Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/zavgzNemz0PuzWJnrL1r_g_mOeM.roa
File: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (raw, json)
Hash identifier: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=
Subject key identifier: CD:AB:E0:CC:D7:A6:CF:43:EE:CD:62:67:AC:BD:6B:FE:0F:E6:39:E3
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0194258F81636761C2589874DF8ECC440F22
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/zavgzNemz0PuzWJnrL1r_g_mOeM.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5761
IP address blocks: 193.46.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:81:63:67:61:c2:58:98:74:df:8e:cc:44:0f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdabe0ccd7a6cf43eecd6267acbd6bfe0fe639e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:b9:56:b2:5f:f8:b1:dc:20:cb:b6:cc:51:
51:4b:d1:f1:88:c2:57:3c:2b:76:24:2f:87:5c:90:
91:c9:71:e2:33:16:e3:30:d4:c0:b8:2c:7d:64:a8:
a2:36:81:57:96:e5:86:2c:bc:76:1d:6f:26:5a:28:
6b:96:87:70:41:c4:7e:86:79:58:ed:8b:75:04:6d:
aa:03:6c:65:df:f7:9d:d2:32:a5:84:22:eb:8e:88:
8d:33:68:fd:02:91:b5:9f:cb:4e:c6:43:35:41:4d:
2d:6d:5d:53:38:c9:41:71:40:da:ee:e1:59:fd:d6:
26:db:ac:8d:90:00:7e:f1:7a:d2:78:41:72:0a:0f:
25:57:04:35:ad:e8:b8:4c:49:07:cc:ea:7f:2e:9a:
d9:12:b7:21:bc:1d:f1:56:d8:cd:1f:d8:81:63:5d:
2b:03:61:31:cb:99:df:09:77:94:4d:7a:a4:6f:66:
7e:9b:a6:d1:2a:c5:13:88:d4:0f:db:2b:65:e1:0d:
7e:fd:cf:d2:7c:75:4a:14:a4:fe:30:ec:49:54:2c:
42:a3:7c:8d:c6:d0:f7:61:80:c1:9b:79:29:3d:a1:
50:74:2c:c2:f9:79:b0:76:91:bb:0d:6e:99:48:2a:
d3:44:00:92:9d:7d:79:d6:92:37:18:e5:11:12:93:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:E0:CC:D7:A6:CF:43:EE:CD:62:67:AC:BD:6B:FE:0F:E6:39:E3
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/zavgzNemz0PuzWJnrL1r_g_mOeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.249.0/24
Signature Algorithm: sha256WithRSAEncryption
85:be:61:89:f5:4b:0a:5d:71:6b:5a:8c:6e:01:24:82:77:0b:
72:43:c9:06:29:2a:09:a3:fb:c5:bf:0e:57:34:30:e2:71:4e:
5a:03:cb:f7:6d:83:16:00:a7:e7:cf:d4:10:a0:30:ae:90:93:
50:e1:76:b3:03:2c:98:6b:c5:89:80:f8:35:a1:d2:ed:28:7a:
1c:d9:72:a5:c3:f7:a8:70:aa:ba:f2:99:83:af:52:19:31:74:
4d:34:a4:49:06:f6:65:96:e0:f5:28:0e:b2:0a:16:3e:fe:f5:
29:f5:42:d8:79:e8:bd:9e:95:7d:fb:e1:88:4b:71:c4:d1:a9:
f6:39:98:2e:04:e1:d2:6d:7b:2f:0b:b3:6d:59:f7:34:d4:89:
ba:c6:1e:db:1f:57:92:13:a2:06:c4:cb:40:fb:63:89:8b:e6:
a9:87:93:50:2e:5f:b5:af:93:4b:5d:30:5c:b6:80:d9:fe:e5:
65:8d:66:5f:ec:41:ab:a1:6f:bf:9f:c2:8b:4a:c6:0f:5b:df:
ad:e8:fe:e0:cf:78:97:40:42:ee:b5:bc:a3:01:67:3b:ab:bc:
51:ea:53:93:fb:81:d2:d8:ba:6a:9a:8b:03:28:dc:67:48:c4:
50:a1:ab:80:da:92:f7:0a:c5:12:5e:65:23:2f:9e:36:0b:b1:
54:e9:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:18 2025 by rpki-client