Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/z9W-SXWXNvPf50hBoKJTZsS-x88.roa
File: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (raw, json)
Hash identifier: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=
Subject key identifier: CF:D5:BE:49:75:97:36:F3:DF:E7:48:41:A0:A2:53:66:C4:BE:C7:CF
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 019424457B32786E1284DDA5E2629BB31E98
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/z9W-SXWXNvPf50hBoKJTZsS-x88.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 195.182.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7b:32:78:6e:12:84:dd:a5:e2:62:9b:b3:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfd5be49759736f3dfe74841a0a25366c4bec7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:f9:c4:8d:24:0d:55:91:0e:23:c5:0d:b6:
c4:2e:df:96:3e:43:05:84:a4:8f:5c:c1:ca:3b:bf:
65:56:2f:46:17:57:f1:7f:73:47:c0:23:b8:d5:f2:
a0:50:1b:17:9a:a2:a1:f0:b0:0d:47:7b:2d:ab:c2:
92:c9:36:92:ef:af:1e:2b:43:ef:cc:21:22:bb:bc:
31:8a:aa:0c:c7:d4:5c:d6:b3:a8:b7:bb:5c:ff:26:
03:87:62:5e:75:61:d2:b8:8a:5c:a1:60:b0:1c:ad:
d2:ad:be:3f:6c:ff:34:f0:24:45:95:58:df:19:28:
52:ac:a7:21:22:b8:48:65:f2:55:6e:7f:6b:0b:d7:
02:d8:39:33:31:09:5a:3e:bb:cc:d2:9f:c4:fa:ab:
37:8d:bb:c6:50:ad:52:75:c4:40:2c:d6:d4:a2:2a:
48:ac:87:b1:de:40:c4:76:7d:50:62:7b:ba:eb:bc:
54:5a:18:b8:ac:14:33:21:93:1d:c9:d1:7c:95:4e:
0a:78:eb:bb:dc:04:e9:f9:74:9c:75:4b:c6:d7:f3:
2b:18:a4:0e:0e:36:16:48:78:6a:66:bc:dd:0e:96:
9e:bd:37:b8:89:db:de:96:25:79:59:79:7f:89:c0:
6f:39:e0:e1:94:eb:28:59:6e:87:fc:82:a3:05:9c:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D5:BE:49:75:97:36:F3:DF:E7:48:41:A0:A2:53:66:C4:BE:C7:CF
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/z9W-SXWXNvPf50hBoKJTZsS-x88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d9:8e:2c:bf:d9:07:64:16:25:dd:9e:37:ba:11:73:de:c3:
61:e1:c2:ed:81:22:fd:59:e9:40:ec:04:e3:24:d1:1a:1b:a1:
8c:5b:0a:5d:d3:b0:6c:f3:96:85:7a:4a:df:05:3b:8c:8e:b7:
00:95:b1:f8:40:cc:1d:62:7f:24:ae:59:da:4a:80:1f:c3:e0:
75:f4:58:f4:0e:9f:a8:f6:bd:33:d2:d8:a8:14:03:07:12:54:
06:68:1e:e7:53:fb:cd:33:c8:97:87:01:dc:46:f2:54:ef:66:
15:06:68:f2:2f:d6:bd:fe:65:b7:f2:84:fa:d5:ee:fc:5c:31:
66:54:ed:62:79:1b:ca:9e:8b:13:3d:0a:3b:a5:a2:70:35:18:
b6:b6:b9:19:3e:65:e9:38:f5:a2:83:5f:da:20:42:c7:18:bd:
6a:4b:6f:98:01:e5:7a:40:ce:fa:20:10:48:23:bf:00:d5:fa:
7a:90:47:f2:d8:11:fb:87:c5:ab:79:48:5a:2e:5a:8e:c8:59:
cb:f3:cc:29:d1:33:91:6d:1e:78:a6:43:e1:3a:ff:e5:65:16:
c3:ed:ae:1b:4f:3a:45:da:4d:cd:dc:b2:f0:bf:0c:49:18:40:
47:f6:ca:00:8f:ab:e9:f7:70:a8:f0:fc:f3:a6:4a:91:9d:34:
02:0e:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:12:22 2025 by rpki-client