Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/K7WRjV9MYHng8NfZhIiH2_A3Swg.roa
File: K7WRjV9MYHng8NfZhIiH2_A3Swg.roa (raw, json)
Hash identifier: 7+t8vrSKIkcQUgESVH88zqe5BbNV7ixlCqPd3RDBnyQ=
Subject key identifier: 2B:B5:91:8D:5F:4C:60:79:E0:F0:D7:D9:84:88:87:DB:F0:37:4B:08
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 01942521F3E61B140DACF1623E854AFF269F
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/K7WRjV9MYHng8NfZhIiH2_A3Swg.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 193.22.1.0/24 maxlen: 24
193.22.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f3:e6:1b:14:0d:ac:f1:62:3e:85:4a:ff:26:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bb5918d5f4c6079e0f0d7d9848887dbf0374b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:e1:3c:8d:a5:c9:c8:ad:1f:ec:8f:aa:db:
ef:79:4b:4a:7c:57:1c:0b:12:88:fb:49:e7:23:b0:
7c:1a:64:df:cd:c1:ba:54:ab:54:a6:2d:65:49:16:
00:6e:d8:73:fc:61:ae:c7:4a:3e:0a:2d:5d:dd:df:
9f:5d:2d:f1:48:20:63:03:06:3a:47:d1:67:3f:2e:
ee:42:6d:1f:d1:cb:c6:27:46:34:43:d5:fd:49:5a:
9e:4f:9e:9a:c0:36:29:52:30:f6:d8:8e:24:66:3f:
2d:75:7f:3a:53:7b:21:43:43:3e:c7:10:e6:1f:36:
c8:fb:7b:73:e9:13:27:76:26:45:e4:93:a7:fa:67:
cd:99:a2:ad:38:b6:eb:eb:50:8e:c2:d3:59:00:57:
3a:f8:ee:fa:c8:13:12:78:65:7d:e7:61:d6:68:b9:
21:af:d1:ac:e0:67:05:86:a1:43:43:d6:81:49:87:
da:8d:74:8b:87:4c:66:0a:90:6c:75:07:76:35:a8:
16:d9:b0:96:e0:c3:87:1d:b7:b6:97:d8:4c:73:21:
3e:d9:c4:28:91:75:0f:51:3c:d2:4c:c6:8c:b6:58:
8e:7c:6d:78:45:28:69:dd:74:ff:a4:d4:ca:7f:83:
d2:c1:bf:c0:a0:74:83:27:e5:de:a7:20:4e:70:e5:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B5:91:8D:5F:4C:60:79:E0:F0:D7:D9:84:88:87:DB:F0:37:4B:08
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/K7WRjV9MYHng8NfZhIiH2_A3Swg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.1.0/24
193.22.106.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:12:af:77:67:4c:33:2a:2d:ef:5d:41:30:2d:c9:67:7e:3b:
ef:10:c6:31:c9:78:f4:d4:66:24:e7:50:4a:23:5a:d2:75:a2:
6b:e8:85:f9:6f:c9:6e:56:d3:90:36:e0:6d:89:e0:c3:fc:cd:
cc:bd:40:0d:7b:0b:5a:3b:48:60:d3:07:86:18:aa:a6:48:3c:
d7:78:96:8a:13:c5:a3:d8:1a:d1:2d:5a:6b:67:ab:8d:7a:2f:
48:2f:6b:35:1b:b6:8a:02:39:7e:cc:58:b5:4f:c3:a6:41:00:
d6:37:28:0e:32:02:82:65:b7:19:26:33:be:e2:cd:bc:fd:ba:
7e:fc:ed:ea:20:8f:76:29:74:7e:a4:ca:b0:6b:6f:8a:f1:8c:
b8:6b:6f:50:b0:2f:d7:7a:01:72:34:89:47:e3:3c:97:3a:fa:
c8:42:64:95:c8:0f:8e:e5:b3:f8:8c:6a:1f:2a:4a:7c:f6:a9:
26:75:42:11:a7:a9:03:6f:77:a9:f0:d3:68:eb:43:6e:0a:a1:
de:54:0a:c8:7e:da:c9:e4:ca:0c:0c:9a:7c:ea:4f:85:86:19:
dc:ea:25:43:7d:f2:83:10:e9:4e:5f:60:57:1f:74:14:46:24:
b5:b4:fe:28:2f:8f:31:ff:c6:3b:c6:b3:98:fc:c7:0f:3e:f3:
a8:8a:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:17 2025 by rpki-client