:3d:57:78:8b:89:86:e8:da:1e:d5:f8:
db:99:fa:13:07:ed:e8:90:76:38:7c:67:46:56:c4:
43:75:fc:f8:86:49:c1:f2:2b:05:51:d5:7f:69:36:
17:20:7e:65:da:2f:2e:83:c9:d7:6b:33:b1:8f:61:
3c:6a:93:c0:34:c7:0c:62:e9:df:14:fb:b0:ee:36:
dd:94:80:09:4a:93:a5:f9:9b:7d:a7:d9:7d:20:f9:
48:d1:02:69:4d:73:f5:79:d7:0b:10:e6:67:e9:07:
98:41:f8:e3:43:68:44:c7:04:c8:8c:07:72:a0:16:
4f:08:57:86:cf:12:f2:94:fb:50:ee:63:c3:06:f5:
c9:ff:a2:eb:24:a8:61:59:27:43:5e:d4:dd:0b:34:
e1:75:7a:bf:02:18:19:98:99:08:b6:1f:a7:e8:c4:
b8:5d:ab:4f:04:0e:44:3e:2b:dd:e9:7d:39:68:c8:
23:b6:8f:25:98:0a:47:38:de:c8:f4:30:64:e0:43:
b3:50:67:24:2c:1c:3a:a6:2f:c5:bb:8a:7d:f3:bc:
27:21:83:8d:39:8a:da:c0:29:a3:82:69:21:8c:85:
4e:40:56:eb:a6:66:b9:80:da:9e:ee:e7:82:1d:e7:
3a:87:be:e6:ec:10:9e:09:c9:3f:af:27:e0:c8:25:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:04:34:80:01:99:2F:F8:C6:0C:3B:91:FD:DC:C0:3C:74:20:8E:AB
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.122.0/24
Signature Algorithm: sha256WithRSAEncryption
79:47:2c:cf:f3:cf:de:9e:bf:c0:cb:35:9e:ed:95:5f:57:9a:
90:be:27:34:30:7d:e9:55:97:49:98:34:d9:31:e5:d9:95:72:
85:d1:ac:21:c9:a2:0b:e7:76:01:01:9b:2b:9a:b8:54:0c:a0:
9b:a4:64:e1:43:ef:9c:3e:d5:4b:56:28:11:d6:64:00:11:78:
13:b2:53:b5:2f:4e:be:52:cc:47:22:b4:92:b9:e3:8e:66:4a:
2e:98:4c:d4:96:89:3b:ee:d2:66:e9:25:24:ab:c3:60:69:93:
44:b6:5a:b7:66:5f:6d:df:28:3e:a1:2d:85:8e:fc:c8:98:0f:
13:6b:b6:6f:d5:cb:bb:5f:a5:0c:79:c3:93:b2:78:d8:62:d6:
d2:9a:73:fa:22:eb:4b:32:26:79:18:11:de:81:a4:44:07:f7:
7d:d2:69:1d:89:09:99:b8:a0:84:97:22:ce:9b:71:3b:96:99:
8a:74:63:91:84:06:fd:3e:1b:3f:8e:15:6a:3f:86:3a:80:6a:
de:69:ff:f9:9f:2f:5a:2d:7b:de:8d:ca:26:96:dc:1a:10:e3:
c9:8d:85:36:9b:03:5c:f4:f9:64:d9:b2:de:08:0d:8e:1f:1d:
ad:1f:62:9a:eb:fe:3f:b1:6f:81:71:ce:d3:0b:17:a2:a2:13:
59:97:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:26 2025 by rpki-client