Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/jz7r0U5OaA8Q59L6HsVMDy2LM6I.roa
File: jz7r0U5OaA8Q59L6HsVMDy2LM6I.roa (raw, json)
Hash identifier: /rl8PmJ+zraPwkfaCv5VsqQ2CSC3ynTwyG8Gqt6YLTA=
Subject key identifier: 8F:3E:EB:D1:4E:4E:68:0F:10:E7:D2:FA:1E:C5:4C:0F:2D:8B:33:A2
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 019421444A77CC55A23353DB851CB945A30C
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/jz7r0U5OaA8Q59L6HsVMDy2LM6I.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 193.47.99.0/24 maxlen: 24
2001:67c:192c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4a:77:cc:55:a2:33:53:db:85:1c:b9:45:a3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f3eebd14e4e680f10e7d2fa1ec54c0f2d8b33a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:f4:ef:ee:0d:37:d2:ff:22:3a:4a:bf:d2:
c8:39:e1:a2:3b:44:3d:99:74:81:1e:50:65:a1:cd:
70:0c:ba:e6:db:19:58:39:35:51:1b:16:63:8c:3a:
68:43:fc:d0:dd:a9:a8:92:fe:1a:55:8e:66:3b:23:
a8:ff:19:aa:86:1f:11:40:3b:0e:46:9c:b1:90:1a:
5d:0a:a5:c6:08:3a:af:45:fe:c0:83:7e:28:0d:a9:
b0:f7:3f:2d:57:f6:f7:35:c0:53:37:61:96:de:72:
96:1b:37:e1:f9:3d:7f:ef:e0:2c:58:ed:c9:32:e4:
6e:26:8f:7e:5d:69:bf:0e:86:6d:87:5d:81:da:f6:
76:95:af:0a:77:8e:1d:9f:aa:d3:3a:df:c6:d8:2d:
c7:fd:2b:8d:a8:2b:0c:69:25:d2:74:58:c1:95:4a:
72:13:61:51:b6:1f:36:de:bd:8a:d3:75:34:17:9e:
ee:be:96:d1:8a:e2:b7:ce:66:f9:4a:f2:82:f9:a8:
a8:6f:63:56:ea:f5:f9:27:e8:39:14:d2:c7:33:f4:
f2:e3:60:33:13:b1:69:9b:28:66:3f:a0:3e:6c:5d:
53:53:ab:f8:5e:17:90:72:be:08:5c:a6:fe:be:17:
d8:00:90:16:2a:5a:99:93:b1:99:9e:5d:00:b7:19:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3E:EB:D1:4E:4E:68:0F:10:E7:D2:FA:1E:C5:4C:0F:2D:8B:33:A2
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/jz7r0U5OaA8Q59L6HsVMDy2LM6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.99.0/24
IPv6:
2001:67c:192c::/48
Signature Algorithm: sha256WithRSAEncryption
30:83:cc:13:5f:1b:9e:66:32:44:e0:91:ea:79:20:b6:ba:d7:
31:1a:18:10:23:92:9b:91:03:a7:3e:d2:46:fa:22:aa:31:49:
21:7e:3a:d7:df:80:d6:c5:7f:87:6a:e1:ce:b9:a7:9c:9d:a3:
cb:3d:cc:66:b2:42:66:d3:28:e4:ba:be:8d:31:83:76:f6:68:
ec:a5:bb:eb:39:e4:08:a0:e6:bf:4b:e7:f0:0a:56:c3:82:e1:
25:60:90:5b:04:14:d1:30:e9:f6:0c:91:7c:8a:9a:8c:f9:51:
60:bc:e1:3f:8d:4b:67:24:a5:9f:9f:e5:58:19:d7:b6:3b:c9:
38:f3:67:e8:96:15:af:de:da:d5:f0:ff:1d:e1:f8:86:0c:d3:
a9:8b:6b:f0:6b:e2:6c:fd:a0:66:08:8e:7d:ee:ad:ae:43:5d:
87:c8:71:5f:54:33:77:56:92:00:55:17:4a:f8:5f:7c:87:ff:
3b:2b:c3:2c:45:c1:52:09:5e:e0:bf:e9:86:8a:ca:78:7e:35:
1f:2a:17:95:83:56:c9:68:11:85:a1:b8:b4:36:82:42:e9:a8:
23:38:16:af:28:0e:ba:68:4d:60:67:b4:ad:13:51:ba:40:0b:
d9:c5:15:2b:af:f4:c9:01:60:0f:e2:38:7c:ee:38:cf:5a:01:
e1:c5:39:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:00:29 2025 by rpki-client