Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/26464a-bdc6-4324-ae9f-aa258b031770/1/Zw8x3tNIueWHt4g_u_-79jE6Tak.roa
File: Zw8x3tNIueWHt4g_u_-79jE6Tak.roa (raw, json)
Hash identifier: zw5T0jjMH3/onBso+MRCjreQ54rcV198WGGSL/dkKbY=
Subject key identifier: 67:0F:31:DE:D3:48:B9:E5:87:B7:88:3F:BB:FF:BB:F6:31:3A:4D:A9
Certificate issuer: /CN=d36a7ac9ce858dfd31bdaa9c81e4d469a9177956
Certificate serial: 01939AD7
Authority key identifier: D3:6A:7A:C9:CE:85:8D:FD:31:BD:AA:9C:81:E4:D4:69:A9:17:79:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02p6yc6Fjf0xvaqcgeTUaakXeVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/26464a-bdc6-4324-ae9f-aa258b031770/1/Zw8x3tNIueWHt4g_u_-79jE6Tak.roa
Signing time: Sat 01 Jan 2022 06:59:09 +0000
ROA not before: Sat 01 Jan 2022 06:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208085
IP address blocks: 193.242.127.0/24 maxlen: 24
2a11:bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26450647 (0x1939ad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36a7ac9ce858dfd31bdaa9c81e4d469a9177956
Validity
Not Before: Jan 1 06:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=670f31ded348b9e587b7883fbbffbbf6313a4da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:33:f4:14:f7:33:54:72:f7:66:6e:63:39:
f0:c9:e7:db:07:0f:64:80:1a:f6:12:f8:c4:c7:8e:
35:31:d6:6e:cb:8e:57:02:b4:70:cb:ac:ac:73:91:
9d:96:89:c9:d3:25:25:16:35:69:16:82:23:bb:60:
79:22:a2:18:de:de:9c:09:df:be:f7:cb:f7:97:42:
8c:09:68:1b:ec:c5:c6:f3:c3:63:a4:d3:91:c6:4f:
cf:fe:75:3b:67:fa:e0:43:61:12:02:b4:88:e4:34:
ff:a9:25:95:d7:6b:a1:49:2b:0a:38:ae:4b:c3:34:
49:ce:63:c8:c6:4f:7e:31:50:7f:a7:cc:b5:0b:f8:
81:3f:1d:da:eb:02:32:8b:02:d5:6a:79:bc:ac:9f:
ee:b8:4a:d6:ed:ee:89:a5:fa:13:a6:dc:10:b2:1e:
2e:9b:2f:12:06:87:c5:30:54:11:54:55:12:23:d5:
c9:b4:a3:57:85:61:16:c9:00:8b:80:7b:40:8f:4d:
b1:d8:72:b1:dc:92:f1:61:3c:b8:d7:fe:53:96:a8:
87:20:6f:c6:81:91:b7:85:b5:a4:9f:e9:b7:dd:cc:
ab:fd:5e:a4:8f:c7:60:75:cc:da:e8:52:06:fa:b4:
74:a8:c6:25:8c:db:82:56:7b:07:27:0d:e8:af:e5:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0F:31:DE:D3:48:B9:E5:87:B7:88:3F:BB:FF:BB:F6:31:3A:4D:A9
X509v3 Authority Key Identifier:
keyid:D3:6A:7A:C9:CE:85:8D:FD:31:BD:AA:9C:81:E4:D4:69:A9:17:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02p6yc6Fjf0xvaqcgeTUaakXeVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/26464a-bdc6-4324-ae9f-aa258b031770/1/Zw8x3tNIueWHt4g_u_-79jE6Tak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/26464a-bdc6-4324-ae9f-aa258b031770/1/02p6yc6Fjf0xvaqcgeTUaakXeVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.127.0/24
IPv6:
2a11:bc0::/48
Signature Algorithm: sha256WithRSAEncryption
30:0c:e8:5c:37:31:86:f7:0d:6b:d7:32:2a:69:f8:15:66:e8:
ec:30:86:21:9c:0c:23:5a:ca:d2:fe:46:6a:8a:20:d5:e0:2e:
bb:c4:e8:14:42:56:57:8c:c4:37:f7:b2:c5:2f:8f:89:de:8e:
bd:36:13:db:57:23:61:58:c2:74:7f:0d:a5:7d:e1:db:15:61:
a1:f3:4f:5c:76:22:28:c7:66:1f:0f:ff:a8:85:6e:1e:84:5a:
5d:19:9a:7e:a2:da:a3:7d:16:85:01:dd:18:26:2a:58:f7:f0:
29:0b:39:e3:dc:ee:fb:c1:22:df:b7:28:a2:3d:9f:e1:d1:36:
2a:6b:a8:54:8c:cc:77:66:be:a9:91:c5:2c:62:2d:5e:f3:8c:
b9:09:d4:9e:6d:68:7f:2a:fb:0b:66:fa:af:4a:41:16:3b:34:
17:66:7c:40:78:12:26:73:26:f0:f8:38:4a:7f:e9:bf:21:ba:
9a:ae:72:d0:e7:8f:54:e9:14:34:bd:9e:7a:43:e9:a5:4f:21:
6d:84:0d:5f:ba:44:91:10:5a:8d:75:67:f4:cd:f2:36:97:30:
b4:84:cb:fa:e5:a3:7f:4b:a2:fe:72:69:df:f1:74:9d:04:8d:
0a:9c:2c:85:4b:1e:42:88:30:46:55:d5:ed:52:51:d7:e2:e7:
bc:aa:9c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:18 2025 by rpki-client