Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZOzkAvXS6BIZ_CTLYVBFfVCuCJc.roa
File: ZOzkAvXS6BIZ_CTLYVBFfVCuCJc.roa (raw, json)
Hash identifier: 5U5SCxLR5IKHn2aj/Pzslf9hBUcSn5ICtyVslEE3kAU=
Subject key identifier: 64:EC:E4:02:F5:D2:E8:12:19:FC:24:CB:61:50:45:7D:50:AE:08:97
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BEA6D2B66F666E189AD80BE875FD4
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZOzkAvXS6BIZ_CTLYVBFfVCuCJc.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200504
IP address blocks: 193.192.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ea:6d:2b:66:f6:66:e1:89:ad:80:be:87:5f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64ece402f5d2e81219fc24cb6150457d50ae0897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:c7:1f:d7:6a:af:40:ac:8f:6b:0c:54:21:
e9:04:1f:68:21:49:1c:6d:c4:60:38:90:9e:4d:d5:
4e:4c:53:90:48:73:46:6d:8f:8d:6a:b2:6a:39:6f:
ea:0e:a6:02:cb:5e:bb:4c:5e:3f:2f:9e:74:61:3a:
e0:a7:27:21:02:90:fa:e7:08:aa:f5:8a:e6:89:85:
10:77:cd:cd:18:07:72:22:cd:12:0b:5c:af:a0:a2:
e2:4c:74:74:bd:44:21:25:4e:13:2d:39:ba:2b:6e:
e6:fd:69:5d:bb:22:b6:94:10:a4:71:e1:68:a1:18:
ff:c3:e9:10:d7:81:98:a3:f7:aa:d5:6c:51:c4:0b:
da:48:83:38:46:15:14:d0:dd:33:ba:4b:58:90:74:
f2:e2:63:23:45:ec:e9:fe:d0:29:68:c6:cb:aa:8f:
29:9f:bf:c2:7f:93:42:31:83:3a:69:89:0a:e7:15:
1f:ea:90:02:b6:e5:26:28:88:07:9e:ac:04:9d:31:
d1:9b:e1:89:e6:dc:9e:14:15:90:14:a0:2c:db:df:
ee:cc:47:18:38:8f:5c:38:c7:f7:b2:9c:7d:c2:72:
63:f6:21:83:d3:83:56:e0:f0:b1:cf:aa:47:d8:d1:
75:7c:be:12:b7:3d:27:0a:a9:89:8b:fa:32:94:3c:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EC:E4:02:F5:D2:E8:12:19:FC:24:CB:61:50:45:7D:50:AE:08:97
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZOzkAvXS6BIZ_CTLYVBFfVCuCJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:87:34:ec:ff:20:b3:59:79:7e:ca:7a:c9:41:ab:c8:4e:20:
8e:af:40:e0:b6:44:11:d0:26:09:6b:e4:f1:60:42:09:94:82:
79:3d:bf:ab:64:2d:f2:c5:f6:5a:c4:90:b7:2d:30:b4:c7:01:
bf:b0:5a:d9:a4:21:d8:25:49:8d:33:da:9b:fb:ff:dc:54:38:
6a:03:f1:f0:4d:ca:96:61:67:2e:0a:19:62:7b:a8:6b:ac:43:
79:7b:e0:f6:a2:e2:30:19:5f:6f:35:31:2f:fd:ba:05:c8:4d:
e9:f8:cc:4f:48:b1:89:de:6a:3f:7e:34:42:f3:72:52:ab:1e:
b8:5f:a2:81:ef:36:64:97:58:f1:1c:a7:55:41:ef:4f:cc:d5:
e2:48:a6:c2:b1:26:79:14:1a:1a:00:43:4c:60:a9:51:f8:59:
be:95:cf:14:1d:64:1a:dd:94:d3:ba:73:c1:d0:a5:a3:70:47:
32:e2:9c:9e:07:ed:35:b6:7f:ad:c3:f2:f6:2f:27:8f:1a:36:
62:ba:e5:b1:2d:b0:71:47:3a:c9:3d:70:06:08:b2:05:10:ff:
d0:b1:58:4c:77:a4:a8:7b:84:a9:ab:c8:db:34:17:8e:52:d1:
5f:d7:ad:70:bb:0a:a3:cf:77:b8:a4:c9:51:2a:76:11:c3:4e:
89:ca:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:00:32 2025 by rpki-client