Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/szzET8_PcbYHrkv0DjCX2K6Wsnc.roa
File: szzET8_PcbYHrkv0DjCX2K6Wsnc.roa (raw, json)
Hash identifier: /zyW+8rn7EZekTQXTlSNLl868eRIf0RZNeXPcokMeG4=
Subject key identifier: B3:3C:C4:4F:CF:CF:71:B6:07:AE:4B:F4:0E:30:97:D8:AE:96:B2:77
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F1B720D5451B43FE620492FD5074B
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/szzET8_PcbYHrkv0DjCX2K6Wsnc.roa
Signing time: Thu 02 Jan 2025 05:48:43 +0000
ROA not before: Thu 02 Jan 2025 05:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44639
IP address blocks: 193.255.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1b:72:0d:54:51:b4:3f:e6:20:49:2f:d5:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b33cc44fcfcf71b607ae4bf40e3097d8ae96b277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:3b:2e:60:27:fb:7a:45:53:65:4b:c4:78:
22:1c:0d:af:22:73:d1:f2:93:e7:39:39:74:57:89:
5d:3d:0e:3f:c8:05:1d:d1:7d:fd:18:f1:e2:c0:e9:
4a:54:ff:48:81:67:fd:26:96:db:42:49:84:45:7a:
b2:2c:cf:a0:ef:6e:ba:21:12:d4:09:28:fc:b8:e4:
c4:ed:bf:ec:46:74:e4:a5:8d:1d:cb:ff:8f:32:0a:
2b:f3:8f:16:a5:79:7d:58:87:90:08:d8:57:7b:6a:
41:ba:32:2d:8c:5e:ad:62:df:56:55:d9:d3:1b:79:
dd:e6:bd:46:ac:08:fe:99:b1:cc:db:c0:f1:04:04:
3c:ba:d9:66:cf:48:68:c2:52:a4:01:17:06:c1:b4:
e0:e1:e1:81:34:53:d4:fd:64:f4:3b:3f:ac:e0:2c:
ae:f2:77:1f:ba:f6:c4:86:bf:e4:ef:ff:21:b4:01:
26:2b:3e:8f:b0:4d:b3:c5:bb:60:7a:86:e0:7f:2b:
00:52:87:04:2c:cb:02:9a:8a:18:d6:6c:bf:06:ae:
22:b9:97:7e:69:f8:f2:18:76:95:c7:13:9f:dc:dd:
d9:ad:9a:08:bd:43:06:8c:44:65:34:a9:c1:8a:08:
da:18:33:58:cb:c2:6b:b4:4e:b8:27:78:f1:86:bd:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:C4:4F:CF:CF:71:B6:07:AE:4B:F4:0E:30:97:D8:AE:96:B2:77
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/szzET8_PcbYHrkv0DjCX2K6Wsnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.120.0/22
Signature Algorithm: sha256WithRSAEncryption
02:f6:1e:7c:57:65:5e:07:d1:5a:6e:1d:e2:d4:e0:b6:8a:be:
f3:a3:8a:f2:14:84:f1:40:43:b9:78:24:a5:a5:6f:55:8c:4a:
26:5e:4f:1a:89:5f:18:1d:93:ba:02:ed:f1:a6:1e:fc:c1:56:
b9:aa:1e:80:aa:99:b6:1b:04:e3:3d:58:2a:1f:0c:a3:9c:f7:
2e:f8:75:fe:7f:2a:bd:80:8b:57:4f:21:67:48:78:db:3c:a5:
07:2d:bb:50:70:12:82:48:f1:6f:2e:9d:9c:68:21:aa:81:a0:
af:50:5e:52:01:1a:12:ec:64:92:98:7c:4d:42:d6:f3:e9:9d:
f6:95:a1:4b:bc:a5:ba:d1:22:33:38:35:69:43:9a:da:e0:6c:
8a:2a:3a:23:bc:d1:af:61:57:9a:94:15:55:e9:8c:f6:ff:b4:
c5:e2:d6:fe:fa:22:c8:55:d0:65:46:87:60:86:3a:33:78:eb:
c0:57:01:c8:a5:40:5e:5c:dd:47:19:3c:ce:fa:1a:fa:8f:f1:
01:0c:c5:48:71:f1:48:8f:be:f2:53:9e:d7:6c:17:d2:ec:f6:
0c:6b:d0:08:55:6e:d0:7c:d7:ae:dc:bb:6f:a0:80:6b:fa:98:
79:cd:8e:c1:f2:32:fc:e0:09:69:a8:ed:7f:52:e0:e5:0d:14:
a3:74:76:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:03:50 2025 by rpki-client