Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/zC-XVtksfypCOwDmUdUeVllfLQI.roa
File: zC-XVtksfypCOwDmUdUeVllfLQI.roa (raw, json)
Hash identifier: q1lLlXPM1B2OuaAxpSk6zZYVH0rc6yp93NQ9Af6bSzU=
Subject key identifier: CC:2F:97:56:D9:2C:7F:2A:42:3B:00:E6:51:D5:1E:56:59:5F:2D:02
Certificate issuer: /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial: 01942067CC65787ABB0FB7925EE5739B9826
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/zC-XVtksfypCOwDmUdUeVllfLQI.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44381
IP address blocks: 195.191.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cc:65:78:7a:bb:0f:b7:92:5e:e5:73:9b:98:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc2f9756d92c7f2a423b00e651d51e56595f2d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:24:32:b5:c9:1a:67:52:7a:da:69:1d:05:
8c:2f:a5:ad:e1:a4:44:f4:86:e6:d4:48:59:b5:f2:
44:dc:57:67:30:25:64:dc:92:e1:7b:a8:e1:7c:49:
d4:7c:37:57:04:02:d4:87:2a:54:dd:ba:c1:fd:3f:
6b:ec:03:4a:83:7e:ba:79:91:e2:0b:44:b0:3a:2e:
16:47:f6:d4:00:75:7e:15:b9:d9:5c:21:31:05:e3:
f8:5c:b0:ea:cf:8c:c5:35:b0:37:bb:a3:c5:1f:bb:
2f:d5:b7:3e:5e:30:6b:d1:e6:dc:53:1a:ae:0f:70:
a0:fa:58:7e:08:a5:d2:4f:87:2c:27:9b:0c:60:bb:
1f:16:74:f5:d1:ab:22:67:03:ac:0a:fc:9e:c5:21:
a3:07:da:28:91:02:91:bc:36:88:3d:92:29:32:56:
43:44:87:ec:7d:1c:4a:2e:11:5e:43:af:a9:52:f4:
a8:0d:cd:4f:92:93:ce:6a:2a:dc:bf:5b:18:b1:92:
82:4c:e2:c2:0e:1e:dc:82:27:97:52:13:f2:e6:ed:
87:d9:bc:61:b9:7b:cf:98:88:a2:02:ed:27:a2:97:
66:f9:da:db:e4:09:7a:06:18:a0:88:49:56:2f:2e:
73:56:ab:ed:5e:0e:ef:33:d3:84:f3:64:c3:95:87:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2F:97:56:D9:2C:7F:2A:42:3B:00:E6:51:D5:1E:56:59:5F:2D:02
X509v3 Authority Key Identifier:
keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/zC-XVtksfypCOwDmUdUeVllfLQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.30.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:c8:52:e5:fa:4d:e1:e3:c5:98:9d:e0:a3:c8:c9:ee:65:7f:
74:b1:d7:94:48:ef:8f:42:7b:85:00:88:0e:bc:75:16:2a:ab:
b7:d5:2c:fd:c2:8b:a8:f8:df:9b:2c:9c:33:f0:c1:7c:9e:13:
11:0b:e6:6e:40:0d:f0:9a:8b:1d:f9:ec:0a:12:48:54:67:d9:
c0:c4:d9:7d:0a:0c:e3:3f:8a:ad:2c:08:89:0d:59:2f:f8:ce:
5a:f9:f3:e2:35:41:dc:90:00:db:c8:aa:9a:e9:2c:79:e1:67:
9b:e1:b6:58:b1:90:f1:1d:9c:dc:ce:e0:8d:13:11:4d:dd:99:
d2:45:dd:57:b9:d2:a9:86:bf:8f:9c:cb:7c:f7:de:45:8b:50:
ab:fd:a4:e1:7d:10:74:6a:53:78:7c:7a:a3:be:43:20:66:eb:
4e:9d:31:e6:17:b3:6b:24:8c:bf:f8:fa:24:97:2e:c2:a2:66:
90:74:11:ef:e9:c2:cb:1d:a0:c9:75:4f:82:32:cb:c9:88:1b:
f7:1b:0f:d2:e3:a6:4d:9f:dc:90:09:2b:0e:bc:d8:bd:04:ae:
7f:8c:0a:e9:4d:31:fc:b8:16:f9:8f:d7:66:0a:13:ab:af:49:
36:8a:f6:0e:66:4f:d4:cf:86:90:f0:63:9e:cd:e5:9e:7d:66:
35:e9:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:06 2025 by rpki-client