Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa
File: zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa (raw, json)
Hash identifier: F1hV7z0LQUY2X5RuZU9RZBKCovp02y2W3daH45B8zgk=
Subject key identifier: CE:CA:D7:C2:80:33:68:51:19:DC:2A:A6:14:2B:D1:C7:7E:2F:7F:AB
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 0194228D0E538985B3DB354E7FC683300645
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa
Signing time: Wed 01 Jan 2025 15:47:37 +0000
ROA not before: Wed 01 Jan 2025 15:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199927
IP address blocks: 193.247.199.0/24 maxlen: 24
2a05:b2c4::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:0e:53:89:85:b3:db:35:4e:7f:c6:83:30:06:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Jan 1 15:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cecad7c28033685119dc2aa6142bd1c77e2f7fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:3a:01:f7:4e:30:76:e3:23:2a:f7:86:7c:
c8:77:d2:08:1d:7d:5b:7f:af:f9:07:5c:ff:80:f1:
38:7a:68:67:bd:dd:7b:d7:96:14:4e:56:0f:f8:bc:
f2:52:42:3d:96:d6:72:5a:b8:a3:b7:53:8b:e4:03:
4b:94:4a:8c:d0:1a:9f:53:ce:ce:4f:09:08:40:3e:
da:c9:7e:2b:6a:44:35:4f:a7:08:f6:32:4f:07:13:
3e:0a:31:b8:d8:86:8d:b0:cc:df:d0:ed:8a:aa:c0:
7c:fc:e3:fc:34:10:d2:c6:e0:35:93:89:ff:11:f5:
47:2a:63:31:f8:d1:cc:be:27:b1:d8:3f:48:39:ce:
b8:98:92:ab:09:3a:55:57:e9:18:7a:7b:dc:7a:ec:
21:0c:91:7d:a2:a6:19:09:1d:d7:d3:ff:03:7e:45:
a8:9c:15:c4:4e:a9:51:6d:25:95:0e:c1:9a:18:e7:
b1:d4:ec:01:2f:c5:a9:3a:06:3d:5d:fb:9e:76:de:
bf:e7:e8:c4:71:06:5b:6c:78:1a:46:c4:9c:0c:0c:
ee:86:a8:85:d0:72:03:51:c3:79:24:33:0e:ae:e8:
8d:6e:08:de:ac:e7:ee:29:29:4d:f9:c7:9c:3a:0d:
31:7e:48:92:85:af:7a:f4:a9:50:30:ba:5b:75:a4:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CA:D7:C2:80:33:68:51:19:DC:2A:A6:14:2B:D1:C7:7E:2F:7F:AB
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/zsrXwoAzaFEZ3CqmFCvRx34vf6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.199.0/24
IPv6:
2a05:b2c4::/31
Signature Algorithm: sha256WithRSAEncryption
8d:5d:41:a2:aa:04:40:f6:11:7f:8a:81:f1:d8:e8:ea:fc:76:
cb:5f:81:a3:19:cf:23:80:7a:c7:c4:74:1e:a2:84:a7:26:fc:
9f:02:61:e7:af:4c:ee:88:0e:45:d5:f9:6f:fc:46:c8:3f:cd:
4f:f0:c6:cb:1b:41:e9:39:9a:87:0c:a0:b7:af:35:70:3d:56:
7c:00:6f:ce:ac:0f:f6:aa:ee:ff:37:e2:d8:c4:22:f5:84:dd:
de:bb:08:bf:75:c1:10:a4:ba:8e:e8:07:d5:63:50:c5:a5:80:
76:a4:e0:d6:c9:49:5e:27:87:09:b6:ef:53:d5:4c:de:a0:b1:
f2:e9:9e:24:5c:6e:14:59:cd:bd:84:e3:08:a6:86:1f:3d:66:
45:af:bd:29:f0:34:60:06:86:85:da:cf:56:1f:13:8d:2f:70:
f4:5f:38:88:82:e8:a5:4b:07:a9:07:da:c0:6a:b0:c0:0c:b5:
a7:df:31:6a:62:7c:b5:6a:7a:a0:77:fb:12:9d:99:5d:20:76:
8d:ef:c9:dc:35:5d:df:5c:41:fe:3d:10:4b:a1:50:75:ad:b6:
86:1e:fc:69:1f:d0:71:b8:ed:72:3d:1c:f1:39:66:9a:fa:5f:
f1:51:17:09:d6:70:bb:47:97:17:20:c4:f3:c2:51:6d:bb:73:
cc:d7:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:19 2025 by rpki-client