Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/zhUAq4pe-9N-dxfCl2d78EjPTb0.roa
File: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (raw, json)
Hash identifier: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=
Subject key identifier: CE:15:00:AB:8A:5E:FB:D3:7E:77:17:C2:97:67:7B:F0:48:CF:4D:BD
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019423D759A7BABB3347409C1E97717BFCD8
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/zhUAq4pe-9N-dxfCl2d78EjPTb0.roa
Signing time: Wed 01 Jan 2025 21:48:23 +0000
ROA not before: Wed 01 Jan 2025 21:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198247
IP address blocks: 195.94.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:59:a7:ba:bb:33:47:40:9c:1e:97:71:7b:fc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jan 1 21:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce1500ab8a5efbd37e7717c297677bf048cf4dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:ab:f3:2f:42:d6:58:17:df:1d:52:6a:3b:
4f:bb:66:71:55:00:20:e1:f7:82:d4:db:8a:ca:be:
8e:6a:f7:77:4a:00:18:b6:79:73:97:a8:9d:64:77:
c5:ba:e1:b1:a0:3d:ac:41:65:7c:26:d2:ae:cb:61:
f3:1c:2e:ec:6f:d5:0c:04:d5:bd:50:63:79:29:36:
b3:b1:02:ee:36:e4:10:40:ab:89:0f:72:1b:cb:62:
eb:e3:c0:1b:8f:cf:4c:0f:a3:4e:46:4e:b4:78:8b:
3a:5f:05:e0:73:24:00:65:02:d3:71:a5:c3:9d:ab:
3c:da:c1:7b:47:90:12:5e:db:a3:1b:ac:83:79:88:
f1:9e:39:8f:f9:36:bd:01:df:4f:74:41:68:a9:07:
24:53:37:f2:83:0d:8a:a2:95:6c:57:fa:24:7d:ef:
8b:63:2a:6f:aa:3e:24:c9:93:89:84:11:1b:9c:4c:
36:fe:e2:94:c1:2b:fb:ef:80:a2:ca:bd:f1:f3:1a:
0c:09:33:21:db:12:45:ea:0c:cd:99:18:6f:f9:e7:
3f:81:bb:1a:ea:58:ea:0d:1c:ff:3a:e0:c4:c5:27:
9a:86:74:47:a9:df:8a:40:1c:b7:01:b1:19:e1:b3:
ba:94:3f:bf:b2:35:c8:21:a3:8c:5a:cf:c4:85:e3:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:00:AB:8A:5E:FB:D3:7E:77:17:C2:97:67:7B:F0:48:CF:4D:BD
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/zhUAq4pe-9N-dxfCl2d78EjPTb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.28.0/24
Signature Algorithm: sha256WithRSAEncryption
26:47:c1:9c:00:1d:e9:0e:2f:b0:ec:dd:09:d6:b2:24:16:5e:
01:7f:fc:6e:cd:a7:19:a3:7c:13:09:4e:75:ac:ff:d6:b8:91:
3b:96:f5:32:fc:3a:4c:64:69:02:bc:ec:01:1e:eb:5f:2e:13:
ef:cc:03:5f:a7:57:73:94:d1:d3:8f:4f:f3:a1:7c:16:1d:3c:
f8:ab:51:9e:3e:86:7c:98:47:cc:87:17:19:2f:55:71:f2:eb:
d5:69:3a:0a:09:16:68:06:bb:24:1a:9e:c4:db:bb:a4:bb:14:
92:50:fd:0f:db:f9:19:ee:53:d1:af:fd:d5:e3:6f:b3:da:77:
e8:dc:3b:47:71:9b:bf:3a:b2:33:94:22:70:08:90:57:af:75:
f6:6b:9d:57:08:6d:15:e5:ae:15:13:61:31:6f:f1:0c:3b:69:
5e:2f:04:78:fb:6e:35:cd:e4:99:0b:4f:b2:4c:5e:66:3f:1b:
7d:b4:d3:47:dd:dc:10:6b:eb:41:dc:1c:4d:94:21:5c:69:81:
99:ad:ba:fd:6d:73:33:80:55:7a:77:42:7c:9c:3a:c0:bf:8e:
e4:8f:30:cf:b5:92:60:27:05:28:ea:35:c2:e6:58:31:4c:5b:
f7:19:5f:17:74:57:d5:08:ea:33:f9:24:92:48:60:54:9b:dd:
f4:58:6d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:33 2025 by rpki-client