Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/zYPJ24zFX66OHilXwknyZd30Fq4.roa
File: zYPJ24zFX66OHilXwknyZd30Fq4.roa (raw, json)
Hash identifier: QhFwqx5XVuRaZW8OOaKkTSrVKW+VtQrD+XgCGeDkR9E=
Subject key identifier: CD:83:C9:DB:8C:C5:5F:AE:8E:1E:29:57:C2:49:F2:65:DD:F4:16:AE
Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Certificate serial: 019423690FAAED0777373458FC7DF69C8566
Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/zYPJ24zFX66OHilXwknyZd30Fq4.roa
Signing time: Wed 01 Jan 2025 19:47:55 +0000
ROA not before: Wed 01 Jan 2025 19:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 193.241.241.0/24 maxlen: 24
193.241.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0f:aa:ed:07:77:37:34:58:fc:7d:f6:9c:85:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Validity
Not Before: Jan 1 19:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd83c9db8cc55fae8e1e2957c249f265ddf416ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:fe:22:b1:29:c9:6b:65:2d:93:da:8a:67:
96:6a:41:32:9a:26:c1:51:7c:7d:9c:9b:ab:cd:50:
d6:4a:d6:2a:cd:cc:ad:5e:43:cd:bb:2f:73:c8:30:
7b:1d:6a:bc:93:1b:2a:f0:ba:cc:4b:a9:79:9f:74:
59:2e:2c:1e:3c:11:65:d6:d6:c7:18:c8:0e:e8:27:
d6:0e:4c:f6:61:27:a5:a4:19:61:60:ca:15:9f:16:
b5:82:80:a2:06:cb:b7:b7:50:ce:28:29:47:bc:0c:
c2:b6:d2:e5:99:b0:ab:9f:1e:e5:df:69:b8:cc:71:
e7:13:13:98:02:8d:3e:6e:c6:e0:24:e7:e8:38:bf:
a8:e9:a5:dc:48:f2:07:11:22:7e:b4:c3:b7:63:64:
59:03:fd:34:79:9e:b0:e1:a3:42:2a:b6:8b:70:d6:
37:84:31:c1:ba:f0:66:ab:c6:73:a6:cf:bc:55:fa:
dd:b9:f0:2b:08:eb:f4:6a:eb:a2:14:59:ad:7b:f6:
af:7b:4f:fa:01:24:44:32:e9:39:6c:7e:5a:56:e5:
ed:b1:6a:90:20:a9:59:07:54:be:16:e2:ad:b3:70:
20:8c:d7:1a:a2:35:92:b6:7c:5a:c0:32:54:c8:ad:
e7:ad:41:a6:36:39:f4:de:57:b4:85:92:8a:76:d9:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:C9:DB:8C:C5:5F:AE:8E:1E:29:57:C2:49:F2:65:DD:F4:16:AE
X509v3 Authority Key Identifier:
keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/zYPJ24zFX66OHilXwknyZd30Fq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.241.241.0/24
193.241.249.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d7:df:6d:c7:a8:5c:8b:cd:03:73:6e:8a:38:6a:e0:b9:c6:
9b:83:51:12:a2:9b:70:8f:b2:83:61:17:95:97:af:9f:e8:52:
78:9e:6e:8c:15:e6:c0:b6:eb:87:ba:15:68:c9:2b:38:96:34:
1a:fd:96:c8:6e:d9:3b:5c:5a:a3:a6:6c:49:e8:2d:dc:98:5a:
5f:37:04:c2:bb:81:54:f9:b6:f2:34:84:99:46:a7:69:dc:05:
e6:c9:7b:33:62:7d:c6:33:3d:d1:ed:39:79:2b:af:ad:17:be:
d1:4b:35:fb:1a:45:f7:18:8a:80:8d:74:8c:5b:4a:5a:39:7f:
9e:a4:3f:d8:fd:89:07:f7:2f:2a:88:e8:54:88:83:7c:fd:24:
49:99:28:f2:ed:b9:66:62:73:3a:0b:96:30:3e:f9:fb:c6:53:
d4:19:d1:e0:fe:2f:5e:7b:f1:91:a9:f1:46:eb:ec:d1:f9:b9:
21:ca:df:05:b2:7e:19:a4:29:eb:29:20:b8:da:8e:0d:e3:eb:
a2:7a:fc:8c:3e:54:ca:03:e6:8c:12:0f:b7:5d:6b:27:11:58:
fe:f8:5d:62:d1:d9:d8:9b:b2:7c:db:a2:59:85:fd:10:e8:ba:
f7:5a:f2:51:b1:56:05:92:6e:5e:af:a6:a8:24:9a:90:aa:0c:
7b:b9:de:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:26:03 2025 by rpki-client