Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ztcq7MgX_I5Mf9eSkiHeTYGxH-A.roa
File: ztcq7MgX_I5Mf9eSkiHeTYGxH-A.roa (raw, json)
Hash identifier: +j13l1VGfPj+5268NwaEuGCABkp2T/LAu/dAXO3XSHA=
Subject key identifier: CE:D7:2A:EC:C8:17:FC:8E:4C:7F:D7:92:92:21:DE:4D:81:B1:1F:E0
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 018CC9BC0DEEF201F364DE4528448B8C311D
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ztcq7MgX_I5Mf9eSkiHeTYGxH-A.roa
Signing time: Tue 02 Jan 2024 10:33:13 +0000
ROA not before: Tue 02 Jan 2024 10:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 193.106.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0d:ee:f2:01:f3:64:de:45:28:44:8b:8c:31:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 2 10:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ced72aecc817fc8e4c7fd7929221de4d81b11fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:17:7f:a5:23:b1:1c:cf:56:50:88:41:4b:
3f:87:18:08:56:22:0a:76:a1:5a:26:73:4e:e0:8d:
e7:0e:bf:11:46:9f:3a:98:c1:4e:4b:25:af:7e:47:
c5:5a:79:a1:b4:35:90:5c:a8:de:6d:c7:13:e9:6d:
11:5d:34:98:d5:13:18:66:54:0f:ef:fa:b8:12:d7:
c9:77:be:f2:e5:ba:f8:d4:aa:31:f1:f0:73:0d:4a:
da:39:f3:64:9a:66:66:a2:c0:ec:3e:b1:f8:c9:d5:
dd:33:96:7b:6f:2f:ca:25:0a:60:3c:51:cb:e3:32:
be:db:41:fb:3a:f2:85:76:74:c5:41:54:e4:a6:2b:
71:05:62:9b:82:be:77:3a:50:0a:b9:a3:24:bc:7a:
a8:4f:1c:bb:89:d0:2b:08:0e:0e:a4:d7:35:d2:dc:
5c:8b:27:e3:2a:ea:ce:ca:f6:52:82:98:f7:9a:34:
1f:ef:cc:14:12:52:9a:3c:3c:40:a8:76:8e:ae:b4:
35:e7:ec:cf:c8:08:e7:f5:6e:87:d4:79:12:96:8e:
c4:f9:57:37:f1:95:b9:b6:af:9c:8a:59:32:6e:93:
4d:2a:da:94:82:0b:ec:c4:4e:f6:96:7f:ee:00:e4:
50:8a:5b:7b:a0:eb:85:c6:ca:c5:a4:1e:c8:7d:d7:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D7:2A:EC:C8:17:FC:8E:4C:7F:D7:92:92:21:DE:4D:81:B1:1F:E0
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ztcq7MgX_I5Mf9eSkiHeTYGxH-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.197.0/24
Signature Algorithm: sha256WithRSAEncryption
17:38:cc:b2:f9:b2:33:41:51:43:61:b3:27:3a:71:48:5d:40:
90:42:04:f2:9f:f2:ca:76:7f:96:ae:c3:81:17:89:9d:99:44:
e8:39:28:ca:31:88:fa:8e:c8:b1:dc:df:87:6d:8c:8d:f3:38:
70:18:b7:12:a3:e7:5d:e7:3e:cf:50:ff:ed:ed:d7:ba:9d:25:
d2:be:c2:4a:75:66:41:ad:5b:47:2f:c1:75:e5:57:e6:9e:b5:
45:23:c2:03:8d:40:40:41:88:07:b9:bd:62:86:05:47:c1:70:
6a:f6:6e:71:ea:bd:78:3a:8e:40:91:f9:c6:59:85:b4:d5:c1:
ed:86:9d:25:c3:95:a4:33:fe:be:ca:55:5b:79:cc:48:78:21:
0a:3b:ca:5f:5b:f2:82:25:22:f4:05:91:ca:f1:11:76:a7:38:
6b:71:97:0d:da:5a:73:15:bc:19:88:63:9f:ba:13:33:da:b9:
b8:26:73:54:07:e3:d0:f7:34:d4:f1:51:22:16:ef:d1:29:7f:
30:b4:cb:64:c8:e3:f5:f9:f2:c3:a6:f6:6f:01:4e:81:6e:5e:
cc:2d:f0:ea:8c:19:42:53:5e:b2:a8:14:29:34:cd:83:46:0c:
56:1f:46:a9:d9:4d:06:62:fa:91:7b:bd:96:5f:83:10:1c:3b:
48:91:4b:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvA3u8gHzZN5FKESLjDEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjQwMTAyMTAzMzEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWQ3MmFlY2M4MTdmYzhlNGM3ZmQ3OTI5MjIxZGU0ZDgxYjExZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOEXf6UjsRzPVlCIQUs/hxgIViIK
dqFaJnNO4I3nDr8RRp86mMFOSyWvfkfFWnmhtDWQXKjebccT6W0RXTSY1RMYZlQP
7/q4EtfJd77y5br41Kox8fBzDUraOfNkmmZmosDsPrH4ydXdM5Z7by/KJQpgPFHL
4zK+20H7OvKFdnTFQVTkpitxBWKbgr53OlAKuaMkvHqoTxy7idArCA4OpNc10txc
iyfjKurOyvZSgpj3mjQf78wUElKaPDxAqHaOrrQ15+zPyAjn9W6H1HkSlo7E+Vc3
8ZW5tq+cilkybpNNKtqUggvsxE72ln/uAORQilt7oOuFxsrFpB7Ifdc5kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7XKuzIF/yOTH/XkpIh3k2BsR/gMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvenRjcTdNZ1hfSTVNZjllU2tpSGVUWUd4SC1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWrFMA0G
CSqGSIb3DQEBCwUAA4IBAQAXOMyy+bIzQVFDYbMnOnFIXUCQQgTyn/LKdn+WrsOB
F4mdmUToOSjKMYj6jsix3N+HbYyN8zhwGLcSo+dd5z7PUP/t7de6nSXSvsJKdWZB
rVtHL8F15VfmnrVFI8IDjUBAQYgHub1ihgVHwXBq9m5x6r14Oo5AkfnGWYW01cHt
hp0lw5WkM/6+ylVbecxIeCEKO8pfW/KCJSL0BZHK8RF2pzhrcZcN2lpzFbwZiGOf
uhMz2rm4JnNUB+PQ9zTU8VEiFu/RKX8wtMtkyOP1+fLDpvZvAU6Bbl7MLfDqjBlC
U16yqBQpNM2DRgxWH0ap2U0GYvqRe72WX4MQHDtIkUuA
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:09 2025 by rpki-client