Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/kzlKteCWTjnwW6-aHGmzKaU89Tk.roa
File: kzlKteCWTjnwW6-aHGmzKaU89Tk.roa (raw, json)
Hash identifier: dZAgMsY9EZwDfLHL+nyzOll7nSrz5A+eCW3/ALWgVNM=
Subject key identifier: 93:39:4A:B5:E0:96:4E:39:F0:5B:AF:9A:1C:69:B3:29:A5:3C:F5:39
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 0194228D0DD84B436A1ECF3C0BEF2CE03CF9
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/kzlKteCWTjnwW6-aHGmzKaU89Tk.roa
Signing time: Wed 01 Jan 2025 15:47:36 +0000
ROA not before: Wed 01 Jan 2025 15:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 193.247.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:0d:d8:4b:43:6a:1e:cf:3c:0b:ef:2c:e0:3c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Jan 1 15:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93394ab5e0964e39f05baf9a1c69b329a53cf539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:15:fe:a5:34:78:92:03:fc:43:60:88:88:
1a:74:99:11:92:7d:7e:b6:73:0c:ba:f5:4a:1d:77:
1b:91:ab:f0:f3:86:f5:b0:5e:5e:b4:68:39:88:ea:
1a:00:37:7a:00:0b:63:ad:81:d1:0a:54:82:2c:f1:
d0:d6:25:94:04:39:4d:01:91:32:1e:f3:89:10:b9:
8e:9e:e5:80:32:6d:68:9c:30:a7:80:37:cb:6a:34:
82:a2:3a:cc:4f:ea:e8:6f:8a:d4:cc:51:6a:4f:df:
23:24:77:e9:12:e6:10:40:35:0d:e6:c6:8f:72:d6:
12:02:4a:ac:7f:40:b8:ac:be:ea:21:43:5b:49:f3:
98:56:3c:9a:b4:2c:b8:1e:74:a3:9f:9f:2a:f3:cb:
df:1f:d3:1d:e3:5f:0a:1b:12:00:61:50:41:6b:4f:
d9:fe:c3:ea:8b:6f:41:b9:2c:a2:fd:78:9c:a3:46:
1c:05:db:9a:61:57:4b:70:08:d4:a1:30:5d:58:40:
8c:b3:2a:1a:41:07:6b:a8:23:5b:8a:da:89:5c:c2:
1d:25:69:12:65:c6:83:84:32:6d:6e:29:7e:b3:a1:
98:83:73:8e:da:ca:f0:8a:33:bf:c7:3e:39:d7:8c:
94:8b:06:e6:f7:81:63:ec:a1:95:26:b2:6e:c1:85:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:39:4A:B5:E0:96:4E:39:F0:5B:AF:9A:1C:69:B3:29:A5:3C:F5:39
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/kzlKteCWTjnwW6-aHGmzKaU89Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.198.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e3:eb:b5:88:13:8f:49:44:16:70:1a:e0:b3:ac:63:ca:9a:
06:15:6b:49:33:7f:08:5c:5b:3d:53:a4:0f:66:5d:54:df:b9:
a8:81:1a:2b:af:56:46:d3:d2:3e:7a:33:0c:55:de:22:c7:73:
96:4b:6b:7a:3c:7e:58:16:a6:7c:d5:19:66:c9:38:e7:b7:ad:
ee:01:07:70:de:20:50:59:18:02:73:d1:f3:be:40:82:4e:0e:
de:0b:ee:36:2d:8c:89:3c:08:86:3a:40:87:4e:d7:31:aa:58:
e8:ac:3a:8e:34:ce:71:cf:5d:7a:29:cc:0a:2e:57:c2:0f:af:
72:96:f0:59:cd:85:2c:32:a1:f4:1b:33:46:b7:f3:af:ba:8f:
95:12:6b:d6:0a:c1:4f:0a:01:34:1e:f0:ed:29:ed:ec:73:ce:
73:0d:b0:fe:5a:46:f0:65:64:4a:4c:61:c0:3a:e6:b6:53:83:
41:25:79:c6:e9:0f:a4:f8:0d:78:05:fe:f0:f1:5e:59:9a:8a:
25:8b:01:9d:85:a6:1e:f3:ef:07:9b:95:43:a8:8a:f8:24:21:
42:6c:42:2c:ac:36:aa:ce:b2:0f:ed:52:d6:3c:00:65:0a:b4:
60:c7:48:d5:60:aa:b7:48:55:04:f1:48:cb:61:a8:19:04:e3:
04:06:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:46 2025 by rpki-client