Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/631e66-b0ae-4da8-8894-1d3f028becac/1/z0W6tnIb8n6xb2AZ-9_Woa4eoP0.roa
File: z0W6tnIb8n6xb2AZ-9_Woa4eoP0.roa (raw, json)
Hash identifier: Do0d/kfcG0KxRheWCFAB+cS41wNgkGUanBjmgkkJBIA=
Subject key identifier: CF:45:BA:B6:72:1B:F2:7E:B1:6F:60:19:FB:DF:D6:A1:AE:1E:A0:FD
Certificate issuer: /CN=28471c36a6ebb1cf1a185a365546ea848858eac3
Certificate serial: 01856BF7DD8AC6E568A731A6F4DC025DE139
Authority key identifier: 28:47:1C:36:A6:EB:B1:CF:1A:18:5A:36:55:46:EA:84:88:58:EA:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEccNqbrsc8aGFo2VUbqhIhY6sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/631e66-b0ae-4da8-8894-1d3f028becac/1/z0W6tnIb8n6xb2AZ-9_Woa4eoP0.roa
Signing time: Sun 01 Jan 2023 06:14:44 +0000
ROA not before: Sun 01 Jan 2023 06:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12912
IP address blocks: 193.105.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:dd:8a:c6:e5:68:a7:31:a6:f4:dc:02:5d:e1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28471c36a6ebb1cf1a185a365546ea848858eac3
Validity
Not Before: Jan 1 06:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf45bab6721bf27eb16f6019fbdfd6a1ae1ea0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:40:81:2f:a2:2c:c6:56:0e:90:33:e0:4d:
73:df:ff:33:cf:1d:5e:9e:ad:95:39:6d:a2:10:94:
67:6b:b5:dd:43:53:02:7c:22:ca:e4:84:e2:e3:06:
84:3c:52:ae:0d:78:8c:4b:9c:3b:ac:b4:45:aa:62:
5a:f6:42:ab:05:17:7d:d1:37:05:84:43:37:83:34:
44:5e:3b:1e:00:ba:94:3c:c5:8b:5d:f3:f2:9e:5b:
4e:57:91:23:bd:4e:9f:cb:df:d8:11:15:09:b3:c3:
98:e5:e2:59:e1:d1:55:4b:69:fc:84:f2:e6:21:68:
91:36:12:ba:a3:d9:18:27:45:5b:ec:8b:76:f2:33:
12:79:32:17:40:03:3b:ec:36:73:1b:06:a4:7a:81:
53:00:a1:f9:13:7d:60:ec:23:c5:22:92:17:a7:74:
ae:4c:78:c9:5f:3b:b6:96:66:ad:d7:1b:86:ee:94:
1a:ec:d0:e9:70:06:54:89:18:43:5c:3f:11:eb:bf:
5d:42:9a:50:33:36:2e:9d:f8:7b:ca:63:09:18:4a:
aa:ad:bc:13:5b:54:21:b7:fb:fc:b1:c1:a7:2e:fd:
3e:03:16:0f:63:48:7a:0d:36:2b:92:16:f5:f0:44:
cd:cc:23:8d:23:40:97:14:b8:1b:29:dd:37:84:12:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:45:BA:B6:72:1B:F2:7E:B1:6F:60:19:FB:DF:D6:A1:AE:1E:A0:FD
X509v3 Authority Key Identifier:
keyid:28:47:1C:36:A6:EB:B1:CF:1A:18:5A:36:55:46:EA:84:88:58:EA:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEccNqbrsc8aGFo2VUbqhIhY6sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/631e66-b0ae-4da8-8894-1d3f028becac/1/z0W6tnIb8n6xb2AZ-9_Woa4eoP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/631e66-b0ae-4da8-8894-1d3f028becac/1/KEccNqbrsc8aGFo2VUbqhIhY6sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.75.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a6:ce:b4:a0:91:ce:31:2f:f5:1b:0a:72:a4:f4:41:f6:2c:
56:03:7d:24:6a:de:4c:04:b9:60:80:46:5c:97:e7:eb:72:75:
e4:1a:09:e5:9f:cd:54:fe:81:8c:c2:36:72:e2:93:29:df:d0:
a8:10:51:6f:99:9e:9d:19:f0:92:bc:c5:c5:89:62:95:3f:0a:
ef:3f:3f:c7:2f:4f:18:ce:e8:b8:31:b6:0b:49:e6:ec:13:9d:
6c:51:3f:9f:61:b1:5b:36:37:52:85:b4:dd:d9:bc:30:dd:f7:
33:66:c8:ad:8e:e2:c9:5d:3a:e6:3d:2c:47:7f:64:bc:ed:fc:
85:0b:f9:ab:a3:58:f9:df:86:89:e7:b1:49:0f:85:4b:63:f0:
7c:aa:11:72:88:9f:27:ec:98:54:58:9a:c2:4c:85:b8:12:27:
4e:4f:a4:9b:45:0d:36:6d:0c:9f:3c:c3:30:2e:55:41:33:a3:
1e:5a:85:ff:29:ec:5b:74:54:e4:13:ff:1a:2f:ef:6e:04:37:
be:b5:c2:49:98:9f:78:8a:eb:9e:ee:88:c0:1d:50:3d:3e:4f:
03:33:b1:a8:a8:63:1c:6c:45:db:72:0b:8b:c0:20:ac:df:be:
b2:5d:74:b5:20:20:bc:68:62:fb:17:55:2e:97:ff:f0:1c:0b:
32:18:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:09:35 2025 by rpki-client