Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa
File: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (raw, json)
Hash identifier: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=
Subject key identifier: 67:21:AE:70:F4:8F:3B:23:34:3F:96:FF:0D:A5:17:BE:EC:D6:50:E1
Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial: 0194221F4AE5D922AC423FF863892B4D658D
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa
Signing time: Wed 01 Jan 2025 13:47:43 +0000
ROA not before: Wed 01 Jan 2025 13:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20572
IP address blocks: 193.108.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:4a:e5:d9:22:ac:42:3f:f8:63:89:2b:4d:65:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Validity
Not Before: Jan 1 13:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6721ae70f48f3b23343f96ff0da517beecd650e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:c5:ea:39:1f:9f:9b:f4:0f:d0:b0:6f:7f:
99:cf:84:98:a4:5c:0d:c4:9f:d3:18:33:bb:e7:bf:
f5:fd:0f:63:12:49:ff:5d:cf:94:16:b8:93:ed:cd:
1c:d1:e7:47:17:6c:ad:51:ea:5e:8e:99:eb:54:39:
81:1a:ca:c3:1f:02:23:84:99:49:c1:41:58:5d:71:
be:84:60:31:aa:11:28:60:b4:42:89:3a:08:83:58:
68:bf:3e:5b:44:2a:c6:91:b6:c8:cf:dd:9a:1f:5c:
6f:c9:d3:7a:6e:dd:01:77:9e:6a:89:3b:5c:39:c7:
66:68:e5:0a:16:47:fc:3e:e1:29:72:ab:c0:94:c7:
37:20:e3:ec:e3:db:31:d1:6a:dd:f8:8d:d1:70:82:
d0:9a:f0:35:66:00:2e:8e:84:45:e9:58:8f:99:2c:
31:8f:25:2f:33:18:6a:2b:7f:3f:04:96:64:9b:9c:
10:90:51:24:af:ca:73:3d:ed:4b:36:ba:04:25:15:
f4:41:dc:c1:aa:5f:86:f5:b7:b9:3f:a2:16:ad:22:
d0:b8:24:a7:d6:cc:50:4b:4c:34:0e:06:fc:83:af:
0b:be:e0:fe:65:d6:0d:ea:07:59:91:c6:fd:04:46:
e6:71:38:2d:96:1b:5c:77:c8:ea:09:16:ce:e5:62:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:AE:70:F4:8F:3B:23:34:3F:96:FF:0D:A5:17:BE:EC:D6:50:E1
X509v3 Authority Key Identifier:
keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.184.0/24
Signature Algorithm: sha256WithRSAEncryption
af:50:e5:bf:75:fd:64:4e:b4:fd:9b:73:f6:04:b2:b2:22:78:
bb:6e:a7:95:39:fc:8a:ee:70:bd:b1:87:0a:89:ea:d0:dc:fe:
24:57:a5:59:a2:4c:83:58:d7:be:a3:ee:90:94:fc:43:d5:40:
4e:f7:87:6b:1e:67:60:5d:7e:bc:ea:1f:2a:b8:70:43:df:0d:
e8:94:cc:3f:25:3b:22:0a:4b:e3:f9:37:7f:e6:66:57:8f:09:
d6:f8:50:77:9a:78:24:54:70:a5:d4:e9:30:24:69:5a:ac:1c:
9e:26:69:8e:b2:fa:a5:17:80:51:1c:dd:38:a0:a1:e3:fe:95:
e5:c7:9f:ec:16:6b:bc:95:ec:36:1f:78:84:72:a1:f5:d5:f0:
76:a1:8b:82:6e:a9:db:63:63:e3:10:10:a5:39:48:e6:08:42:
a8:5d:ea:0e:e4:59:78:aa:59:cd:2d:ea:3e:04:6f:88:d1:f8:
7c:2c:24:42:e7:41:f8:db:5e:40:4f:a0:da:2c:bd:fc:b0:77:
f0:f5:2b:00:1f:66:a9:1d:c8:c4:07:74:ce:9b:ee:94:08:1a:
76:e6:b4:f3:3e:0b:cd:92:d0:5a:42:63:af:1f:d7:fb:9d:44:
e0:58:b8:f4:06:a7:a7:b3:dd:a4:44:ea:45:be:22:29:20:74:
96:ed:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:44 2025 by rpki-client