Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/zuxfhazkw5A2wUx6_S2GEVHOFH0.roa
File: zuxfhazkw5A2wUx6_S2GEVHOFH0.roa (raw, json)
Hash identifier: 2S2LWvnGAr/ZohzIcOjiYOYePYl9ZaqVuuPNKMqicns=
Subject key identifier: CE:EC:5F:85:AC:E4:C3:90:36:C1:4C:7A:FD:2D:86:11:51:CE:14:7D
Certificate issuer: /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial: 01942444834AB26F0B342850644A50F4E375
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/zuxfhazkw5A2wUx6_S2GEVHOFH0.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49009
IP address blocks: 193.96.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:83:4a:b2:6f:0b:34:28:50:64:4a:50:f4:e3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceec5f85ace4c39036c14c7afd2d861151ce147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:62:36:6c:ee:cd:1d:4b:32:20:18:14:d1:
13:a4:d3:e1:83:21:7e:26:2d:40:e9:5d:84:0e:91:
e1:62:9f:9a:25:d0:bc:93:49:6d:c0:c4:c8:00:88:
38:d7:76:cf:42:19:62:3e:a6:3a:59:f9:40:99:45:
d2:c6:14:81:3e:75:8c:f6:17:9e:cb:36:ce:a2:a6:
f4:1f:38:6d:38:ce:7a:ff:b6:c8:31:59:71:6c:53:
83:c1:94:35:72:29:6a:b1:21:98:18:74:1e:f5:c5:
d0:f2:0f:22:1b:9f:d3:b0:a7:c4:5c:19:ac:d4:8f:
02:36:dc:ae:da:c3:fe:00:4f:16:9f:b5:15:f3:c2:
b0:71:9b:ee:e9:7c:e8:b0:cf:70:95:55:6f:72:cd:
c6:e5:27:d6:09:b7:b4:7e:86:50:f4:27:77:7d:50:
e0:63:1a:38:c3:24:a7:71:4e:72:11:f6:a7:96:a8:
3e:6e:fe:86:f1:17:d0:b5:ae:2d:7e:fc:b8:70:87:
2d:ee:1a:19:21:af:4f:02:7f:13:9a:f3:97:cd:b8:
77:e5:52:93:d9:fc:f4:31:37:f7:08:12:df:56:a6:
ca:b5:1f:7e:e8:13:54:a3:bf:f1:83:07:51:29:9d:
17:fb:8c:42:08:4a:5d:f9:13:71:15:63:7f:2d:23:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:5F:85:AC:E4:C3:90:36:C1:4C:7A:FD:2D:86:11:51:CE:14:7D
X509v3 Authority Key Identifier:
keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/zuxfhazkw5A2wUx6_S2GEVHOFH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:24:e8:6f:5b:15:08:52:bf:37:fd:73:56:a0:2e:51:0e:31:
90:84:23:bd:83:2b:e4:56:5b:00:5b:98:73:6f:a4:bc:58:2a:
b9:01:f7:53:2a:57:3b:c3:84:6d:72:46:41:6d:2a:df:be:b0:
b8:04:37:fb:ce:8b:62:c7:13:93:bb:15:4a:20:88:0b:09:90:
72:95:e3:a7:01:d9:32:b0:a5:4d:1a:19:50:51:48:b3:dc:64:
be:56:ae:78:1a:cc:39:f7:74:f5:9d:6b:cb:15:77:89:d4:d1:
eb:cb:c6:f7:b8:22:2c:44:bd:cf:ba:21:be:72:23:2b:57:cf:
75:e2:e8:3e:17:43:84:0f:7c:ac:ea:f0:4e:4f:21:61:bf:23:
14:8f:cd:1d:fb:b6:e2:31:29:90:97:b0:14:45:41:f2:d0:09:
b5:99:0b:51:82:d2:60:f3:1f:70:ba:e3:5d:29:7e:93:50:cd:
77:75:9d:07:4c:58:f6:ec:42:b1:e5:ff:fe:4c:c5:37:25:e8:
a9:e3:c4:7f:22:3c:f6:1d:15:64:ec:4b:dd:dc:29:fe:7a:01:
64:de:6e:14:c9:76:be:77:a2:9c:83:be:2d:f5:22:83:0a:d2:
32:b7:1f:03:f0:7d:29:55:ca:51:81:8c:65:20:1a:39:aa:0e:
84:89:0e:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRINKsm8LNChQZEpQ9ON1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZDg4MGU4ODcwNzdmYWQ4MmI3NGM5OTgwMTBmYTliMjUz
ZTBlYTgwHhcNMjUwMTAxMjM0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWVjNWY4NWFjZTRjMzkwMzZjMTRjN2FmZDJkODYxMTUxY2UxNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ihiNmzuzR1LMiAYFNETpNPhgyF+
Ji1A6V2EDpHhYp+aJdC8k0ltwMTIAIg413bPQhliPqY6WflAmUXSxhSBPnWM9hee
yzbOoqb0HzhtOM56/7bIMVlxbFODwZQ1cilqsSGYGHQe9cXQ8g8iG5/TsKfEXBms
1I8CNtyu2sP+AE8Wn7UV88KwcZvu6XzosM9wlVVvcs3G5SfWCbe0foZQ9Cd3fVDg
Yxo4wySncU5yEfanlqg+bv6G8RfQta4tfvy4cIct7hoZIa9PAn8TmvOXzbh35VKT
2fz0MTf3CBLfVqbKtR9+6BNUo7/xgwdRKZ0X+4xCCEpd+RNxFWN/LSPzZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7sX4Ws5MOQNsFMev0thhFRzhR9MB8GA1UdIwQY
MBaAFOnYgOiHB3+tgrdMmYAQ+pslPg6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYt
ZmFjZjQ4NTg2MjQ5LzEvenV4Zmhhemt3NUEyd1V4Nl9TMkdFVkhPRkgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYtZmFjZjQ4NTg2MjQ5
LzEvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWDgMA0G
CSqGSIb3DQEBCwUAA4IBAQBbJOhvWxUIUr83/XNWoC5RDjGQhCO9gyvkVlsAW5hz
b6S8WCq5AfdTKlc7w4RtckZBbSrfvrC4BDf7zotixxOTuxVKIIgLCZByleOnAdky
sKVNGhlQUUiz3GS+Vq54Gsw593T1nWvLFXeJ1NHry8b3uCIsRL3PuiG+ciMrV891
4ug+F0OED3ys6vBOTyFhvyMUj80d+7biMSmQl7AURUHy0Am1mQtRgtJg8x9wuuNd
KX6TUM13dZ0HTFj27EKx5f/+TMU3Jeip48R/Ijz2HRVk7Evd3Cn+egFk3m4UyXa+
d6Kcg74t9SKDCtIytx8D8H0pVcpRgYxlIBo5qg6EiQ7k
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:51 2025 by rpki-client