Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/ZY4qRpYchOIwDm3vxXawd5eDpXc.roa
File: ZY4qRpYchOIwDm3vxXawd5eDpXc.roa (raw, json)
Hash identifier: wrBBxXbuTq+J4pce+IUDlKImgjnbDlprvI5uDeg68zA=
Subject key identifier: 65:8E:2A:46:96:1C:84:E2:30:0E:6D:EF:C5:76:B0:77:97:83:A5:77
Certificate issuer: /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial: 01942520920D5733BF10D75AAD5FB163C138
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/ZY4qRpYchOIwDm3vxXawd5eDpXc.roa
Signing time: Thu 02 Jan 2025 03:47:59 +0000
ROA not before: Thu 02 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 193.42.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:92:0d:57:33:bf:10:d7:5a:ad:5f:b1:63:c1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Validity
Not Before: Jan 2 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=658e2a46961c84e2300e6defc576b0779783a577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:f0:d8:19:d6:ac:ad:ee:50:56:94:78:9a:
e9:3b:d1:bf:59:aa:6c:80:78:09:4a:58:17:2a:2a:
a2:8e:dc:79:c8:b1:0c:20:3a:2f:4a:3e:b1:6e:99:
b5:52:01:7d:dd:d6:20:61:d0:f3:e5:88:a0:c4:34:
6e:1e:bd:cc:b5:9e:72:52:bd:79:1e:b0:5c:16:d0:
0e:0c:fc:f4:e8:46:bb:0b:01:3d:69:6a:f5:60:70:
49:0a:b9:da:dd:e2:82:a9:9c:f9:ef:dd:3e:8e:89:
ec:47:3b:b2:61:d4:2a:96:f0:c5:ca:e7:02:f5:12:
a6:07:c0:e4:76:60:27:61:31:e5:07:e0:b7:21:6f:
30:1e:af:bd:d2:71:db:a4:4b:6d:80:bc:69:d0:24:
a9:9d:9c:cb:6a:91:bf:48:f2:6d:c0:e2:8f:b4:50:
08:bc:c2:de:3e:f4:74:84:96:2a:f6:b1:ea:58:9a:
91:88:5b:87:84:58:00:b7:14:86:4d:9f:06:96:81:
7a:f6:74:1b:4c:3f:25:14:fb:7b:bc:47:23:48:c0:
4e:63:96:c7:b0:2c:40:43:5a:1e:27:63:42:dc:19:
34:10:f4:fa:f4:b2:34:a9:46:11:9e:c9:cc:52:74:
4a:d4:5c:d8:dc:3f:4f:e4:8b:50:a2:49:01:b6:1f:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8E:2A:46:96:1C:84:E2:30:0E:6D:EF:C5:76:B0:77:97:83:A5:77
X509v3 Authority Key Identifier:
keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/ZY4qRpYchOIwDm3vxXawd5eDpXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
50:06:54:d1:92:59:10:f2:0f:27:2b:70:24:26:ff:db:40:db:
38:4d:e4:83:0d:eb:21:23:4e:a1:44:64:1e:88:57:f7:2f:ae:
88:03:3b:d3:8f:0c:61:36:e0:d4:fe:c7:39:4e:a1:42:3c:10:
4a:4a:12:4c:d8:6a:47:42:ad:5c:04:e1:c8:b7:19:e3:3d:31:
12:e6:33:58:1c:d6:b2:87:97:4f:fc:02:e3:cc:b3:e4:5f:a8:
06:0b:51:69:a0:21:d6:41:fc:2a:db:dd:1f:2c:35:ef:fd:e3:
ee:1d:ab:24:ce:21:15:98:23:58:ea:1c:c8:14:7e:1b:a5:66:
76:bc:d6:21:7c:a9:f1:cc:9b:2a:7d:b7:3e:27:15:d8:f2:24:
e3:d1:ce:71:6f:24:cd:57:34:2c:1a:0f:ca:61:17:c8:08:85:
b3:06:5d:5f:a9:ef:ec:40:f1:14:90:e9:3c:b8:eb:10:0e:bf:
81:e2:2d:d6:09:07:6d:a9:76:54:dc:f5:67:eb:f8:5f:ba:72:
90:06:ac:05:b2:de:c2:05:02:e4:33:e9:e4:19:c1:21:e5:36:
c5:2c:7b:ea:22:0d:00:0a:68:74:68:b9:d3:ed:29:2a:69:37:
a9:5c:b5:99:b7:0c:9c:ea:64:97:43:fa:a0:0b:34:3a:fe:39:
10:ac:f0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:50 2025 by rpki-client