Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/A0ZnyaErCSObI2wFcEmuzowCc0g.roa
File: A0ZnyaErCSObI2wFcEmuzowCc0g.roa (raw, json)
Hash identifier: /xGbDIybw6sEbsmlT4wXgHUVbnJovTDW5TynhP13S4s=
Subject key identifier: 03:46:67:C9:A1:2B:09:23:9B:23:6C:05:70:49:AE:CE:8C:02:73:48
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824FAEE01DB5101E663A3A6939191BA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/A0ZnyaErCSObI2wFcEmuzowCc0g.roa
Signing time: Thu 02 Jan 2025 17:51:39 +0000
ROA not before: Thu 02 Jan 2025 17:51:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
195.58.39.0/24 maxlen: 24
195.133.64.0/24 maxlen: 24
195.133.65.0/24 maxlen: 24
212.193.4.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:fa:ee:01:db:51:01:e6:63:a3:a6:93:91:91:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=034667c9a12b09239b236c057049aece8c027348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:9b:07:ec:20:d0:bd:41:98:7d:98:4e:1e:
b6:65:f1:c2:8a:87:d6:4c:7d:85:1c:9c:0c:15:ed:
5b:cb:7e:8a:f0:8d:2b:ee:1c:ec:ef:1d:2d:3c:4c:
97:08:55:d6:29:c0:cd:f3:3d:c5:54:f7:6e:44:44:
32:47:6f:bb:28:ff:e2:c4:5b:d6:68:45:ac:67:1e:
6b:0f:ad:6f:19:77:88:0d:d2:83:4e:52:14:07:b0:
13:c4:b1:2a:a1:2e:5e:b0:09:ee:87:d8:8b:e1:25:
29:df:2d:6d:81:b0:89:b6:c0:8b:e8:de:8c:8c:49:
e4:2c:bf:eb:2d:bc:0e:3d:de:a0:3d:e6:8e:33:e9:
fd:e8:fe:98:85:03:fa:78:c4:d3:07:2a:d5:56:30:
33:28:ca:46:54:34:ca:4f:b1:70:34:a9:d7:c1:b5:
e9:00:ea:dc:bb:79:80:80:34:b0:55:c3:46:b7:bf:
60:4d:d4:6b:61:fb:19:3d:59:c1:42:38:0b:f2:3d:
b7:c9:e0:e5:c5:9d:29:6b:3e:ad:a1:65:82:55:8a:
af:48:3a:c8:61:4b:f0:53:f3:88:46:c3:15:52:86:
d5:fd:e1:74:ca:66:69:9b:90:5d:bc:7a:97:ae:c8:
c2:67:d8:d5:63:8f:28:4f:43:17:28:d2:76:0f:72:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:46:67:C9:A1:2B:09:23:9B:23:6C:05:70:49:AE:CE:8C:02:73:48
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/A0ZnyaErCSObI2wFcEmuzowCc0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.54.0/23
194.87.199.0/24
195.58.38.0/23
195.133.64.0/23
212.193.4.0/23
Signature Algorithm: sha256WithRSAEncryption
41:ac:e7:ed:78:2c:14:7e:d9:49:7b:92:53:a7:34:68:3b:b7:
2b:eb:a2:1a:f2:e0:60:69:e2:ad:e9:90:a7:85:d2:52:d3:28:
9c:fe:f2:dd:a9:52:ff:21:b1:9f:d9:11:ec:88:a0:59:68:28:
1c:69:5b:84:e2:fd:01:e7:6c:87:9d:a3:7f:f8:3e:f8:56:ac:
10:2a:bc:99:2e:db:0f:8e:dc:dd:19:c1:f6:d5:68:e8:e9:31:
b0:1a:df:11:73:a6:49:10:a9:f7:6c:f9:88:1e:30:4c:de:4a:
5a:6c:4f:e0:3f:76:45:11:4e:8c:32:22:8f:ec:3a:33:ee:f9:
37:89:13:28:65:86:d2:a3:61:37:e5:26:89:55:de:bd:d7:e8:
e9:84:99:1b:5f:9f:75:59:f9:1a:d5:b3:61:83:38:a6:0c:91:
a5:75:e4:db:af:e9:59:d6:d0:b2:04:06:e7:83:00:e2:08:c3:
ba:df:8e:b8:cb:64:13:58:bc:0f:e3:ce:e4:c7:ea:55:56:76:
51:01:86:12:cd:a4:40:6f:a1:03:3f:55:d4:88:46:c0:d5:f7:
ad:fb:05:49:58:5b:47:30:ad:d8:51:ef:23:1e:b0:c2:88:af:
96:8d:13:f0:9d:16:0c:4f:33:ee:c4:21:5e:a7:d1:01:cb:da:
bd:1f:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:34 2025 by rpki-client