Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/zw-ZWQy_mAw4lR9zWUNxAD2nh8M.roa
File: zw-ZWQy_mAw4lR9zWUNxAD2nh8M.roa (raw, json)
Hash identifier: EzyagHrqLBNuryN8Wil1h309BdHFC40Q3jovmBtoozk=
Subject key identifier: CF:0F:99:59:0C:BF:98:0C:38:95:1F:73:59:43:71:00:3D:A7:87:C3
Certificate issuer: /CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
Certificate serial: 018572C374239E780A37127BF2ED07114CFB
Authority key identifier: CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/zw-ZWQy_mAw4lR9zWUNxAD2nh8M.roa
Signing time: Mon 02 Jan 2023 13:54:49 +0000
ROA not before: Mon 02 Jan 2023 13:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 193.57.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:74:23:9e:78:0a:37:12:7b:f2:ed:07:11:4c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
Validity
Not Before: Jan 2 13:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf0f99590cbf980c38951f73594371003da787c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:ba:b8:1e:de:5d:0f:db:ea:9c:48:6e:c2:
f5:92:54:2b:b9:d0:f4:5f:79:8f:b4:e9:ad:5b:5d:
ee:41:00:14:c3:8f:d4:fc:b7:51:37:95:4a:38:a7:
70:10:16:7e:82:7e:d4:f9:27:b1:42:2b:40:8f:2e:
d3:a6:0b:07:83:fe:0b:ad:d0:ff:a5:e9:79:14:38:
fe:a7:dc:27:a6:da:d8:3a:37:03:1f:b0:de:89:58:
e4:c8:01:f1:1d:86:3d:05:84:da:2a:a1:bb:58:3a:
7b:69:0a:4e:d8:17:a7:c6:eb:79:e6:a3:16:90:2e:
3b:45:4c:5e:37:6d:20:64:85:e6:07:8e:3e:1c:e9:
65:71:74:33:4a:43:12:4b:3f:e9:99:d6:a7:6e:43:
7c:c0:70:d4:ea:ca:86:cf:f4:0f:b1:1b:c8:e6:04:
d6:e8:15:05:cb:f8:f3:ec:c2:1e:82:c7:16:be:67:
1d:11:d0:5f:1a:77:ff:0b:d4:b5:46:b6:ac:a0:37:
84:97:3e:ff:80:78:57:9d:c1:9e:05:94:76:dc:8f:
d0:d3:a4:c7:24:6b:de:16:90:6c:9e:ca:3a:f2:ba:
23:48:28:fe:f1:f3:c8:b6:d6:2e:f0:3f:66:84:fc:
e5:45:7b:02:4c:0a:5a:cc:17:ff:48:1d:0a:8a:2f:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0F:99:59:0C:BF:98:0C:38:95:1F:73:59:43:71:00:3D:A7:87:C3
X509v3 Authority Key Identifier:
keyid:CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/zw-ZWQy_mAw4lR9zWUNxAD2nh8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:84:2d:08:93:9e:2f:1a:00:1c:49:90:5c:c2:fa:2a:bc:32:
3d:68:7e:cf:5d:29:7b:37:db:34:1c:d3:0a:64:1e:91:66:ae:
d6:72:40:a6:9b:bf:5a:6a:14:e8:0c:df:fc:37:99:5a:cb:84:
1b:e8:06:20:c5:c9:21:95:f8:4b:c7:f3:f1:09:db:4f:88:39:
b9:d3:c1:1e:ac:c5:d5:65:c8:0c:a2:aa:d2:46:66:30:ab:a8:
e8:1a:5e:6f:79:39:37:ce:9f:7b:4e:c9:4c:36:a5:cc:4b:cd:
b9:0c:11:ee:a6:1e:14:45:a1:4a:b1:4d:6b:b1:91:e1:33:80:
61:4e:13:8f:3e:81:25:fb:1f:9e:17:79:12:41:3c:a9:7f:f8:
1d:5c:2d:e1:c3:3c:86:fa:e6:84:d7:6c:8f:17:36:73:f9:72:
de:89:a3:d0:d7:96:a9:30:a5:74:5c:7e:20:25:44:3a:e1:9b:
12:fb:57:6e:0a:2f:45:1f:c2:8c:5e:08:6d:1a:12:d9:4c:97:
29:60:f5:7d:f0:e1:5d:83:e9:7d:9b:96:d4:5b:f3:aa:d1:82:
6a:20:e9:f4:e4:fc:5a:05:63:b6:cd:38:2a:5b:e2:66:a2:02:
34:14:aa:a7:6c:02:a3:66:5a:36:fa:80:93:08:81:ca:37:d4:
5b:7e:19:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:12 2025 by rpki-client