Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/zOMJ2bNz6oiuzV5tC57NtsVPDbs.roa
File: zOMJ2bNz6oiuzV5tC57NtsVPDbs.roa (raw, json)
Hash identifier: 2OLiDRwFLXJZr13fqXlf4Qo7bLYAPF1apwC0bVbkMtY=
Subject key identifier: CC:E3:09:D9:B3:73:EA:88:AE:CD:5E:6D:0B:9E:CD:B6:C5:4F:0D:BB
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 018C306D59BE15457346222FEA1F181C7412
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/zOMJ2bNz6oiuzV5tC57NtsVPDbs.roa
Signing time: Sun 03 Dec 2023 16:05:21 +0000
ROA not before: Sun 03 Dec 2023 16:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:6d:59:be:15:45:73:46:22:2f:ea:1f:18:1c:74:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Dec 3 16:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cce309d9b373ea88aecd5e6d0b9ecdb6c54f0dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:2b:b0:aa:4c:68:ab:75:f2:66:f3:4c:f5:
3a:1f:93:42:46:87:51:d7:8a:61:ad:d9:90:4b:d0:
f0:67:34:3f:48:9c:3e:7b:0b:bd:24:f2:c1:76:d7:
65:f6:45:c4:db:fd:b8:2d:69:90:c1:1c:16:e8:54:
fe:b1:57:f9:90:1e:06:22:88:90:27:0b:f5:53:c2:
4a:e4:6b:81:2e:af:c2:18:13:db:0a:63:13:0d:c9:
c4:92:fe:5c:19:ad:cb:56:1b:c7:aa:17:6a:d9:24:
21:9c:48:d5:20:ca:66:ca:5e:71:b2:6b:bb:33:58:
09:1a:da:8f:66:09:71:36:91:12:a3:4a:f9:e5:b5:
b2:3d:49:29:f7:c9:4f:4a:2a:90:2a:fb:ea:07:44:
3b:66:a1:37:b8:59:7f:1f:53:1e:6e:28:bc:18:4d:
15:1a:f5:8f:4a:95:b7:22:70:78:78:d8:98:25:4d:
57:48:bc:cc:62:55:e4:3d:fd:06:4e:fd:6c:ae:ce:
24:a3:06:fd:ba:d4:e6:b5:db:a5:1e:9b:91:e6:19:
87:0b:f8:3b:30:78:dd:4c:1e:b0:f0:e3:de:55:21:
72:03:e1:4d:9e:d3:f6:28:b8:89:44:67:dd:96:e7:
97:4e:bd:34:13:8f:f3:f5:7a:68:ed:62:3a:46:e7:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E3:09:D9:B3:73:EA:88:AE:CD:5E:6D:0B:9E:CD:B6:C5:4F:0D:BB
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/zOMJ2bNz6oiuzV5tC57NtsVPDbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fc:3c:5a:8d:17:6d:c3:35:6a:08:24:6d:36:b9:6c:b9:b2:
06:2e:1e:bb:4c:d2:98:e3:58:10:da:15:a5:cd:b5:db:05:73:
de:57:65:56:7c:1f:be:15:00:c5:09:09:32:63:d0:88:2b:33:
f3:76:92:98:65:be:fe:0e:d1:ae:15:7d:12:15:94:32:96:39:
07:ce:d1:fd:30:ed:a3:b7:15:8d:10:6c:a3:9b:a9:d1:19:40:
2a:e1:77:21:a2:c2:f0:70:9e:c8:d0:75:7b:f3:69:d8:d5:0a:
ee:5c:79:ac:f5:19:94:93:d1:3d:fa:c4:17:50:61:4f:c2:9b:
24:dd:77:0e:08:71:0a:8b:19:21:5a:58:b5:49:09:88:43:f0:
0f:a9:d9:7a:31:75:ac:42:ee:f6:f7:dc:ef:2c:ab:b5:2c:d5:
88:bf:f3:5d:23:7d:ac:cf:15:7b:ad:1e:7d:f1:9e:2a:ce:d2:
d7:14:a6:0c:64:d1:c5:d7:05:b7:33:95:60:1e:ad:36:16:29:
a7:c6:d1:a6:a5:a0:0b:65:6d:5a:8b:6a:39:05:bc:5d:8e:5a:
4d:3b:22:e4:87:29:09:20:de:90:a5:3e:1c:91:65:78:af:ce:
0e:8d:f7:44:b4:48:c0:8f:60:e2:b3:c3:8b:1b:7d:1d:57:ea:
f7:c8:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:13 2025 by rpki-client