Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/0CzKrrdUvnNWtnCdr4geJQUloCY.roa
File: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (raw, json)
Hash identifier: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=
Subject key identifier: D0:2C:CA:AE:B7:54:BE:73:56:B6:70:9D:AF:88:1E:25:05:25:A0:26
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 01941FFA068C8DF304FEF0191254DE26D6C3
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/0CzKrrdUvnNWtnCdr4geJQUloCY.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 193.42.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:06:8c:8d:f3:04:fe:f0:19:12:54:de:26:d6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d02ccaaeb754be7356b6709daf881e250525a026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:32:93:9d:45:aa:48:a6:b5:57:31:1c:82:5a:
4e:dc:8f:27:a2:1f:c2:20:2f:84:ca:f5:30:d2:43:
3b:f3:75:4d:00:b8:01:f7:d2:72:b4:7a:cc:59:76:
1e:4a:8a:3c:b3:f0:f5:87:ea:06:26:49:8a:2f:e5:
22:0d:2f:64:10:91:5a:10:d9:cd:eb:e6:87:dc:47:
34:9c:c8:1e:f6:bd:e5:91:00:f7:69:0a:1f:e6:1e:
10:63:66:3d:c1:7d:19:06:dc:81:a2:96:b1:be:81:
dc:a6:db:19:22:ac:82:4e:f6:5f:de:65:9c:df:2c:
5a:f6:a0:34:27:fb:cc:7c:4e:d9:36:91:18:9a:32:
cb:05:12:81:3c:ee:8b:4a:bb:d2:2c:5c:bb:7a:f4:
bf:6d:4a:13:d0:8d:fa:9e:73:e6:be:0f:e1:0d:af:
30:2c:d0:ce:5c:7a:c0:62:95:93:f5:e2:aa:c2:fa:
84:e9:06:8b:ae:55:dc:91:6c:85:ae:e2:93:04:a0:
34:b6:ba:1a:45:f8:31:aa:a3:eb:34:45:19:73:da:
39:49:c9:42:0b:9f:6a:01:f7:9e:b7:9e:81:2d:14:
8c:cc:ab:cc:40:4e:c4:b0:47:17:90:98:0e:ca:8b:
48:1b:f2:51:3c:83:39:a6:d5:ab:4a:d7:61:b3:cd:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:CA:AE:B7:54:BE:73:56:B6:70:9D:AF:88:1E:25:05:25:A0:26
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/0CzKrrdUvnNWtnCdr4geJQUloCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:65:54:32:50:96:90:ea:47:a1:a7:13:df:9d:26:90:67:cc:
7c:3f:f2:5d:d1:f7:a0:f8:9b:61:9e:3a:20:a6:42:a0:62:4c:
a9:1e:13:8f:96:11:f9:e3:27:5c:6b:3a:28:6e:76:f0:b7:e9:
5f:48:06:4e:b9:05:ec:f9:26:3c:0d:1d:b6:61:89:32:8a:f1:
e5:77:50:67:b3:3a:54:f8:07:aa:50:75:56:32:07:9a:c5:6e:
73:95:85:f0:93:3c:4b:70:97:a3:b5:92:70:9f:f1:e8:92:fb:
56:d4:99:f5:e2:a0:e1:f3:7d:af:8d:06:52:ad:a3:03:be:40:
5b:7d:94:58:e5:dd:25:69:9e:91:92:21:c5:d7:e6:40:68:15:
e4:39:e3:3d:35:ed:42:a6:79:a1:09:e5:73:c9:42:50:da:fa:
b6:ed:59:ab:0f:33:54:17:6c:68:54:ae:cf:78:6e:0b:be:b8:
6a:81:4d:c9:f6:51:08:74:04:a2:de:dd:8e:a2:bf:e4:9f:22:
1d:ae:b7:25:d7:3e:e0:27:9e:e9:79:52:78:fb:ae:ba:55:a1:
02:c5:b3:dc:c5:b6:6d:22:d0:1d:0e:c6:70:b1:60:10:ee:0b:
87:ef:48:2e:59:81:a7:d4:69:3b:ed:3f:a2:1b:06:e4:98:a4:
97:82:a7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:31 2025 by rpki-client