Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Z9BBkLeHSVzBlVk8zJxKgvE8g-E.roa
File: Z9BBkLeHSVzBlVk8zJxKgvE8g-E.roa (raw, json)
Hash identifier: ikkYhMSrUBAePRSj+8gie6wv94Hh7fFXlEOnzQNANGw=
Subject key identifier: 67:D0:41:90:B7:87:49:5C:C1:95:59:3C:CC:9C:4A:82:F1:3C:83:E1
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD616377BE4D9D3608A53272B6B196
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Z9BBkLeHSVzBlVk8zJxKgvE8g-E.roa
Signing time: Thu 02 Jan 2025 07:49:10 +0000
ROA not before: Thu 02 Jan 2025 07:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201671
IP address blocks: 195.19.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:61:63:77:be:4d:9d:36:08:a5:32:72:b6:b1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67d04190b787495cc195593ccc9c4a82f13c83e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:ce:ae:e7:0c:a1:62:66:8f:a0:5f:3f:99:
5e:4a:0f:ec:59:83:dd:71:32:93:40:c1:fc:de:b6:
b8:e8:f7:e2:17:99:8f:86:e0:0e:42:a7:84:21:f4:
0e:11:94:80:fd:50:e8:c9:97:bc:0c:c6:b5:cf:c4:
ed:71:33:ce:83:9a:fa:92:f5:e3:1d:85:3f:4a:9a:
12:f0:61:a0:99:3a:31:89:b0:be:5e:35:5d:09:07:
fd:50:5c:e3:fc:5e:d5:27:36:9b:bb:06:c3:b7:55:
01:b1:c8:39:c3:51:f6:78:70:7f:19:3d:e4:8b:ca:
1d:e4:dc:da:70:48:83:20:a8:e8:33:47:2c:35:7f:
00:f3:03:17:a2:44:a3:cc:b9:e7:c8:10:ce:74:7f:
a6:69:a0:60:94:32:d6:fd:2c:22:21:19:4d:41:1e:
dc:81:4f:65:9e:5e:f4:f5:4e:82:c7:22:e0:8d:5f:
d1:cd:d7:40:56:b1:ae:86:0d:6a:a6:c5:18:ef:5d:
1c:c7:c1:9c:fd:40:54:f9:4d:fe:19:99:f7:29:84:
ea:8b:44:16:28:55:3b:a5:1c:fc:30:ee:6e:e9:4c:
ae:94:74:cd:28:f1:e5:48:7d:90:f9:2d:e6:08:4e:
03:7e:6f:b9:d3:00:82:46:b8:80:01:a2:c4:d6:c5:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D0:41:90:B7:87:49:5C:C1:95:59:3C:CC:9C:4A:82:F1:3C:83:E1
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Z9BBkLeHSVzBlVk8zJxKgvE8g-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.19.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:24:69:08:cc:3e:e6:53:f7:82:1f:a9:b4:c6:21:df:b4:9e:
86:e8:3b:18:b2:6f:7c:6a:13:65:83:66:1a:72:c6:8a:ef:ac:
b8:2a:19:7c:8c:f6:5c:49:3d:31:1f:ae:4d:28:53:aa:36:1e:
7c:2a:b9:c2:67:44:78:5c:4c:5b:d3:ff:b1:fd:7b:83:d8:f3:
82:05:ff:63:d7:91:58:7f:ae:7a:cd:f2:29:d2:c3:6b:a8:fb:
d1:1a:8d:d6:f3:b8:70:f1:45:6c:0b:69:ae:15:2b:4b:8c:d3:
16:3a:56:b7:ca:0e:46:32:da:2a:45:ce:d8:8a:7b:ad:2b:81:
d7:ce:b2:21:69:b1:25:35:c3:b2:a2:38:b5:5b:53:8b:ae:62:
be:56:05:97:e3:c9:af:c3:5a:4a:cb:09:67:ea:04:35:94:ba:
85:66:db:94:45:16:90:98:d1:9e:77:03:92:ca:a6:c9:c2:ab:
71:ad:bd:04:5e:3f:08:23:37:54:f3:15:09:27:76:1f:16:b3:
fd:43:07:3b:98:cf:2b:ea:b6:73:09:b2:f1:d2:17:8d:21:b9:
a4:b7:f2:0f:56:44:64:77:39:6b:ca:1b:aa:57:d7:ee:c5:ac:
72:8a:c6:f5:1e:fc:b3:3b:9b:e5:76:e3:4e:1e:38:70:3a:e6:
48:f1:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:19 2025 by rpki-client