Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/zIqL-e-xuHByBuNpYQeVAN56dIk.roa
File: zIqL-e-xuHByBuNpYQeVAN56dIk.roa (raw, json)
Hash identifier: DfRfhMBFYRjS89naokHSrKzYfuZi0JN2/uXaKrvL2KE=
Subject key identifier: CC:8A:8B:F9:EF:B1:B8:70:72:06:E3:69:61:07:95:00:DE:7A:74:89
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01942444F56598C909EE6FA2C587F21CA5BB
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/zIqL-e-xuHByBuNpYQeVAN56dIk.roa
Signing time: Wed 01 Jan 2025 23:48:06 +0000
ROA not before: Wed 01 Jan 2025 23:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200964
IP address blocks: 193.226.197.0/24 maxlen: 24
193.226.235.0/24 maxlen: 24
195.184.5.0/24 maxlen: 24
195.184.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f5:65:98:c9:09:ee:6f:a2:c5:87:f2:1c:a5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 23:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc8a8bf9efb1b8707206e36961079500de7a7489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:b4:d5:91:46:9b:66:08:ea:fd:65:cc:ff:
ca:cb:95:13:7a:c6:ff:61:16:6c:74:2b:d9:19:4e:
37:8c:c2:98:48:17:00:ca:5b:40:4d:0c:30:e9:d8:
54:81:33:24:98:fe:78:7b:b5:b4:be:ab:f7:27:5c:
1a:33:28:cb:97:f3:e4:b0:a1:64:18:2d:6b:fe:85:
85:a0:24:bc:1c:8a:72:1d:26:ba:fb:2a:c8:fe:cf:
c7:71:22:75:b8:fd:bd:47:2e:f6:07:c2:17:39:f8:
1b:15:f4:9e:62:c3:96:9d:59:c8:ed:f5:a6:0a:01:
a8:5c:cb:50:1b:fc:1f:b2:86:3c:e6:ee:b9:ea:d8:
b6:a9:00:5b:d4:59:97:52:e0:31:b6:64:e6:2a:94:
06:6d:94:81:62:48:44:ad:7d:57:5f:60:35:20:fa:
cb:b5:13:3f:11:b7:02:8b:ee:91:12:bc:a1:1d:12:
4c:4e:4d:1e:17:74:8a:ec:30:53:9e:f9:42:17:a1:
cf:d6:00:b9:67:d3:93:fb:b1:78:e3:6c:60:4a:01:
47:a3:ee:09:66:cd:ab:43:27:77:5b:01:79:dd:7a:
08:46:35:07:5d:f2:94:fb:ae:d0:d4:c4:d3:25:c8:
67:fd:98:d3:05:8b:8e:10:96:f6:d6:99:32:18:31:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8A:8B:F9:EF:B1:B8:70:72:06:E3:69:61:07:95:00:DE:7A:74:89
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/zIqL-e-xuHByBuNpYQeVAN56dIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.197.0/24
193.226.235.0/24
195.184.5.0/24
195.184.8.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b4:58:02:f5:c4:75:08:58:4e:67:56:fb:34:1f:a4:ff:69:
40:a9:c4:78:34:37:25:f1:0d:39:60:5f:40:7d:92:94:ea:80:
d6:cc:4c:1e:ba:a1:12:72:1c:9a:be:70:11:79:d4:9f:1d:83:
d9:8a:4d:24:df:9c:53:dd:92:4b:98:ea:1a:21:e5:8b:39:1e:
3c:79:36:87:37:f9:e3:5a:84:85:88:cd:54:ef:ab:e1:77:e9:
ba:c6:a8:de:62:2c:7d:d7:9c:25:7b:d0:10:f5:e6:73:df:68:
3b:74:d1:d3:94:73:bb:6c:ad:50:6b:aa:4f:6d:31:5a:b8:5b:
00:12:7a:7f:fe:c2:30:67:53:08:82:40:03:f5:9c:0f:46:bb:
ec:a7:f5:f6:8b:01:29:42:e0:9b:35:a8:a2:f7:1f:e5:e4:39:
2c:f8:67:c5:be:6f:13:f0:c6:65:8e:83:db:d4:a5:c6:af:6a:
2a:6f:13:42:c4:3d:fc:ec:df:03:bb:ec:10:47:e0:8e:f9:d9:
46:98:96:bd:a8:c5:55:73:45:1b:20:c2:fb:d3:49:4d:e8:aa:
51:f3:71:4a:84:2f:a4:03:2d:4a:b3:14:37:47:b3:2b:0d:7a:
14:ca:85:3d:37:1b:43:86:3c:84:5f:09:68:7e:b1:de:18:bc:
0e:c3:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:29 2025 by rpki-client