Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/zpGvhyYRAmjs5EUuaL_qNrktFtE.roa
File: zpGvhyYRAmjs5EUuaL_qNrktFtE.roa (raw, json)
Hash identifier: 24VotJmvmJDfDZLcY9ERb5W8a78zlapyR9WGVJQ5ABc=
Subject key identifier: CE:91:AF:87:26:11:02:68:EC:E4:45:2E:68:BF:EA:36:B9:2D:16:D1
Certificate issuer: /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial: 019426D94FD07CC4B9EEBC6939230231D505
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/zpGvhyYRAmjs5EUuaL_qNrktFtE.roa
Signing time: Thu 02 Jan 2025 11:49:23 +0000
ROA not before: Thu 02 Jan 2025 11:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 194.146.244.0/23 maxlen: 23
194.146.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4f:d0:7c:c4:b9:ee:bc:69:39:23:02:31:d5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce91af8726110268ece4452e68bfea36b92d16d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:c2:1f:54:86:c0:c7:8a:51:c9:fc:bd:d3:
66:db:5c:1e:05:93:ff:c3:27:72:af:20:8d:d2:50:
8f:77:0a:c7:ef:a0:68:0a:8f:b7:73:77:31:08:03:
20:06:ba:d3:46:ae:9a:16:8d:44:21:72:8a:7b:70:
f7:f7:c4:b6:8b:80:57:00:14:22:ee:38:25:71:6e:
9b:c1:6b:e9:28:bb:a3:fb:d5:c3:0f:4f:04:df:29:
2f:85:aa:5e:74:65:cd:ba:4c:b3:34:75:e7:6b:91:
70:3c:4e:eb:a7:df:4a:b1:18:06:89:71:0d:36:0a:
e0:3b:4d:94:37:06:68:b3:cf:8d:f4:2d:28:b0:1e:
5d:35:30:00:fb:59:8f:22:46:5d:f7:36:e2:2f:ed:
d7:2b:d2:c3:2c:59:4b:0b:30:ea:b8:07:e3:95:37:
4f:4e:7a:b1:fb:b0:a7:56:ae:68:13:e4:c6:df:16:
12:b1:e3:a5:ac:1d:38:d8:44:f7:b4:1b:15:a6:49:
2f:41:60:0b:0f:75:35:7b:a6:1a:37:1f:44:93:2a:
20:12:bd:70:72:3e:52:b3:2a:34:55:63:03:8b:9e:
86:0f:0c:e0:89:1c:5d:8e:15:bf:80:c6:89:9a:6a:
af:13:bc:7f:5e:3a:7b:a1:99:9f:48:e0:3b:5f:81:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:91:AF:87:26:11:02:68:EC:E4:45:2E:68:BF:EA:36:B9:2D:16:D1
X509v3 Authority Key Identifier:
keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/zpGvhyYRAmjs5EUuaL_qNrktFtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.244.0/22
Signature Algorithm: sha256WithRSAEncryption
93:62:62:8f:62:9b:a8:55:27:4d:ed:c4:dc:4c:65:87:da:f2:
e0:8e:4a:e4:f9:e0:eb:37:6c:cf:8c:1a:1d:15:da:1f:d4:0f:
47:67:66:a7:b4:3f:c9:15:e8:0c:bc:e9:ce:10:7d:68:57:bf:
34:6e:aa:6f:c1:a0:c8:9e:30:00:38:1d:8d:91:49:7f:e2:b5:
51:76:95:d1:26:6a:35:74:35:31:92:0a:d1:ff:d8:95:40:70:
0c:56:47:6a:13:a5:5d:df:f1:7a:b4:41:00:5f:12:4e:c5:5a:
69:85:09:90:83:b4:5f:45:b0:52:41:93:ff:33:07:37:10:d9:
d6:9c:ff:1d:86:be:7c:2a:af:46:98:81:32:fd:2d:c2:41:c4:
5d:c5:09:2c:8a:f4:bd:64:2b:e9:80:5d:a2:6e:d7:ee:82:a4:
59:ed:5b:9d:9b:f1:73:1c:27:97:71:2c:17:44:87:6e:7c:9e:
be:4b:a4:8b:a7:92:4f:32:07:cc:a4:06:a5:48:2e:75:42:22:
0b:f8:96:f4:7c:dc:cf:52:03:07:11:99:68:06:3a:36:a0:57:
7c:fd:19:54:a9:eb:7f:1e:f3:fa:f8:2c:7b:a6:1c:30:aa:e8:
dd:bf:a1:e5:c6:81:f2:07:cd:d5:f6:9b:fe:e2:c0:ee:4a:99:
59:6f:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:42 2025 by rpki-client