Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zg4G9Al7ef2rgqcn_nM4kp9NKaI.roa
File: zg4G9Al7ef2rgqcn_nM4kp9NKaI.roa (raw, json)
Hash identifier: YDgq8a39d8LckxrdlKsf3y4bYTg9xyEVGHD8tb4DwoI=
Subject key identifier: CE:0E:06:F4:09:7B:79:FD:AB:82:A7:27:FE:73:38:92:9F:4D:29:A2
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 0194991B3C54328CE6033C65EFFACEE23EAE
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zg4G9Al7ef2rgqcn_nM4kp9NKaI.roa
Signing time: Fri 24 Jan 2025 16:18:06 +0000
ROA not before: Fri 24 Jan 2025 16:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59832
IP address blocks: 193.59.104.0/22 maxlen: 24
193.59.104.0/23 maxlen: 23
193.59.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:1b:3c:54:32:8c:e6:03:3c:65:ef:fa:ce:e2:3e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 24 16:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce0e06f4097b79fdab82a727fe7338929f4d29a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:4a:93:1a:43:51:e0:98:70:a1:3f:83:ca:
60:4b:80:aa:02:f8:df:d9:dd:48:8c:ca:62:3c:7f:
e0:ff:bd:56:93:cd:2d:95:d7:64:86:b8:fd:f7:b4:
81:a1:f2:d5:95:9a:d0:ea:ff:70:c2:0c:54:ea:8c:
30:dc:00:3e:32:ce:cc:9d:ed:d9:e4:b0:5d:35:96:
1b:05:2f:2d:a0:98:d7:bc:9c:76:b5:0e:c9:25:39:
61:02:0d:c9:75:be:70:7f:bb:67:f7:f8:81:c1:cf:
b4:e4:1a:b4:d3:f7:83:b2:48:91:30:03:eb:3f:6b:
ba:ba:a4:33:e1:1f:7d:0f:73:33:74:2f:92:67:26:
ea:41:1a:fc:68:49:47:c8:15:0e:8b:9a:5d:c1:b0:
27:28:e7:eb:8a:a1:21:f6:42:eb:cb:40:a8:5d:67:
13:01:8f:ff:73:8d:76:d0:77:fb:bb:2f:95:06:50:
6e:6a:c9:82:f6:91:3e:df:19:61:a4:a7:e9:71:79:
91:62:79:27:5c:63:21:95:36:3e:4d:a7:61:5b:70:
84:4c:b7:41:99:35:1a:87:a0:21:33:53:7b:1a:ec:
6d:af:2c:75:08:3e:43:ba:6f:03:63:1a:06:e6:00:
5d:f1:22:9b:1b:b3:81:6d:79:e5:e0:14:1a:34:6b:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0E:06:F4:09:7B:79:FD:AB:82:A7:27:FE:73:38:92:9F:4D:29:A2
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zg4G9Al7ef2rgqcn_nM4kp9NKaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.104.0/22
193.59.111.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7d:f5:77:cf:d2:46:51:ae:52:12:e9:99:2e:32:5a:a1:32:
a1:d7:8f:68:b0:99:35:8d:7c:22:6d:8b:4a:4d:c3:f7:b6:59:
85:6e:0f:b6:99:38:a8:8c:ea:18:16:c4:3e:04:44:b6:6e:be:
1c:ca:3e:68:64:ce:68:c0:c6:94:da:c3:de:6a:c4:4f:0e:23:
28:94:ba:1f:4f:74:39:f7:bd:cc:8d:f1:8c:8b:40:c6:46:cb:
fe:28:21:d9:4f:d2:c4:e1:01:d8:6c:0c:07:40:94:33:c2:72:
66:de:47:e9:aa:1b:33:c6:3e:18:f4:f6:32:c8:39:df:a2:02:
71:1c:34:cf:b0:da:6d:7d:17:4f:ee:b9:1c:e9:02:83:0b:4b:
71:c5:5c:ff:39:9a:38:6c:aa:ba:e5:3e:17:6c:d2:c8:75:fd:
30:34:e8:41:43:b1:99:08:4e:6f:92:9b:10:96:0d:57:e1:41:
e2:04:44:aa:91:15:a3:36:17:33:00:e0:ee:90:bd:a3:bd:48:
e5:a8:c7:ae:4c:3b:cf:b5:0b:9d:c2:d8:66:90:76:50:29:25:
39:b5:8c:8d:3d:5f:a5:9c:01:92:09:54:da:dd:94:1a:05:b0:
91:69:f4:82:41:be:ff:5e:35:e9:f4:11:55:e0:37:76:6a:ce:
d2:17:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:18 2025 by rpki-client