Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa
File: z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa (raw, json)
Hash identifier: 9R0oeP72aK5DRkFYUsVyQ3Stx8OTGpY7qc7OKrRI9JY=
Subject key identifier: CF:CF:FC:9A:A2:DC:38:9B:4D:C3:50:CC:9D:43:0B:77:17:18:4C:C3
Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial: 01942067E633309D9E5BC40283A00F0AB3E7
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.141.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e6:33:30:9d:9e:5b:c4:02:83:a0:0f:0a:b3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfcffc9aa2dc389b4dc350cc9d430b7717184cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:6e:6d:59:ac:3b:18:77:4a:52:12:98:68:
46:42:ce:00:1c:f7:66:9c:d0:3a:8c:67:57:dd:79:
11:eb:3d:b2:95:f8:f4:df:85:b3:3a:61:b8:35:63:
c0:3f:34:b2:d7:0c:f7:73:37:03:e4:0a:d8:db:04:
5b:61:e5:5c:04:e8:37:1c:a0:81:f9:c0:34:f2:f1:
6f:ca:b7:bd:a1:dd:0c:d8:76:6f:93:76:12:82:7b:
a8:7b:01:0a:de:33:72:09:90:ca:35:a6:9a:d3:11:
31:a7:77:08:61:95:b4:03:9a:03:02:9d:cd:29:7a:
29:1c:95:95:a8:5d:a7:86:62:da:44:c9:47:24:c4:
08:f7:d4:1d:fc:ed:16:92:a2:e3:3c:a4:58:d0:37:
b2:e1:a7:b9:eb:5e:1b:db:18:b9:14:9c:1f:0c:d0:
a5:8a:81:43:c6:5c:8f:40:6f:59:e3:f7:00:f6:68:
8f:69:7e:5b:22:67:22:60:9c:92:b6:91:78:1f:70:
a8:64:fe:6b:08:02:8c:7b:d7:68:2d:e1:87:ea:ec:
06:8e:9a:f4:52:96:86:26:98:a3:c5:ed:05:8b:c9:
09:cd:cc:3d:c5:bc:32:c2:cc:2f:b7:16:94:2e:b5:
e0:16:cb:a2:21:8a:da:49:f0:9a:c2:65:f0:f3:7e:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:FC:9A:A2:DC:38:9B:4D:C3:50:CC:9D:43:0B:77:17:18:4C:C3
X509v3 Authority Key Identifier:
keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.139.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:57:cd:f4:51:33:82:60:8f:41:13:77:25:41:38:a0:93:15:
65:16:b7:44:f7:24:66:a8:fc:af:e8:25:31:26:c4:97:13:0b:
85:b2:72:65:9e:aa:e4:ea:d1:6d:fe:77:ab:db:e2:c4:66:ce:
f2:ab:e7:c8:35:6e:84:4a:52:60:7a:bd:f8:6d:38:24:df:55:
1a:3f:d9:67:a5:e0:03:a4:e9:d5:79:6c:9a:46:4b:fc:03:bd:
91:d4:5b:40:ce:dd:83:56:1a:b1:b3:3e:31:09:d9:70:2d:3f:
8f:d1:3b:aa:4e:f4:b2:fa:40:c9:f6:05:08:df:90:41:51:2c:
bd:cd:b4:05:dc:ad:6b:71:4b:be:34:e5:0e:89:9a:76:0d:4f:
13:ee:7f:be:6f:c0:4c:94:6f:ee:45:ed:07:00:4a:a5:2d:78:
0e:40:e2:ef:62:df:1a:a2:f3:fc:be:92:0d:2b:80:54:8b:4b:
a0:67:91:27:4b:a1:c4:4b:ac:cf:ef:d3:c8:21:28:bd:de:37:
e6:71:a6:5b:f5:42:bf:45:d4:8a:b9:fd:c4:4e:ee:13:df:eb:
74:cd:04:6e:36:cc:dc:dc:35:e0:e6:a6:4b:8f:fa:47:e0:aa:
e3:ae:1c:81:73:af:41:cd:41:6b:a3:2f:84:65:e6:40:0b:b5:
45:a5:86:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:34:04 2025 by rpki-client