Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/zlfSgIKTSd0B25zILoq2yKE-9HI.roa
File: zlfSgIKTSd0B25zILoq2yKE-9HI.roa (raw, json)
Hash identifier: Upbi6agJDPWpN7TLiRzvO2mpjIGOoijENF25SQ5Jizo=
Subject key identifier: CE:57:D2:80:82:93:49:DD:01:DB:9C:C8:2E:8A:B6:C8:A1:3E:F4:72
Certificate issuer: /CN=58a68af51f23d30901b07c97754b28e92db5435e
Certificate serial: 018BED39ABC56ABC491E2D1CF14DB622467E
Authority key identifier: 58:A6:8A:F5:1F:23:D3:09:01:B0:7C:97:75:4B:28:E9:2D:B5:43:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaK9R8j0wkBsHyXdUso6S21Q14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/zlfSgIKTSd0B25zILoq2yKE-9HI.roa
Signing time: Mon 20 Nov 2023 14:54:21 +0000
ROA not before: Mon 20 Nov 2023 14:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56798
IP address blocks: 193.17.33.0/24 maxlen: 24
2a10:d440:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:39:ab:c5:6a:bc:49:1e:2d:1c:f1:4d:b6:22:46:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a68af51f23d30901b07c97754b28e92db5435e
Validity
Not Before: Nov 20 14:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce57d280829349dd01db9cc82e8ab6c8a13ef472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:ce:d3:77:7d:a9:73:37:91:6b:67:f9:16:
15:3e:57:2e:ca:a8:54:2d:81:d0:53:88:62:dd:9c:
82:3d:56:bb:96:6a:6b:6d:23:c2:42:75:f1:2e:51:
b9:c2:af:a0:2e:95:bc:e5:d3:2d:27:02:ee:5d:a7:
c8:10:43:0b:c4:eb:27:52:65:35:7f:9b:c7:78:9e:
44:f5:5d:b6:4b:43:3c:02:2b:19:65:5d:66:29:35:
d8:f1:55:84:82:2f:c1:b1:b4:bb:cc:86:0f:2c:a8:
7e:0d:ca:03:ee:04:44:d4:c7:56:1b:bc:06:80:e7:
a6:7a:7e:f3:a8:ad:c2:d3:0c:06:ed:46:5e:e0:94:
3c:ec:23:35:b9:18:90:9e:15:aa:5d:b9:c1:3a:a1:
c5:00:e1:ae:ae:3b:9c:9b:29:ca:19:7f:00:e9:d2:
e3:49:4d:38:72:6e:92:77:5c:6e:be:c3:ac:51:6a:
90:0e:4f:17:50:c3:5a:b1:81:dd:8f:d9:6b:db:17:
ea:47:67:88:c8:99:4f:7d:2f:59:90:87:2d:0e:41:
41:69:1d:33:e1:7d:a9:f1:80:a0:1c:b9:62:67:b0:
db:6e:f3:6e:50:57:75:3e:aa:72:c3:52:3a:e3:6e:
9e:d5:a2:96:53:bd:28:5b:1e:7f:0e:f2:4d:a2:08:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:57:D2:80:82:93:49:DD:01:DB:9C:C8:2E:8A:B6:C8:A1:3E:F4:72
X509v3 Authority Key Identifier:
keyid:58:A6:8A:F5:1F:23:D3:09:01:B0:7C:97:75:4B:28:E9:2D:B5:43:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaK9R8j0wkBsHyXdUso6S21Q14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/zlfSgIKTSd0B25zILoq2yKE-9HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/WKaK9R8j0wkBsHyXdUso6S21Q14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.33.0/24
IPv6:
2a10:d440:2::/48
Signature Algorithm: sha256WithRSAEncryption
69:80:59:df:1c:31:c1:7c:36:f6:23:8d:4c:07:56:6b:96:69:
df:3b:8b:d3:61:0e:83:bc:ec:1f:9f:9b:fd:6e:27:eb:aa:e9:
8d:a0:05:bf:7d:84:ae:c7:b2:8b:5e:2d:66:28:6f:76:56:7f:
0e:e6:f0:4a:29:40:44:7d:18:8a:64:13:6e:b6:65:fb:cf:9e:
22:29:a9:4a:d8:f9:d8:e9:be:18:3e:a3:43:e4:9b:fc:1e:67:
2f:ac:fc:82:53:fb:d4:3f:0c:ca:67:0e:26:73:8c:69:8a:6c:
f8:ab:46:a3:a2:4a:38:5e:a3:0e:8e:83:d5:bf:8d:e9:ee:d3:
de:d5:7c:f9:4a:0f:39:0a:60:d9:ec:90:75:8c:0d:87:c6:e7:
08:de:51:bc:36:ba:db:a0:92:71:7d:8b:e1:5b:06:91:67:56:
ca:b1:69:f7:5f:bb:02:4e:f1:89:76:4d:7d:96:49:91:0b:44:
17:cd:96:22:e0:f6:60:07:a3:84:b8:60:29:3d:fe:39:ab:7d:
12:32:b4:95:5a:69:4a:ad:d8:1d:56:36:f6:c3:a1:11:0f:39:
94:fe:ec:bd:16:5b:cf:e1:b1:c1:17:25:60:1c:83:89:d9:fe:
fb:d5:37:17:fa:fe:d9:99:35:a2:23:69:7a:87:94:48:28:e7:
bb:ef:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:53 2025 by rpki-client