Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/zqpTJzjkMeBAU436_oQUMkoSagY.roa
File: zqpTJzjkMeBAU436_oQUMkoSagY.roa (raw, json)
Hash identifier: 6dneQ6CCdJzghud6hAgFytvHFfB6EXsArz41JD08zQY=
Subject key identifier: CE:AA:53:27:38:E4:31:E0:40:53:8D:FA:FE:84:14:32:4A:12:6A:06
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B906413021AA3471E1D67CCF2D1FB
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/zqpTJzjkMeBAU436_oQUMkoSagY.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213714
IP address blocks: 193.160.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:90:64:13:02:1a:a3:47:1e:1d:67:cc:f2:d1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceaa532738e431e040538dfafe8414324a126a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:6d:83:81:3d:b4:b4:2e:77:1a:2e:7c:fb:
35:92:92:8a:3a:c2:ba:37:3a:96:42:3f:43:01:37:
11:09:84:56:43:bf:79:54:92:58:b2:6f:b9:82:ee:
51:5e:d2:fa:b4:b2:38:94:96:52:4b:87:3d:1f:50:
05:64:6e:47:33:e9:d5:b1:a9:22:97:a5:5e:56:47:
b0:30:f8:8f:42:9f:17:59:53:22:52:38:d6:ea:56:
40:ea:68:1b:df:31:14:28:87:e7:ff:90:6f:1f:e7:
44:fa:4d:81:54:05:e5:f4:25:0c:d7:63:16:e6:c5:
fb:50:32:65:71:78:a3:3c:ba:f4:4a:e8:0f:24:37:
a7:ca:7a:3b:80:a8:ff:f8:c6:cf:7e:17:87:41:72:
53:75:fe:ee:55:b5:da:cd:5d:55:aa:6d:52:a2:94:
00:a5:43:a2:4f:54:82:7e:0f:70:91:ac:be:b1:b2:
e2:3b:86:83:2e:b8:28:33:3f:aa:1a:19:ec:cc:82:
94:b5:e9:70:77:af:37:20:6c:0e:8b:bf:e0:d8:96:
b1:86:d6:08:7c:67:00:08:a0:4c:11:c3:4d:d7:c2:
b4:74:95:66:43:b2:88:18:d3:49:da:c0:95:e4:f3:
c0:9a:a2:04:b4:76:8b:72:0f:9d:9b:76:7e:d8:6d:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:53:27:38:E4:31:E0:40:53:8D:FA:FE:84:14:32:4A:12:6A:06
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/zqpTJzjkMeBAU436_oQUMkoSagY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.21.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7f:9f:71:d3:53:57:ad:cc:dc:70:06:f9:3a:b3:d7:27:38:
04:74:64:56:e1:7e:5d:fe:20:47:ac:d5:f6:16:5f:f8:08:bd:
af:12:06:70:a8:ee:d4:01:8f:3c:a6:1e:97:c4:3f:68:2d:e8:
45:e6:a9:50:c2:d2:f8:f7:de:c3:1a:18:71:d0:61:81:6f:8a:
12:f0:bf:72:44:59:06:30:80:7e:92:eb:3b:30:60:75:6e:46:
5d:e6:6a:f0:84:80:72:ef:e2:fe:9b:60:31:ef:25:5e:aa:4a:
6d:8d:78:f4:30:2b:c8:80:00:14:4d:af:9d:f4:66:d0:61:ef:
02:9f:39:7a:ee:a6:bb:9e:06:db:2e:31:a4:4b:0c:fa:4e:f0:
60:03:46:09:1c:a7:b1:d3:37:72:c1:6c:fd:1c:47:04:7f:b6:
b2:78:ed:e7:56:b6:2a:1e:b7:5e:4d:9a:4e:86:c7:7e:a8:ee:
6a:35:77:e3:84:80:1a:93:a5:91:c6:ab:a7:f1:f9:40:c6:52:
38:7a:3a:a2:60:eb:9a:74:0c:19:86:98:32:83:17:53:37:bc:
96:f3:ff:6b:94:ed:ae:97:62:a0:3b:be:02:1c:bb:e4:0b:57:
0e:db:56:de:a4:d2:af:8d:23:f6:1c:c7:42:10:76:43:1f:b3:
05:70:39:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:30:26 2025 by rpki-client