Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/zxiStXGp24ax3PMaP2c669J9olI.roa
File: zxiStXGp24ax3PMaP2c669J9olI.roa (raw, json)
Hash identifier: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=
Subject key identifier: CF:18:92:B5:71:A9:DB:86:B1:DC:F3:1A:3F:67:3A:EB:D2:7D:A2:52
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 019425FDC6A067F84BE9CA5FC30F133B91D3
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/zxiStXGp24ax3PMaP2c669J9olI.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44957
IP address blocks: 2.33.0.0/16 maxlen: 16
93.151.0.0/17 maxlen: 17
93.179.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c6:a0:67:f8:4b:e9:ca:5f:c3:0f:13:3b:91:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf1892b571a9db86b1dcf31a3f673aebd27da252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:00:7e:29:1b:1c:53:cc:33:2d:7c:ea:6f:
40:e8:d3:72:8c:d6:cb:2e:87:d6:0a:be:31:19:08:
35:e1:b5:82:85:92:d9:56:57:cb:93:95:b9:10:7c:
88:bf:c7:75:ee:95:bc:cf:08:8f:0d:f2:c1:f0:af:
54:8a:64:2a:57:4d:ab:e8:a3:4c:8a:16:29:e5:ab:
b6:9a:e5:cb:47:a4:14:32:fb:35:95:43:e9:c2:f0:
3c:fc:c8:c8:38:31:52:49:63:59:77:b2:78:23:b4:
9f:fa:4a:ea:84:eb:d7:e9:c9:9e:1c:82:05:29:92:
e9:ea:7f:b2:a8:36:ad:a0:4c:20:f1:b4:fe:cd:e7:
09:5b:46:50:3d:2c:2b:d5:fa:7c:92:5a:0c:b7:80:
48:18:11:87:f7:70:09:6e:42:f1:89:6b:c2:c5:ce:
47:bd:9b:df:1b:d5:7b:cf:63:e0:63:53:99:6a:05:
31:f7:85:39:9d:2a:80:c2:be:13:c7:fd:d0:4c:d4:
2e:c0:a1:d1:6d:62:1c:35:70:05:50:a9:b6:f6:b4:
77:b1:20:fd:9f:1f:b8:27:c4:1f:43:7b:5a:6b:54:
0f:9a:8a:03:28:fb:35:a7:88:44:25:ec:ee:0f:6c:
fd:16:7e:0e:99:ea:17:1e:f7:41:aa:d5:20:d3:4b:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:18:92:B5:71:A9:DB:86:B1:DC:F3:1A:3F:67:3A:EB:D2:7D:A2:52
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/zxiStXGp24ax3PMaP2c669J9olI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.33.0.0/16
93.151.0.0/17
93.179.185.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:88:da:f6:b8:bf:5a:ab:75:23:51:e6:75:c3:da:5c:6c:c4:
53:dc:00:c5:b7:fe:17:61:6e:99:12:3b:ac:c7:5b:e4:f4:9b:
33:97:c4:9d:a0:2a:cc:de:15:30:be:dc:a8:50:00:39:43:83:
0d:5f:19:d5:57:d1:6d:b9:78:8e:76:d5:a9:ab:cc:16:c0:9e:
c3:24:f3:b9:47:fa:3c:2f:29:e2:fb:d7:42:a3:9f:a1:d9:4b:
1c:7d:00:4b:cd:d7:9e:e4:f8:a0:90:5c:67:c4:47:73:68:9d:
b6:33:f6:52:ae:eb:0a:aa:fd:4b:ba:82:8d:63:4e:5c:e5:fe:
a8:3a:2a:5e:20:c8:c8:1d:c6:21:5a:85:40:cb:5e:32:57:5f:
8b:d3:20:8c:6a:b7:86:6a:75:f5:f1:dc:0c:50:70:a7:eb:0c:
2e:92:3c:0b:c6:1d:bc:59:20:60:dd:9b:76:c6:6c:7c:79:30:
a6:f0:4e:04:57:e5:e1:4b:c7:3b:7f:48:f0:40:6a:36:3f:a7:
b1:eb:6d:d7:3a:4d:35:a7:16:b2:39:bb:fe:12:07:01:9a:44:
ac:63:91:6d:a0:83:27:b8:d0:12:bf:14:49:b5:05:eb:61:5d:
00:b6:e4:0e:83:86:9b:df:0f:b1:94:2f:d4:6b:48:32:81:97:
ff:ec:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:01 2025 by rpki-client