Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa
File: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (raw, json)
Hash identifier: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=
Subject key identifier: 27:2F:70:EB:96:6E:6C:69:B4:49:8F:F9:F5:6A:B5:B4:59:6A:EE:00
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 0194236A24AB34B1D31D9DC957A4586ADF0B
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50700
IP address blocks: 193.105.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:24:ab:34:b1:d3:1d:9d:c9:57:a4:58:6a:df:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=272f70eb966e6c69b4498ff9f56ab5b4596aee00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:12:40:61:0d:d3:ef:91:02:68:1e:6c:17:
2c:29:ab:b7:5f:26:a1:e0:2f:dc:de:61:4b:2d:57:
34:23:de:ae:25:3d:92:9b:f2:33:8a:b1:82:03:f7:
68:b9:2d:a8:a4:d9:35:bc:04:20:94:8b:7f:3f:3c:
74:55:20:dc:70:a9:4e:0d:03:cb:c9:80:54:78:e3:
99:ec:19:d4:80:1c:f4:a8:55:22:27:65:98:a8:76:
d6:25:c4:fc:fc:46:e9:56:a1:bc:70:45:fb:02:28:
14:16:3c:d9:74:c3:31:45:21:ed:4e:38:78:dd:4a:
91:5f:b0:84:74:df:e3:a5:b6:3b:a1:b7:9c:0a:43:
f9:51:f9:25:f8:c3:c7:87:83:2f:41:37:3e:15:48:
37:89:89:92:58:09:b7:48:a4:67:b7:f2:7f:cb:c0:
51:f9:12:bd:2a:8a:2a:4f:f3:7b:0e:c1:84:51:a4:
01:3f:62:4e:34:e5:6e:2e:6e:f8:4a:84:c4:2c:e8:
f7:fe:53:1f:aa:4c:d0:9f:9d:94:2f:24:a4:86:c0:
3d:ae:a9:50:9d:d6:da:b8:73:26:97:2c:b3:4a:ea:
c8:94:f9:01:59:5e:12:19:f7:e5:bc:b7:97:3e:08:
a5:31:5f:81:24:34:79:7e:17:7c:8f:4e:b6:9a:ca:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2F:70:EB:96:6E:6C:69:B4:49:8F:F9:F5:6A:B5:B4:59:6A:EE:00
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
57:82:22:f9:7a:df:7d:f3:83:8c:63:31:20:f2:d2:ca:c8:05:
aa:95:33:f5:c8:96:9b:8a:7e:c3:bb:e8:bb:4d:c8:a8:fb:b9:
0b:a9:59:1e:b1:15:7c:c6:69:6d:cc:fd:fc:45:4c:a5:24:4b:
f1:d1:dd:d1:b7:9f:1f:52:c7:ef:27:67:c9:1d:d4:07:83:90:
e6:9c:b9:2f:fb:b7:5b:09:ef:11:4f:a7:2c:f1:cf:43:1d:9b:
06:ca:d2:dd:ec:e2:a2:71:0b:15:97:14:c9:b2:17:72:ba:84:
ba:cb:ea:4f:f2:20:31:03:1c:bf:1b:5e:ee:db:04:e3:43:ae:
e1:2c:9b:47:3a:5d:5d:a2:00:0d:67:b0:eb:e7:82:74:e7:bb:
2a:42:db:da:14:00:ca:36:ca:30:15:a4:aa:4b:e7:52:c9:35:
15:bd:41:14:22:1a:9d:50:ec:18:6e:8e:c1:93:38:fe:17:e5:
52:ad:39:33:ae:d2:97:e2:3b:ab:fa:a6:b2:4f:f2:ca:c5:cf:
ac:1d:ad:9e:8a:85:15:51:5b:ef:ac:90:04:35:09:90:94:7e:
90:eb:d9:82:6e:f1:8b:1f:b3:88:73:b3:c8:82:c3:0b:94:ec:
fb:80:ab:e9:78:41:e4:e7:d0:18:4a:ca:b9:1f:37:d9:70:5b:
31:03:34:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:45 2025 by rpki-client