Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ZZUO68-zxdfnWQL29ZUtG9LLugc.roa
File: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (raw, json)
Hash identifier: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=
Subject key identifier: 65:95:0E:EB:CF:B3:C5:D7:E7:59:02:F6:F5:95:2D:1B:D2:CB:BA:07
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 0194228D7C41A239B4F0741C05C31B6F3D63
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ZZUO68-zxdfnWQL29ZUtG9LLugc.roa
Signing time: Wed 01 Jan 2025 15:48:05 +0000
ROA not before: Wed 01 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 193.102.32.0/22 maxlen: 22
193.102.32.0/24 maxlen: 24
193.102.33.0/24 maxlen: 24
193.102.34.0/24 maxlen: 24
193.102.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:7c:41:a2:39:b4:f0:74:1c:05:c3:1b:6f:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Jan 1 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65950eebcfb3c5d7e75902f6f5952d1bd2cbba07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:00:24:da:2d:22:69:0b:dc:dd:fc:3c:71:
8b:de:1a:2a:47:76:c1:bd:1c:a8:95:e9:d6:a2:eb:
d7:99:92:0e:f3:a7:87:17:34:11:c5:1a:09:cc:71:
74:1f:50:57:9a:d0:b0:31:1a:18:52:79:4a:57:96:
b6:b6:d2:c1:33:e6:2b:5e:fa:09:4e:90:95:a3:75:
93:da:2e:a6:44:0e:65:6c:65:59:e6:c2:0c:eb:4a:
1c:ec:34:98:37:fa:e0:f1:08:66:d1:2a:0f:60:d4:
18:33:47:e2:18:0b:2f:43:ca:66:39:b7:77:96:c9:
3f:13:57:7e:41:86:b9:74:26:ea:3a:b6:60:d0:2e:
cd:96:16:5c:b6:77:9c:c0:23:1a:21:a1:ea:72:8a:
d0:1f:fb:dc:6a:64:8d:71:fe:2f:7e:45:b9:d1:60:
c3:88:20:0e:77:af:8d:38:56:fe:cf:1f:27:38:25:
6e:0b:c4:12:0c:5c:53:a4:23:5b:3f:18:17:8d:82:
fd:a4:aa:c8:ef:b7:a1:46:de:1c:3d:b7:55:d6:fc:
3b:91:fc:03:ff:72:04:34:ca:e8:44:2e:be:5c:e1:
c7:cd:fe:89:15:61:d2:1c:bf:ca:41:1b:7f:6a:20:
d9:4f:4d:ac:3b:a3:6d:fc:ec:7c:1b:5d:03:3f:fb:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:0E:EB:CF:B3:C5:D7:E7:59:02:F6:F5:95:2D:1B:D2:CB:BA:07
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ZZUO68-zxdfnWQL29ZUtG9LLugc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.102.32.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:69:c2:ac:5f:c5:b9:0d:47:12:8c:bf:1d:7b:86:4e:b2:00:
d5:1e:90:f2:2a:fc:63:81:d2:07:83:b4:f3:60:cb:ec:d0:72:
d3:c9:d5:01:7f:4e:a7:e8:aa:c2:bd:89:92:29:ef:39:c9:5f:
d8:5c:fb:76:e6:2e:ca:f5:dc:4c:62:3f:43:6e:6c:ab:b4:bd:
a2:fc:3b:e1:53:cd:a1:0a:42:d8:6e:84:e8:be:fb:7d:51:20:
dc:b0:e7:26:c0:03:f6:ef:07:c7:26:5e:be:9a:44:19:fc:b3:
71:a5:c6:9f:76:c6:f7:f8:54:4c:25:9c:f7:6d:3c:49:cc:e4:
c4:ff:83:91:6b:8d:01:7a:d2:3d:35:20:e9:1d:fb:3c:ac:46:
dc:18:9d:01:cf:7b:9f:16:34:8d:e0:c6:95:7e:1f:2d:90:e2:
64:27:25:ab:a1:91:ba:e4:14:d4:0b:85:ec:1f:3d:5e:da:ed:
91:b6:88:e9:e6:3d:e6:1c:0d:0c:ae:84:82:14:a8:c3:90:32:
e6:2b:38:ec:15:ec:e4:3b:ae:ed:76:27:be:ca:1b:a0:fc:7f:
d2:c0:7d:a4:cf:2f:50:e6:5e:10:c8:74:04:23:5b:29:41:8a:
ce:48:df:cf:d0:ce:16:38:e3:3f:00:35:20:a2:c9:32:f0:ea:
ef:6f:8b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:35 2025 by rpki-client