Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/zHeChR_zDUQLX6wdTeIO4qcMyXc.roa
File: zHeChR_zDUQLX6wdTeIO4qcMyXc.roa (raw, json)
Hash identifier: n9bsDs10GaMewJLg2f540P33dEXZWYodMB2o7WInG7c=
Subject key identifier: CC:77:82:85:1F:F3:0D:44:0B:5F:AC:1D:4D:E2:0E:E2:A7:0C:C9:77
Certificate issuer: /CN=79226d806aac82979bf4ac1c78213563f8055efe
Certificate serial: 021896FF
Authority key identifier: 79:22:6D:80:6A:AC:82:97:9B:F4:AC:1C:78:21:35:63:F8:05:5E:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSJtgGqsgpeb9KwceCE1Y_gFXv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/zHeChR_zDUQLX6wdTeIO4qcMyXc.roa
Signing time: Sat 01 Jan 2022 05:02:02 +0000
ROA not before: Sat 01 Jan 2022 05:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60682
IP address blocks: 193.247.214.0/23 maxlen: 23
193.247.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35165951 (0x21896ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79226d806aac82979bf4ac1c78213563f8055efe
Validity
Not Before: Jan 1 05:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc7782851ff30d440b5fac1d4de20ee2a70cc977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:68:9b:ae:ce:2c:96:a0:3a:70:e7:c0:be:
e5:90:3b:b8:7b:05:54:f5:b1:89:cf:85:cb:d6:ff:
42:90:05:3b:00:f3:26:d0:26:6d:eb:0a:12:c9:e9:
94:18:d2:03:c8:6a:27:19:ba:e1:af:df:cc:5f:46:
8c:bb:14:f4:54:a4:5e:22:4f:9c:d4:92:33:b6:a8:
69:fe:af:f4:e8:d4:9f:d4:4b:e6:2d:d5:26:42:9b:
a4:2f:5c:d1:2c:4b:c6:90:57:c3:c2:56:91:c5:1f:
c2:e4:a3:58:b2:57:5b:5f:f3:48:b0:26:54:54:10:
90:ea:5e:40:ed:c1:62:ee:0b:b0:2c:9d:89:e5:53:
e0:7a:cd:1c:45:ba:1b:76:44:43:d1:55:f8:02:3f:
0e:6f:05:cc:1a:5f:4c:c3:f7:1d:65:94:91:ae:2b:
11:25:18:aa:ed:84:2f:7a:d9:6c:e2:88:c7:b9:05:
3d:38:b0:68:56:05:81:0a:d1:0d:3f:72:e8:10:d8:
80:67:0a:5b:35:d1:dc:84:ed:88:05:9f:31:ca:cb:
08:ec:0f:66:bb:18:0a:1b:a2:a3:a9:32:12:02:35:
74:0c:89:53:27:5a:04:48:d0:b0:27:b1:84:39:52:
c3:fe:e9:13:f1:db:75:9d:5a:33:d4:dd:12:b3:c6:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:77:82:85:1F:F3:0D:44:0B:5F:AC:1D:4D:E2:0E:E2:A7:0C:C9:77
X509v3 Authority Key Identifier:
keyid:79:22:6D:80:6A:AC:82:97:9B:F4:AC:1C:78:21:35:63:F8:05:5E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSJtgGqsgpeb9KwceCE1Y_gFXv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/zHeChR_zDUQLX6wdTeIO4qcMyXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/eSJtgGqsgpeb9KwceCE1Y_gFXv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.194.0/23
193.247.214.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:3a:ab:c1:ed:ef:ca:47:94:ab:4d:57:fa:b6:7b:42:b8:85:
8d:ad:4a:46:75:80:27:d8:46:66:62:ac:aa:8b:84:90:21:c9:
78:26:16:23:f8:e3:79:8e:90:6e:ea:91:76:29:7f:6a:aa:38:
0a:72:5b:e0:c5:22:93:74:03:c1:a0:71:3a:db:a3:f2:5d:97:
5b:06:c7:30:36:23:36:06:1c:54:ed:22:36:fd:d5:ab:f2:f4:
09:c3:6c:99:5c:95:e9:c5:7b:44:d7:8a:46:85:33:be:a7:0f:
8f:09:d8:21:e7:b2:76:ff:cb:98:c4:45:df:03:01:f8:07:4b:
3d:22:04:66:3e:cf:75:86:a1:e0:05:0b:47:ed:e4:4f:dc:d3:
c6:3a:42:b6:8e:c5:ae:7e:68:b1:30:99:e5:8a:fe:5c:35:4b:
d4:f1:eb:af:55:e5:b2:e5:25:cf:e3:31:59:79:1d:f6:6b:fb:
ba:51:1f:de:f9:08:8f:ec:0d:d8:a6:ff:b2:57:ff:08:81:62:
55:83:f3:2f:f5:fd:59:1c:9f:b4:ae:ee:47:bf:b0:df:b7:f4:
01:f2:de:1d:52:d5:49:7c:7a:d7:82:84:ad:fa:5a:eb:b0:86:
12:56:63:47:db:bd:fd:be:ec:97:11:f6:23:75:94:4c:e4:98:
b0:f2:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:12 2025 by rpki-client