Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa
File: z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa (raw, json)
Hash identifier: Z5tMUZHaMA8Bu87tPX511k88Z6BiQWZ5tSalbDOuIEw=
Subject key identifier: CF:5D:F5:B8:A1:75:26:97:3A:12:90:77:90:01:D8:45:13:3B:5C:84
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 01942444C0901F43346B0EA694FE75D3C274
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21093
IP address blocks: 193.57.106.0/24 maxlen: 24
193.57.107.0/24 maxlen: 24
193.57.109.0/24 maxlen: 24
193.57.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c0:90:1f:43:34:6b:0e:a6:94:fe:75:d3:c2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf5df5b8a17526973a1290779001d845133b5c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:62:2b:49:5d:cd:5d:b8:01:7f:70:af:29:
9f:5f:97:fc:0c:35:98:b1:6b:1d:68:8e:4e:23:4d:
08:22:c3:88:33:3a:22:59:19:43:01:5f:66:8c:25:
81:a7:39:55:32:69:df:63:1a:42:02:b7:02:3e:eb:
50:23:67:8f:b8:36:f5:62:7f:3d:dd:27:55:52:4d:
55:0b:37:65:4e:3d:35:39:be:e5:76:a8:f9:7b:18:
ad:2c:e2:47:b3:74:88:51:47:fc:6b:86:e6:04:0f:
44:90:c3:63:f8:ea:0b:a9:56:85:02:dd:03:3b:08:
6c:8c:67:01:96:81:27:bf:88:3c:d4:7c:a3:b9:4b:
8e:12:72:97:c5:0f:fe:de:c2:ef:c2:25:56:78:f7:
a6:87:e8:4b:c3:40:6e:6f:70:2e:45:67:6c:5d:ef:
98:53:ca:53:37:42:ea:d2:ac:92:e9:33:85:41:ef:
2f:c4:a4:dc:2a:7c:54:83:71:68:e4:bc:e8:58:e1:
b4:f7:78:11:db:98:c8:98:a2:d8:ad:0b:27:36:4f:
7f:23:2c:de:26:09:9b:cd:d0:34:cb:d2:36:e6:14:
59:0e:09:8d:f1:24:dd:2a:e2:ac:fb:f6:11:6e:21:
ae:32:e1:4c:aa:c1:b8:d1:91:4d:88:e6:41:d3:3c:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5D:F5:B8:A1:75:26:97:3A:12:90:77:90:01:D8:45:13:3B:5C:84
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.106.0/23
193.57.109.0-193.57.110.255
Signature Algorithm: sha256WithRSAEncryption
9a:79:53:d5:24:7a:37:c6:2d:1a:d7:4b:c0:ce:7b:cc:8d:13:
a8:95:9c:e4:c6:ec:45:1c:fb:4d:c7:4c:26:d3:ad:d7:5c:35:
c0:3d:c1:a4:6c:b0:49:18:6b:86:11:9b:76:23:d8:de:fb:e6:
24:a2:a7:ec:66:9d:d3:1f:06:2b:65:a0:88:9b:fe:46:67:ba:
a1:41:3a:4a:d0:51:34:59:46:43:b7:d7:99:9d:a0:1a:80:d6:
85:d2:b1:52:6c:9d:04:70:28:59:c0:14:03:02:0c:0a:60:fe:
e6:73:9f:1f:4d:37:ee:a6:85:c7:11:cd:d8:f1:c0:b4:91:ff:
45:88:7b:cb:ef:52:76:ca:14:d1:b9:32:79:41:be:ee:48:dc:
9c:41:f1:3b:fa:23:fe:5f:63:06:b0:3a:af:e7:e6:2b:5d:4d:
28:ce:c3:aa:e2:4e:9d:0d:22:f8:fc:79:39:a5:04:71:6d:d7:
0b:46:fe:cc:d9:3d:cc:98:1d:19:f0:43:06:96:ef:7d:19:b2:
99:43:47:29:51:7b:11:ea:50:1b:56:3a:1a:a0:75:8d:4d:24:
93:fe:a7:14:d6:f6:10:ef:66:87:f4:cc:08:dc:9e:89:22:1d:
1a:a8:78:63:09:7e:0f:06:6a:8d:d0:e2:8c:7b:a6:c2:df:87:
04:a2:5e:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:14 2025 by rpki-client