Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/4-SKabrWOl-7KlndWPRuCU9aEhs.roa
File: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (raw, json)
Hash identifier: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=
Subject key identifier: E3:E4:8A:69:BA:D6:3A:5F:BB:2A:59:DD:58:F4:6E:09:4F:5A:12:1B
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 01942521F35518225F55E3D15DF0BA8B7D70
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/4-SKabrWOl-7KlndWPRuCU9aEhs.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202797
IP address blocks: 193.22.1.0/24 maxlen: 24
193.22.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f3:55:18:22:5f:55:e3:d1:5d:f0:ba:8b:7d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3e48a69bad63a5fbb2a59dd58f46e094f5a121b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:d9:47:a8:9b:fa:48:b7:f2:0d:f9:bd:30:
38:3a:b6:e2:f8:7e:82:bc:ce:06:c7:56:3d:a3:e1:
5a:ab:82:9d:08:00:76:0e:e4:7b:1e:45:e7:d5:2e:
9d:3a:64:b8:6e:c0:a2:ca:d2:db:c0:24:02:2e:0c:
6c:34:d1:a2:94:fe:4c:9f:12:57:14:66:60:d4:b2:
2a:ad:4b:fd:1f:f1:f7:9c:d5:f9:9a:d9:98:12:84:
9d:43:d7:65:89:c0:8f:39:ef:31:ed:63:60:66:03:
c2:4c:8e:cc:d3:ac:83:6b:37:81:82:1b:1e:e0:f2:
57:62:12:82:4b:59:98:22:00:8e:3a:32:4b:d2:47:
5d:7e:7c:c8:e8:13:e6:cb:95:75:1d:db:df:f7:eb:
eb:1d:a6:48:5b:90:2e:72:0f:f9:f0:f0:69:a5:80:
3f:d1:d3:6e:27:38:89:ca:8a:b1:60:0c:b4:45:d7:
9c:5e:05:8e:41:4e:3a:06:28:ef:f1:70:4a:fa:fa:
f9:20:c7:59:52:ff:ab:01:b9:dc:8a:ec:10:df:e2:
7f:89:3f:9d:e3:bd:3d:d6:73:94:d2:bf:1f:66:17:
09:5e:a2:44:58:92:18:b5:11:8c:a5:9d:cf:f5:c4:
3d:c6:ee:bc:14:bb:a4:66:32:bb:b9:85:3c:cb:07:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:8A:69:BA:D6:3A:5F:BB:2A:59:DD:58:F4:6E:09:4F:5A:12:1B
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/4-SKabrWOl-7KlndWPRuCU9aEhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.1.0/24
193.22.106.0/24
Signature Algorithm: sha256WithRSAEncryption
98:57:bf:c0:3d:30:07:e6:c0:a5:d7:d7:51:2a:a9:b7:90:bf:
72:47:e3:6d:4f:15:0c:8c:8b:52:f3:8a:23:f9:20:ef:a9:65:
42:7c:64:6b:d2:fa:57:9f:17:db:4a:08:5b:e4:57:c3:89:30:
9c:a3:a1:19:2d:63:b9:31:28:38:bc:8d:7e:b3:64:f2:17:5b:
43:3b:2d:65:ca:ca:5e:53:2c:1d:8b:7a:bd:ee:d4:97:62:5c:
d0:61:41:36:c5:b1:17:87:17:77:87:54:48:71:47:15:3f:fe:
28:9b:46:56:23:bc:dc:0b:e0:a3:1b:51:c4:86:3b:f0:42:dc:
51:8a:74:fa:c0:77:4f:8c:08:e6:f9:81:eb:3e:f7:24:e5:02:
51:5b:2c:15:97:f4:5f:45:f4:f6:34:de:ae:c1:ab:72:74:4b:
9f:29:ea:20:d6:2d:8a:a6:6f:43:f5:9d:d1:ba:e2:08:f2:39:
ca:79:88:b5:2d:f6:b5:56:58:82:76:28:40:e1:b8:63:6f:66:
30:56:10:1a:a5:9e:a7:84:1e:e1:59:46:97:9f:6e:5d:4e:c3:
07:56:e1:14:cb:19:89:34:9c:5b:65:9e:83:d5:df:ae:d8:b1:
7a:35:d6:e3:89:d9:e5:8d:30:1a:fa:4e:7f:01:92:29:81:30:
99:fe:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:19 2025 by rpki-client