Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/zzW0oiISqz8GtZ1LDC69YbNiON4.roa
File: zzW0oiISqz8GtZ1LDC69YbNiON4.roa (raw, json)
Hash identifier: qDXsu9oGWoasH8gnG9BaDFXmdIAxeKxrhPwrD6gYHG4=
Subject key identifier: CF:35:B4:A2:22:12:AB:3F:06:B5:9D:4B:0C:2E:BD:61:B3:62:38:DE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 0194258F6E033BDC980178F5F8F6541BE30C
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/zzW0oiISqz8GtZ1LDC69YbNiON4.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212774
IP address blocks: 193.46.58.0/24 maxlen: 24
193.46.59.0/24 maxlen: 24
2001:67c:478::/48 maxlen: 48
2001:67c:960::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6e:03:3b:dc:98:01:78:f5:f8:f6:54:1b:e3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf35b4a22212ab3f06b59d4b0c2ebd61b36238de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:3e:2d:c5:c7:76:16:44:51:65:41:01:13:
62:68:61:1b:5f:fc:9f:3a:0a:0c:c9:98:2a:11:fd:
3b:7b:7a:8d:38:3f:2a:12:f7:17:5d:57:f7:80:df:
d7:4c:e5:2d:38:8b:b4:b5:3d:0d:60:3c:e6:de:43:
5e:2b:8a:b5:f1:ed:d2:b8:f4:b0:80:6d:e2:4c:89:
f9:39:90:c6:98:cd:07:3c:37:bd:ba:08:cb:c1:c2:
9a:52:17:e7:31:7b:32:2d:d2:f3:a8:b6:95:5f:64:
2f:e1:3f:cf:94:af:54:ae:49:50:e3:ec:c9:b3:dd:
23:c4:43:a0:a3:75:72:a3:01:fb:17:87:01:da:21:
53:ed:3c:37:bd:7e:f4:2e:92:9b:d0:73:0e:34:db:
c5:d2:bb:76:a8:04:1e:59:b9:d8:15:fb:e1:91:60:
21:f6:a2:f8:9c:b9:96:0e:47:18:e8:02:02:f9:80:
f4:99:ab:ab:10:6b:8e:e0:f3:d2:26:9d:31:3a:f8:
d4:e1:f5:11:6a:ea:7b:a7:1a:18:29:d1:87:1f:1c:
72:5e:a8:d4:08:fa:c3:61:39:8a:a3:d6:91:0c:8e:
e3:19:30:2e:13:b3:dd:3d:95:e6:ab:1e:1e:49:22:
0c:f1:3f:71:6b:b5:75:b0:84:13:51:7c:9f:e6:1b:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:B4:A2:22:12:AB:3F:06:B5:9D:4B:0C:2E:BD:61:B3:62:38:DE
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/zzW0oiISqz8GtZ1LDC69YbNiON4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.58.0/23
IPv6:
2001:67c:478::/48
2001:67c:960::/48
Signature Algorithm: sha256WithRSAEncryption
0b:07:4c:f8:04:13:4c:44:a8:de:37:06:23:58:38:63:54:e4:
49:bb:71:10:2c:db:14:37:37:3e:11:64:3f:16:99:99:53:60:
50:e5:63:6b:62:21:fe:9c:27:45:4f:6c:07:39:3c:cf:3f:f8:
d0:72:41:9c:b0:1d:08:68:1f:3a:fb:fb:d7:e4:c1:b9:ae:37:
a7:1d:e9:fd:ca:e7:8d:b5:1f:c4:e6:74:8f:2a:61:90:86:e4:
c3:33:2b:7c:b3:8d:4e:a1:91:e3:20:e7:6d:27:0b:83:ea:f3:
82:9e:40:a3:c6:62:9e:c7:ae:3c:51:33:43:99:a4:e1:43:04:
06:61:9f:4b:63:49:e6:8f:6e:26:a5:1b:bf:a9:14:7f:d4:aa:
4c:a1:26:4b:12:e9:a2:76:6f:ac:e5:3b:40:56:57:cb:a8:df:
83:12:63:1b:01:88:34:ba:2c:cb:46:6b:1d:f5:6d:60:29:c7:
c4:b4:98:5a:83:30:1e:08:b4:4d:fa:a2:8f:95:eb:e3:f3:f3:
f4:ca:ed:8f:21:ec:8b:17:6b:9f:33:6d:8b:d4:bf:7f:f1:b3:
ab:5d:b4:ee:cf:dd:e4:84:a3:b1:15:ab:76:b3:7a:0c:11:19:
6e:8c:5b:be:bc:a1:a6:81:27:4d:6a:3c:10:50:41:0d:75:b1:
5c:25:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:37 2025 by rpki-client