Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa
File: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (raw, json)
Hash identifier: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=
Subject key identifier: F5:9B:94:2D:1F:9C:F6:BB:CD:E1:4F:D0:7B:3B:74:72:4E:2D:CF:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 019421B1BFE3C8E0270491B9A6CF6C471C49
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa
Signing time: Wed 01 Jan 2025 11:48:04 +0000
ROA not before: Wed 01 Jan 2025 11:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 194.113.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bf:e3:c8:e0:27:04:91:b9:a6:cf:6c:47:1c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f59b942d1f9cf6bbcde14fd07b3b74724e2dcffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:ef:44:75:42:1f:ca:1d:4f:7f:3a:30:65:
4a:05:57:72:9a:90:53:dd:09:13:15:f7:8d:1f:cb:
f8:ed:be:6d:49:a7:fa:fd:f7:ff:1e:97:86:56:31:
23:44:12:16:96:8a:4e:44:c6:7f:e0:52:bd:8d:51:
eb:02:a2:9a:98:e9:9b:65:cb:96:5b:ed:c2:0b:8d:
8f:2e:f5:48:73:ea:ca:e4:c6:5a:4b:e9:05:31:42:
73:1a:75:84:84:23:44:a0:d8:a3:1b:6e:8a:11:cb:
fa:c8:54:e4:fd:36:ae:b1:56:02:73:d2:85:f7:86:
0f:05:f6:51:6a:fe:82:90:d6:d4:67:a6:72:59:d1:
a0:f1:f8:ed:5d:aa:a8:91:78:6e:b1:eb:6f:1c:94:
60:94:5f:a9:93:a8:fb:9f:25:f8:d3:9f:d9:30:0d:
85:c2:ba:2e:cd:b6:a1:77:e8:a6:47:e3:b9:96:0e:
87:ff:75:23:f6:bf:f9:d7:82:69:d6:6a:4e:c7:33:
e2:a0:2f:a6:61:0c:15:b1:76:9c:99:52:fd:d9:61:
57:8f:04:4c:7a:80:f6:7d:3a:47:70:d3:74:6d:c0:
7d:e7:5b:b3:f8:da:e1:f9:2d:14:f8:9b:a5:d5:ec:
0a:da:a4:c6:f0:50:17:4a:3a:39:51:a8:f2:da:bf:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:94:2D:1F:9C:F6:BB:CD:E1:4F:D0:7B:3B:74:72:4E:2D:CF:FE
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.250.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:50:6e:6c:55:19:2e:e7:6c:68:c7:61:dd:30:22:98:2d:3f:
85:b0:69:77:8b:52:d3:69:c7:12:ce:7b:e2:6b:81:c7:6e:cf:
b2:1d:62:30:7b:bd:f9:39:8f:74:8d:95:43:f6:f6:70:b1:9b:
68:52:a7:61:4a:41:c3:f7:27:b4:18:70:b8:92:c5:e7:a1:23:
e3:1d:6d:de:a5:1c:4c:40:b9:68:f1:0b:aa:54:a7:59:2f:59:
51:48:85:d8:7a:11:61:66:a4:e3:1f:e5:12:5a:30:b9:03:af:
d1:7d:d8:7c:49:e4:87:79:5d:68:92:b0:d9:a8:a6:2d:dd:20:
d6:c4:d9:85:d7:92:50:b6:35:b6:64:07:06:02:80:42:5b:80:
0f:c2:78:d6:17:de:91:7f:29:81:ed:a2:35:17:a3:6f:0b:8b:
7a:0a:f0:4f:61:73:eb:e2:ff:07:45:2b:89:50:7c:9a:e3:07:
dc:f3:e2:5e:a9:96:34:0f:74:bf:87:93:8e:21:33:1c:f0:74:
d1:2c:fb:80:2a:2d:6b:cb:b5:dd:96:85:e0:23:72:e7:5c:5e:
9a:d6:6f:96:a4:d6:65:46:72:12:86:c9:a2:5b:22:5d:4e:f1:
40:f3:bb:0b:b5:1c:ad:e3:0f:b9:7e:da:2d:eb:80:31:98:bb:
f9:a6:54:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:10:38 2025 by rpki-client