Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/cZNRC54iklgNWYm4bOxRUrThNWU.roa
File: cZNRC54iklgNWYm4bOxRUrThNWU.roa (raw, json)
Hash identifier: 7TUW8rEcRA76OYIr9WRYyb0EVyDB9PyjFL1/RYt7YQI=
Subject key identifier: 71:93:51:0B:9E:22:92:58:0D:59:89:B8:6C:EC:51:52:B4:E1:35:65
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 0194F1E6C5FC7D3167CC905ED3C121BA7D1A
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/cZNRC54iklgNWYm4bOxRUrThNWU.roa
Signing time: Mon 10 Feb 2025 22:07:00 +0000
ROA not before: Mon 10 Feb 2025 22:07:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41108
IP address blocks: 193.3.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:e6:c5:fc:7d:31:67:cc:90:5e:d3:c1:21:ba:7d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Feb 10 22:07:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7193510b9e2292580d5989b86cec5152b4e13565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:39:53:a7:e0:c0:c9:b2:bb:73:ce:b9:6f:
d3:ae:d0:07:98:06:50:f2:c2:45:6e:67:4a:4c:18:
03:0c:96:9b:6b:24:12:eb:dd:eb:60:ff:c0:74:2b:
a4:8d:49:cc:41:cc:c7:d5:78:77:7d:77:fd:1f:05:
a3:40:51:1f:47:61:e3:8b:3d:c3:25:91:ad:83:58:
4c:2c:96:1c:de:cc:4e:55:f0:d3:ae:6d:4a:70:ac:
ff:31:66:8e:45:01:e6:68:90:e2:cc:45:c2:7b:7d:
8f:0f:3d:8b:6f:1d:58:c6:c4:04:56:ac:65:81:ca:
e9:4b:33:26:83:6e:78:89:44:e4:62:0c:6d:c2:02:
fb:19:de:a3:2e:fd:41:90:54:72:3d:89:cb:02:aa:
c0:1f:84:2b:18:67:f1:97:bf:6e:c6:ca:b5:77:4e:
ac:4a:24:36:b8:68:7f:0b:52:33:67:9c:a0:4b:f0:
5f:1c:5b:cb:5b:64:f9:75:3f:6c:ee:71:68:f3:5c:
38:e1:a7:c7:1d:91:2b:a4:75:9a:ba:5e:c7:db:99:
68:a4:0a:d6:25:82:b3:85:15:4e:01:fe:15:69:27:
75:62:c6:5a:e2:5a:90:d3:14:00:79:18:9f:10:81:
8f:23:36:d3:f2:65:82:19:22:30:61:82:73:c9:3e:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:93:51:0B:9E:22:92:58:0D:59:89:B8:6C:EC:51:52:B4:E1:35:65
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/cZNRC54iklgNWYm4bOxRUrThNWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.157.0/24
Signature Algorithm: sha256WithRSAEncryption
10:66:b5:91:3b:26:d3:00:31:f4:0b:59:59:5c:11:32:2f:a8:
9a:fc:a9:a3:d6:03:c0:a3:9a:96:7d:bf:88:b5:a7:2e:ef:48:
00:86:af:6f:d8:8f:1b:19:84:0b:1b:cc:08:98:05:34:38:b0:
8d:66:8a:ed:58:b2:4f:de:ea:14:d8:2e:d4:20:07:c7:8d:f7:
e6:5c:1c:27:29:5c:2e:95:e7:1e:33:cc:6a:f6:f5:67:d8:ff:
af:db:5c:f1:e9:9d:3c:f8:47:42:7a:e9:a0:fe:a4:63:6b:48:
9b:92:91:cf:06:b2:40:b3:60:ef:68:98:45:ae:25:81:9f:e9:
b7:5d:cc:28:f3:71:8b:24:69:20:df:b8:06:f5:17:05:0e:82:
e3:a8:46:f4:5f:e6:8b:78:fb:ac:ce:17:0b:31:00:67:d4:40:
2b:3b:ea:9c:0f:4d:eb:53:33:f0:b4:71:f3:2f:b0:7f:4e:e4:
5c:a2:61:b7:bb:90:e3:b6:d0:79:7b:c9:15:55:c4:8e:85:93:
b1:9d:db:a2:e8:a1:48:ad:4f:04:29:2f:92:e8:09:f6:2a:47:
c8:e8:fd:10:b3:4b:72:76:d5:03:36:a5:22:31:86:77:67:c7:
90:e3:d9:63:20:20:49:ba:8b:91:cd:cb:a1:52:2d:e4:e0:d5:
3d:7a:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:52:45 2025 by rpki-client