Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/nZjfTCTvF6ZzOZPqdosjsI68Eo4.roa
File: nZjfTCTvF6ZzOZPqdosjsI68Eo4.roa (raw, json)
Hash identifier: 4zJpftAEeCYQ9qUpUg36RhiMmWnR+7s2JEDCJDs7XkI=
Subject key identifier: 9D:98:DF:4C:24:EF:17:A6:73:39:93:EA:76:8B:23:B0:8E:BC:12:8E
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206846CF3BDDD7ED9D1B056BB44A778A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/nZjfTCTvF6ZzOZPqdosjsI68Eo4.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56340
IP address blocks: 193.233.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:46:cf:3b:dd:d7:ed:9d:1b:05:6b:b4:4a:77:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d98df4c24ef17a6733993ea768b23b08ebc128e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:a0:ca:7c:15:85:14:02:b5:66:87:3d:f3:
40:cb:93:c7:89:69:a4:73:c9:6f:bd:bf:ec:56:b7:
92:82:2a:a5:dc:28:e6:9c:ad:ff:14:18:40:93:24:
5b:4d:82:36:4e:21:b0:74:86:6b:10:33:f6:0e:43:
62:ec:c1:83:12:ab:6f:90:0a:3e:76:ac:8b:72:f4:
cb:b8:76:eb:55:aa:3f:54:6b:a7:e0:29:bd:ed:4e:
9e:4d:47:66:7c:e0:51:2c:21:31:08:03:ad:a8:0b:
4f:2a:8e:4a:36:b1:ab:39:9d:97:52:1b:0c:4d:cf:
9e:99:1c:ca:25:93:22:11:7d:31:ed:47:7a:df:b8:
f4:f4:82:93:10:94:e4:3b:2d:38:19:6b:08:df:75:
22:58:77:2a:fa:8d:67:43:1a:c4:36:ae:e1:bf:50:
d5:4e:7b:04:65:10:20:7f:89:1b:be:04:37:ea:4e:
9e:47:59:3f:c4:d8:a3:9a:ee:85:ef:c3:71:2d:be:
63:96:3d:27:59:c0:39:ac:77:75:d7:bd:13:27:39:
1f:e1:6f:4b:44:06:2d:ae:37:3b:98:86:99:05:80:
40:3a:f1:a0:ae:59:6a:0f:1d:c1:c7:fc:a4:64:2c:
1c:d5:74:84:d6:50:64:8d:ed:b7:ee:da:03:54:d2:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:98:DF:4C:24:EF:17:A6:73:39:93:EA:76:8B:23:B0:8E:BC:12:8E
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/nZjfTCTvF6ZzOZPqdosjsI68Eo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.96.0/22
Signature Algorithm: sha256WithRSAEncryption
05:49:dd:12:c7:12:ef:fe:b7:08:53:95:2b:03:a3:b6:43:3e:
7a:d2:8e:97:b6:6a:55:6d:4c:29:17:ae:74:3d:bf:b9:c2:22:
6f:12:29:21:99:11:f3:ea:01:f3:08:4c:0d:78:ed:9b:37:cc:
70:2e:90:b8:9f:90:3a:48:e6:95:f3:21:f4:3c:2a:57:1f:db:
1b:d1:c6:be:f7:80:8a:e2:70:c8:1d:a4:67:75:a9:bb:38:a8:
7f:e7:05:e4:68:83:01:dd:54:8b:c2:df:70:f7:b1:61:46:25:
1c:a6:8d:c4:0c:d4:0e:35:af:2e:5a:5a:df:fe:ae:a0:6e:98:
32:ad:02:52:f4:ff:70:e5:5a:b4:73:71:72:50:64:27:8f:26:
28:d6:b1:65:62:65:ff:e3:16:e1:f4:9d:dc:d8:57:0a:9c:85:
67:57:ee:6d:bf:5a:d1:83:37:f6:19:14:a6:2e:0c:7e:80:0f:
8e:53:0d:46:58:c6:02:42:9e:83:e1:5e:4b:0b:fa:1d:7d:5a:
3b:1a:5d:c6:eb:7f:bd:98:0f:9b:0b:61:cf:05:da:a6:c1:52:
e3:2b:da:26:d5:e1:48:c1:74:c2:74:fa:8d:b6:b4:37:b3:62:
ae:7d:cb:bc:30:f8:41:15:d9:50:56:44:0f:60:8e:ad:41:b9:
d9:b7:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:14:06 2025 by rpki-client