Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa
File: rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa (raw, json)
Hash identifier: UNrRcAyslLxjeDmqjrPzHbwMyZ4AtgV3GxOrJgdzxQg=
Subject key identifier: AD:90:7F:25:5B:E4:38:8A:A6:6B:A5:A1:EB:A4:82:9C:70:89:4B:C4
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 019427B5D4747AD59206BE2544661F25ADC4
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa
Signing time: Thu 02 Jan 2025 15:50:15 +0000
ROA not before: Thu 02 Jan 2025 15:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.109.126.0/24 maxlen: 24
195.22.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d4:74:7a:d5:92:06:be:25:44:66:1f:25:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Jan 2 15:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad907f255be4388aa66ba5a1eba4829c70894bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:05:52:5c:1f:53:1f:d0:2d:bd:43:f7:5f:
93:7a:b4:12:db:ac:fe:9f:b6:9a:fd:52:a9:7a:33:
c3:ca:41:76:d9:ae:1f:90:f9:e1:0b:7d:e5:a5:1a:
3d:25:41:72:a0:ae:26:73:23:f6:f4:94:f1:1c:bc:
29:56:e8:85:f8:75:36:22:16:73:69:cd:79:9c:26:
6a:92:0d:ec:45:76:79:33:f0:e0:0a:fb:86:68:8e:
98:89:f4:e1:8b:ba:1b:b1:3a:a6:c3:54:6e:51:91:
2e:0c:e2:8b:0a:6c:28:7c:cd:6f:34:24:fa:22:07:
c7:87:72:05:94:6e:ac:5c:49:f6:17:9a:0f:1e:99:
70:7f:95:56:5f:9d:e2:f6:41:5a:5b:3d:d0:cf:88:
35:ae:62:a2:5a:8e:aa:f7:77:e0:e5:0c:93:ee:4e:
a1:80:bf:7a:7e:08:26:8a:3b:3c:49:c8:c8:4e:dd:
b3:d1:b9:65:97:f5:5c:04:b4:1d:17:4f:a0:7a:f4:
6c:ba:b5:27:b0:ca:07:85:fa:f3:3e:09:d3:d9:91:
a7:66:cf:2e:65:dd:5f:b9:73:46:29:fd:ae:0d:8b:
01:06:28:41:24:c7:d5:ce:e8:8e:f6:87:d9:48:64:
d3:72:2e:46:31:38:be:fe:32:1d:02:c7:4a:72:f3:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:7F:25:5B:E4:38:8A:A6:6B:A5:A1:EB:A4:82:9C:70:89:4B:C4
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.126.0/24
195.22.138.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:e8:3b:aa:db:f5:6f:43:2b:14:cc:9c:f6:f1:bb:e8:a8:cf:
4a:19:a7:1f:1f:c6:d8:be:48:b1:37:90:a8:c8:e1:f7:da:37:
e9:21:cd:63:eb:2f:34:cb:4d:7b:fb:da:ac:ac:39:db:8b:96:
6a:c2:f8:f2:a5:52:0e:bc:bf:ae:e2:83:46:78:8d:f4:83:db:
ea:8d:bd:73:e0:5d:9e:9e:a4:d6:e5:f0:ce:3c:99:29:58:b3:
ec:ff:fe:92:04:82:3f:41:42:92:e4:22:b0:18:c9:94:5f:76:
27:1f:d5:33:ce:8b:ae:be:01:58:31:c4:24:42:19:77:fb:19:
03:a6:08:93:35:64:48:ef:ec:03:86:b1:1f:4d:c1:48:58:e5:
8c:18:dc:d9:19:2d:87:36:21:7b:a8:51:03:19:25:30:76:6b:
f5:87:1e:53:7a:bf:57:df:f0:06:f0:af:89:b9:3d:e5:f9:40:
f2:50:e4:a2:21:e6:fe:06:0f:6e:12:60:7a:5f:2e:5b:11:51:
94:d8:e5:8d:2e:97:6c:ea:73:99:d6:ad:9a:3b:8e:83:75:02:
df:00:04:20:16:8e:d4:d2:a4:61:df:c6:03:62:bb:0c:a5:6e:
82:e5:68:6e:2c:90:9e:15:b9:2f:6a:08:19:ad:bf:c6:40:89:
38:72:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:53 2025 by rpki-client