Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/Z4U4s6npqkkGcLAYBUlzliN7I6c.roa
File: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (raw, json)
Hash identifier: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=
Subject key identifier: 67:85:38:B3:A9:E9:AA:49:06:70:B0:18:05:49:73:96:23:7B:23:A7
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 019426D94482CDD8281BF229BC691B6E7961
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/Z4U4s6npqkkGcLAYBUlzliN7I6c.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211895
IP address blocks: 193.111.32.0/24 maxlen: 24
2a0f:8cc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:44:82:cd:d8:28:1b:f2:29:bc:69:1b:6e:79:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=678538b3a9e9aa490670b01805497396237b23a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:30:f4:b7:f8:23:08:81:30:31:ca:ac:12:94:
44:bf:22:b5:31:3f:98:3e:5e:8a:76:3e:ff:40:e2:
31:45:80:61:82:bf:52:99:1c:76:97:9d:a5:91:f3:
57:be:1b:7f:ee:6e:fa:b6:ec:c7:9a:13:fc:6b:7a:
f7:47:d5:fd:c6:a1:84:f0:a9:81:9e:a6:d4:15:92:
f4:a2:be:b5:9d:80:86:9e:2d:6c:56:bd:9c:43:f5:
6a:19:9b:14:52:41:ed:08:24:7f:2c:2b:e1:e0:aa:
57:92:c5:7d:af:72:75:55:41:21:f4:d9:4d:98:29:
08:9f:c6:8b:69:e3:99:f7:96:d8:8e:d0:50:92:06:
6f:82:79:75:bf:6b:c1:ef:08:ef:58:d2:af:6c:8c:
b2:52:cc:ed:82:3f:5b:69:1b:e4:bf:83:40:a6:21:
57:31:f2:f4:38:54:35:db:0e:27:d6:2d:24:aa:de:
46:5c:fc:85:b7:32:6f:57:b5:33:f4:e5:0f:64:81:
c8:af:4b:4f:dc:71:fa:cb:d2:2a:ce:c2:c9:75:ac:
c5:3e:ff:4a:b0:6d:20:f8:96:28:ea:84:cc:bf:ba:
e7:fa:27:a4:22:3f:02:87:3d:ff:36:95:e0:71:a4:
99:fa:37:41:62:75:e3:3b:86:d2:3e:a2:2e:df:c3:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:85:38:B3:A9:E9:AA:49:06:70:B0:18:05:49:73:96:23:7B:23:A7
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/Z4U4s6npqkkGcLAYBUlzliN7I6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.32.0/24
IPv6:
2a0f:8cc0::/48
Signature Algorithm: sha256WithRSAEncryption
19:ae:5b:56:11:d5:c9:29:64:28:b8:48:e6:54:35:81:eb:e3:
aa:08:b1:fb:bc:1c:21:f9:4a:b5:a7:63:21:9a:b8:63:ef:18:
33:53:1c:4e:75:12:02:97:b1:11:af:37:fd:78:6c:e0:6e:c3:
2e:93:53:b3:37:3e:11:4e:eb:f1:ee:bf:05:84:0e:e5:fa:2f:
08:03:89:e9:c5:4c:c6:90:e1:a6:fc:8f:e5:00:03:7b:d1:53:
c9:11:7e:d4:92:0c:ca:fd:95:60:f3:f9:69:58:16:ce:ed:02:
7b:d4:ae:c4:9d:47:1f:02:e7:e1:02:83:c4:06:2a:c7:bd:52:
62:bd:97:4f:e2:71:1a:e1:5e:5a:a7:83:82:59:df:77:69:86:
44:a6:90:02:1e:30:b2:7c:97:9e:55:a3:40:6f:6e:e1:92:ca:
10:a7:43:0c:93:c9:8e:5b:db:7a:ea:01:32:b6:7f:94:dc:10:
94:1c:bd:32:a8:83:b7:bd:7f:2e:4d:0d:76:33:5f:69:b3:e1:
9d:98:ad:d6:94:44:26:38:97:fd:80:24:5f:73:3b:83:1a:f6:
2d:f7:59:1e:9f:3d:97:ea:1b:12:8c:f0:22:a2:55:17:53:75:
f9:4c:1e:d3:e3:fc:b3:ec:e0:a4:20:c9:c9:d3:06:ba:cf:ad:
ef:bb:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:47 2025 by rpki-client