Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/zUk84pMkBH7qM-5eyE2RTVXesY8.roa
File: zUk84pMkBH7qM-5eyE2RTVXesY8.roa (raw, json)
Hash identifier: 1Rye/GoMkKTXa8JBFflyaNlKfqeLYK+b0R1zK9MVT4Q=
Subject key identifier: CD:49:3C:E2:93:24:04:7E:EA:33:EE:5E:C8:4D:91:4D:55:DE:B1:8F
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 01941F8C1066AF7FECBA22CDD6ECF72CBD90
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/zUk84pMkBH7qM-5eyE2RTVXesY8.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 194.40.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:10:66:af:7f:ec:ba:22:cd:d6:ec:f7:2c:bd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd493ce29324047eea33ee5ec84d914d55deb18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:bc:af:95:bd:4c:b2:30:55:e7:ef:72:16:
4c:c5:27:bc:ee:04:10:a6:15:c1:82:1f:5a:9b:0b:
bb:75:ae:d9:33:8a:94:bc:da:d5:1a:0e:29:8e:9e:
28:6f:7c:f4:9e:a1:6d:55:ac:55:2e:84:34:5e:2b:
6d:20:72:d9:d2:fa:ad:54:26:6e:bf:3c:dd:c8:6e:
32:41:64:ba:94:30:b5:b5:77:89:a5:6c:a8:b8:e5:
27:fa:bd:b9:b6:40:c9:b9:29:fd:e7:29:d9:6e:81:
3a:ee:36:d6:1c:3a:f3:d3:de:48:7f:33:e0:89:2f:
45:b8:4e:6d:28:47:f7:84:ae:e2:4f:c2:08:64:59:
fb:e1:ab:6b:8b:87:8d:90:74:e8:10:c9:b7:fc:13:
ed:3e:07:3d:ce:e4:0b:51:fa:1e:79:06:37:9f:2e:
48:e5:fd:eb:fb:7a:11:1b:07:a2:48:06:43:0d:4b:
f2:76:5b:9a:3c:53:45:01:df:0b:15:98:e8:f0:c7:
23:25:33:07:57:45:d1:30:55:9e:1a:66:d9:5e:9e:
83:eb:c0:1c:d7:4e:44:b8:12:c4:07:bd:4c:9c:2a:
83:bc:40:60:b7:6a:84:51:86:e9:98:d0:9b:43:dd:
1f:2b:38:25:b2:51:ff:2a:3f:b6:b6:98:f2:9b:65:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:3C:E2:93:24:04:7E:EA:33:EE:5E:C8:4D:91:4D:55:DE:B1:8F
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/zUk84pMkBH7qM-5eyE2RTVXesY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.40.233.0/24
Signature Algorithm: sha256WithRSAEncryption
30:38:8b:c3:8b:4a:cf:d4:a0:c4:91:a0:41:22:14:d2:e3:81:
1b:cf:1c:9f:08:b5:81:87:41:74:c6:28:9b:1b:8e:d4:50:0c:
a1:44:a3:8d:ab:d5:e2:4c:83:6d:f0:a1:6c:29:22:00:d5:1c:
e1:c3:a3:c2:94:7e:89:5e:ee:58:a9:95:5e:b8:2a:a9:68:99:
07:49:ce:f0:c5:e2:56:c0:ae:40:7f:1f:7e:20:60:e3:b5:68:
38:71:8a:d4:e1:01:b8:eb:a1:47:6b:80:3c:71:70:c7:0e:d9:
6e:d8:6a:c0:39:0e:bb:8f:d2:66:b4:b5:dd:e8:f0:4e:00:b5:
85:97:2f:83:d3:2e:01:c6:cd:4a:25:6c:29:1b:2a:55:39:b6:
01:78:c1:71:ea:b5:58:28:9b:c1:b2:da:d6:f6:cc:91:fd:5e:
e8:d7:2c:e4:93:85:ef:01:ab:79:58:d6:0d:38:5a:2d:5b:66:
12:38:55:0a:d6:c4:96:82:0d:b2:7e:00:03:d9:d4:bb:5d:08:
e1:f8:7b:c3:99:cf:9a:8f:0b:ee:dd:74:bc:ac:74:b4:b9:1a:
6b:69:f7:a7:74:bf:b9:f2:83:05:69:05:a7:72:e3:85:63:45:
00:83:09:f8:14:66:6f:44:c2:55:6a:dd:11:9e:c5:5a:dc:c7:
61:4c:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:27 2025 by rpki-client