Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/zGd05-NZw-sJTwuBu02tPsH24pE.roa
File: zGd05-NZw-sJTwuBu02tPsH24pE.roa (raw, json)
Hash identifier: ofSwbMcGSKnZ4x4xLzhpGhAWtlZ8SB33VsUVqo3M7tU=
Subject key identifier: CC:67:74:E7:E3:59:C3:EB:09:4F:0B:81:BB:4D:AD:3E:C1:F6:E2:91
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0194861A1F4D46AF1F1B2E884D1D1E43F531
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/zGd05-NZw-sJTwuBu02tPsH24pE.roa
Signing time: Mon 20 Jan 2025 23:44:06 +0000
ROA not before: Mon 20 Jan 2025 23:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 193.56.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:86:1a:1f:4d:46:af:1f:1b:2e:88:4d:1d:1e:43:f5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jan 20 23:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc6774e7e359c3eb094f0b81bb4dad3ec1f6e291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:c2:43:9e:d7:26:e4:76:ed:ac:fd:f8:5e:
9b:9d:e9:3e:b6:d7:0d:56:0f:09:a8:63:31:68:db:
e1:6b:1f:5b:6b:8c:eb:29:05:83:38:a2:f0:ad:ff:
e1:b0:cf:f4:2a:56:c1:c0:8c:1b:db:9b:cf:32:03:
39:1b:c3:8c:d8:42:66:e9:86:54:a2:32:5c:1a:ce:
2a:11:50:5a:c1:66:2f:43:94:17:d6:6d:31:70:ae:
5b:17:e5:dc:54:48:b3:11:fc:d4:8c:d0:94:8d:28:
8a:a3:00:97:d6:0b:71:2a:9f:48:20:c9:86:7f:cd:
c1:90:d3:c0:31:9b:a8:88:af:ab:0f:7c:a1:58:c7:
17:33:5d:5e:31:60:00:68:0c:d7:ee:9a:28:a8:70:
35:aa:70:d9:a5:e3:63:30:14:82:ea:b4:60:f5:b8:
71:bc:1e:9a:42:b6:30:d3:70:11:7a:f5:c4:22:01:
5b:fe:b7:f8:24:cd:68:c0:d7:2d:f5:b1:e9:04:8b:
29:69:5f:36:91:77:6f:58:78:50:b8:97:32:bf:d9:
e4:f5:69:c8:d7:58:7f:ac:b9:e2:87:fd:b4:88:c7:
8f:fb:54:43:e9:b7:40:8f:42:e3:0c:4f:55:63:6d:
b2:a1:7a:48:5f:65:ad:c6:d2:eb:2e:7d:b5:16:b4:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:67:74:E7:E3:59:C3:EB:09:4F:0B:81:BB:4D:AD:3E:C1:F6:E2:91
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/zGd05-NZw-sJTwuBu02tPsH24pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.126.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:74:80:34:9c:77:ed:4f:79:8d:e6:96:ed:d1:85:85:77:9b:
a6:6d:93:ae:e8:04:df:73:08:5a:c4:7a:99:19:09:5a:b5:ba:
3b:d7:ef:bf:35:fb:98:d8:93:97:c1:37:72:72:8d:74:08:21:
9b:45:aa:26:09:6b:04:0b:b1:44:42:e0:10:ff:a5:d0:d5:98:
db:41:80:45:13:6c:0c:17:ed:86:7a:67:92:35:6f:02:31:74:
84:d6:e7:e3:1f:ff:f3:4c:ba:80:99:e5:b9:df:44:1a:35:0f:
a2:96:e3:ce:57:c4:eb:36:63:f7:d0:47:04:04:58:f8:4e:a0:
f8:02:6d:24:9f:71:e2:2c:4c:2d:6a:c0:fb:aa:5f:f6:cf:ab:
64:92:a5:06:e9:04:21:c5:9c:59:36:6c:6e:aa:d1:34:22:a1:
f1:f9:c0:7b:10:9b:bd:3f:13:d7:88:38:89:36:36:5b:43:05:
2f:70:4a:c1:db:1a:53:2b:77:64:e3:75:9a:97:69:27:09:95:
11:9c:30:86:05:52:2a:7a:19:c9:f7:8e:52:6f:f9:09:39:cd:
2f:f0:92:fd:92:a7:e3:f8:6a:eb:13:e6:70:43:0e:c2:25:8a:
db:1f:02:e4:d0:b1:47:5a:55:b6:03:1b:41:73:43:17:47:b3:
60:bb:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:51 2025 by rpki-client