Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/rzZcp9qdI5EhU7eDE4dVuBocUgY.roa
File: rzZcp9qdI5EhU7eDE4dVuBocUgY.roa (raw, json)
Hash identifier: ibtJqQia3Qq8bPF6g4DZuOmDcPECArOLyEWvGQhia5E=
Subject key identifier: AF:36:5C:A7:DA:9D:23:91:21:53:B7:83:13:87:55:B8:1A:1C:52:06
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0192545F101A139867041BD3645A7B11557B
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/rzZcp9qdI5EhU7eDE4dVuBocUgY.roa
Signing time: Thu 03 Oct 2024 21:52:48 +0000
ROA not before: Thu 03 Oct 2024 21:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 194.179.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:5f:10:1a:13:98:67:04:1b:d3:64:5a:7b:11:55:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Oct 3 21:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af365ca7da9d23912153b783138755b81a1c5206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:ba:0f:f3:11:ba:40:66:be:36:ff:9f:51:
84:7d:d8:c6:06:a2:73:14:3a:d2:2c:a5:21:77:ec:
12:19:05:90:35:52:59:ba:3a:7e:8f:5b:eb:4e:ac:
f4:14:6d:ee:f4:88:01:fb:2a:a3:77:7b:06:06:af:
67:d1:f2:65:0a:b8:05:ca:7e:3c:60:21:5e:5f:1c:
d0:bf:0f:5d:bc:bf:f0:ec:39:bc:2a:69:60:58:77:
33:0c:b5:cf:99:c7:cf:4a:8d:75:af:54:28:b7:e0:
de:e0:81:e3:2b:51:19:d6:27:13:dd:62:14:48:e9:
47:56:86:4c:08:e4:20:10:56:0f:96:4c:7a:e2:97:
c1:18:b7:4e:f1:3b:0e:ed:78:31:b7:73:21:83:d5:
88:50:99:d3:eb:95:e0:16:d3:d2:eb:ca:93:b8:f5:
d4:b9:01:20:f5:25:57:5a:4e:2d:c3:1d:5c:45:98:
8a:7a:2c:ab:c3:cf:e2:a1:24:d4:1e:bc:c1:5e:60:
2c:11:87:d3:9d:a5:de:fa:54:69:e4:1c:2e:7d:e4:
fe:eb:22:ed:57:66:7a:77:be:bd:5b:53:88:56:af:
44:4d:dc:be:81:6b:43:c4:6e:c8:fd:d4:a5:51:31:
8e:15:ba:67:e1:15:36:c8:db:25:24:90:2f:1e:a0:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:36:5C:A7:DA:9D:23:91:21:53:B7:83:13:87:55:B8:1A:1C:52:06
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/rzZcp9qdI5EhU7eDE4dVuBocUgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.152.0/24
Signature Algorithm: sha256WithRSAEncryption
60:7b:ba:f1:74:9f:a2:d4:55:6e:a8:1c:43:a3:b2:88:45:75:
a6:fc:e7:af:84:f8:6a:ee:23:c6:8a:af:d9:ef:a6:e5:01:7b:
2e:22:0c:89:0b:6f:48:81:8f:10:fe:60:8f:fd:77:0c:5f:e6:
82:2b:74:61:26:8f:64:30:e0:20:60:c9:93:07:12:70:15:9f:
80:24:57:e4:29:93:04:53:ec:2d:c9:8e:7d:b0:86:3b:fc:5f:
66:36:f0:93:2e:10:c6:05:1b:4b:d0:e4:e6:89:86:aa:81:e6:
a7:56:7b:a1:ed:80:24:97:65:36:66:c6:f6:15:21:86:cb:5b:
66:7a:1c:c8:df:fa:d9:45:25:47:f4:b5:ba:70:b1:e3:7a:14:
9b:75:e3:fa:bd:ac:5d:6f:a1:2e:9a:5d:28:91:6f:7d:b1:fb:
e2:ce:da:1f:fe:81:68:48:ba:a4:e5:38:e0:41:bf:09:ef:5a:
1b:ca:89:59:8a:b0:8f:c8:1b:e3:0f:0a:c1:59:f2:7d:db:db:
25:57:1d:62:a1:23:96:3f:90:98:2f:08:9c:1d:16:85:7b:80:
95:b2:70:87:ad:3d:cf:61:de:5a:99:f0:72:05:5f:86:da:87:
8c:b6:fb:aa:2e:e4:3e:27:1c:8d:c3:4e:71:3c:39:e9:cf:a1:
97:08:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:41 2025 by rpki-client