Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/z_DYGAISByZ4EYZLcYZm9xxTsPA.roa
File: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (raw, json)
Hash identifier: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=
Subject key identifier: CF:F0:D8:18:02:12:07:26:78:11:86:4B:71:86:66:F7:1C:53:B0:F0
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 01941F8C17963CC84579B79D5ED939BC36A3
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/z_DYGAISByZ4EYZLcYZm9xxTsPA.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12933
IP address blocks: 193.41.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:17:96:3c:c8:45:79:b7:9d:5e:d9:39:bc:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cff0d818021207267811864b718666f71c53b0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:4c:4d:db:c8:43:44:c6:53:73:23:94:90:
04:0e:3a:5f:99:c0:70:af:70:3f:d9:84:27:21:74:
3b:fe:63:5f:27:a2:8b:86:05:2f:09:bc:f3:5b:67:
63:cf:fc:70:b3:8a:a8:88:d1:20:93:b9:49:08:f2:
2f:f8:38:d6:0c:be:c8:c9:fb:7e:2d:12:bc:61:cc:
47:7d:88:0e:66:8b:50:17:9f:23:16:30:df:cc:cb:
4b:cb:0f:77:52:40:4f:e5:17:e5:6f:53:a9:e3:63:
9d:b9:58:0b:d9:61:f6:83:96:8f:fa:06:b5:86:30:
32:54:ac:66:aa:e0:b8:bd:14:f3:03:58:72:95:01:
7d:12:8e:57:8b:27:8f:3d:c8:1d:e2:5a:87:46:31:
1d:22:d0:43:51:a3:fb:bb:c5:23:a6:ea:17:a4:1e:
50:93:b5:4f:c0:54:17:2e:d2:ae:a0:08:2f:62:79:
fd:e7:3c:22:35:e7:63:4a:c0:a4:9d:d3:3c:69:b7:
73:f3:1a:ac:69:ef:6d:87:a8:75:4f:1e:41:2a:f2:
3a:53:98:91:7c:1e:f4:43:35:77:e7:7b:4e:f1:f6:
45:26:9c:e6:6b:5d:1a:f1:66:8d:68:27:94:39:15:
c3:79:cb:82:37:81:ec:ff:6b:fa:ae:ad:a7:8d:16:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F0:D8:18:02:12:07:26:78:11:86:4B:71:86:66:F7:1C:53:B0:F0
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/z_DYGAISByZ4EYZLcYZm9xxTsPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.80.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3f:e2:0c:05:c1:e2:c5:a5:4a:52:d2:f4:f1:e4:13:db:20:
8d:6a:0c:a8:5f:5e:f8:32:45:c9:3d:3b:38:f6:dc:0b:c5:f3:
01:d0:27:56:f0:02:4b:14:d8:49:29:23:d9:58:c7:f2:13:c6:
f0:4b:a6:d1:81:1f:fa:bb:b0:ce:78:10:d3:9a:f3:9d:23:cf:
30:df:34:38:c1:45:6b:38:a3:dc:19:bd:4f:2d:ca:04:2e:32:
72:24:70:1f:69:28:14:79:d0:42:09:b2:45:5c:e9:77:41:b7:
d1:32:7c:d0:4e:53:7e:9a:26:65:d8:81:d3:ba:ce:c7:17:da:
4b:86:1a:f3:d6:01:d7:e4:b2:f7:bc:d9:1f:42:c0:01:19:f7:
ca:90:91:9d:9b:af:9b:44:fd:db:35:89:fc:06:cf:b1:31:97:
e7:45:81:e2:e3:9c:0c:fe:a4:96:65:30:f5:f8:12:55:41:22:
16:e1:08:f4:a7:53:bb:eb:7d:f6:03:13:b2:67:6b:3b:5f:d7:
a7:a7:65:c2:75:08:3d:56:54:b6:3b:78:e7:6e:a4:4a:6a:d1:
04:07:ad:bb:29:b9:81:4c:95:ca:a6:04:80:31:4a:c2:9c:13:
9c:1a:0f:5d:06:7e:78:cb:c8:fd:d3:b6:63:e3:11:8e:f4:da:
f0:69:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:26 2025 by rpki-client