Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EQz6ZVk2QCjj8aSEdByKZRE4J7k.roa
File: EQz6ZVk2QCjj8aSEdByKZRE4J7k.roa (raw, json)
Hash identifier: dTT+l6fZYgY7qXdKXn21wqJ7uXrsBkJh/i1gwThx8oU=
Subject key identifier: 11:0C:FA:65:59:36:40:28:E3:F1:A4:84:74:1C:8A:65:11:38:27:B9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01879F26547A3D3D02A8CC8AC46FA569229F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EQz6ZVk2QCjj8aSEdByKZRE4J7k.roa
Signing time: Thu 20 Apr 2023 14:51:41 +0000
ROA not before: Thu 20 Apr 2023 14:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12480
IP address blocks: 194.121.203.0/24 maxlen: 24
194.120.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:26:54:7a:3d:3d:02:a8:cc:8a:c4:6f:a5:69:22:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 20 14:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=110cfa6559364028e3f1a484741c8a65113827b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:5f:88:a0:ea:56:fa:92:9e:ca:40:73:9f:
0b:88:db:d5:f3:38:bb:38:bf:8a:d0:0b:1b:9f:8c:
58:47:f0:89:35:63:43:91:83:31:9c:c7:9f:a4:e0:
ea:d8:31:21:fb:57:75:a8:2b:56:f8:44:f0:0c:53:
12:35:1a:6f:8a:b3:f1:5e:f6:f8:98:f2:f5:b6:92:
6f:be:0c:cc:39:1f:e6:01:ca:c5:96:d4:48:77:fc:
aa:b7:35:0b:30:e6:0a:5a:96:97:e8:89:33:6b:3a:
e0:c9:58:26:9e:4b:9f:06:6c:37:a7:63:00:37:c9:
9b:eb:5e:b1:fa:0e:60:f4:3b:9e:f0:cc:6f:f2:99:
bd:8a:3b:6c:3c:1c:14:6c:e7:f6:e9:05:5e:45:25:
64:8a:62:24:70:1d:de:d3:de:65:fe:c3:d1:b0:37:
9f:ef:1c:2b:f4:f9:93:ad:08:72:74:de:0f:80:ff:
e9:6a:45:7b:a9:56:97:24:f9:3d:1d:d5:43:bd:78:
59:3e:39:05:e3:d7:5f:96:64:fc:9b:b2:fa:c9:e3:
60:ab:a8:a1:7d:90:29:72:4d:20:a8:71:75:60:4a:
c7:f4:7f:b4:d4:3f:cd:6d:7b:e3:db:b8:4d:f4:10:
94:e2:ce:33:be:9a:4e:27:c4:51:aa:cd:04:d1:e9:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:FA:65:59:36:40:28:E3:F1:A4:84:74:1C:8A:65:11:38:27:B9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EQz6ZVk2QCjj8aSEdByKZRE4J7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.43.0/24
194.121.203.0/24
Signature Algorithm: sha256WithRSAEncryption
56:1c:43:ec:2f:7c:be:d6:a9:e7:5b:28:6d:aa:d2:34:7d:fa:
73:27:cb:99:8b:9c:19:69:ee:3e:d7:5b:14:e2:38:73:e3:3e:
b8:ef:23:cd:b0:fa:ea:80:ae:63:c6:bf:43:c5:aa:e8:c4:9b:
3b:07:67:3c:00:37:3c:7f:ab:40:c9:14:72:ec:b3:ac:4d:25:
f3:05:b2:1b:0e:6b:92:28:02:65:e6:7d:1d:b9:24:6b:75:9f:
ea:c3:0e:46:c5:35:e3:a1:6f:d8:66:f1:27:b2:e9:43:68:ce:
48:ca:e7:9e:ab:f2:31:ad:7b:14:ea:35:5a:79:16:a9:50:c4:
ca:18:fa:c6:1c:76:ca:6a:6b:a8:b5:b8:c1:2e:33:4e:89:8c:
9a:eb:23:bd:81:c4:69:a6:08:37:a7:a3:6d:22:6a:cc:ae:d8:
bd:70:2e:a0:9d:b0:83:2e:f0:4e:87:d8:47:d3:60:85:52:d2:
99:a9:b9:69:62:0c:59:28:aa:76:ce:d6:2e:db:41:65:71:28:
69:72:b3:15:1f:6d:cb:12:d4:d0:ad:fb:99:7f:60:3e:dc:6c:
fc:7a:4e:01:fb:07:d5:bf:08:01:82:fd:10:bf:2e:4c:20:f1:
2e:79:6d:2f:3c:65:c8:bf:a5:8c:f5:9b:d4:95:36:7c:df:39:
16:12:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:51 2025 by rpki-client