Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/EZ-qAG3dRSrRRx3mKhOOsjfisSg.roa
File: EZ-qAG3dRSrRRx3mKhOOsjfisSg.roa (raw, json)
Hash identifier: x2Dmi+4smxCxvQZjFz/Vf1NND+S31iKqxyrBOvRmF00=
Subject key identifier: 11:9F:AA:00:6D:DD:45:2A:D1:47:1D:E6:2A:13:8E:B2:37:E2:B1:28
Certificate issuer: /CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Certificate serial: 019427473B6DCA9AA8765E0BEAC726E21ECD
Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/EZ-qAG3dRSrRRx3mKhOOsjfisSg.roa
Signing time: Thu 02 Jan 2025 13:49:27 +0000
ROA not before: Thu 02 Jan 2025 13:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57821
IP address blocks: 193.160.39.0/24 maxlen: 24
2001:67c:26f4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:3b:6d:ca:9a:a8:76:5e:0b:ea:c7:26:e2:1e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Validity
Not Before: Jan 2 13:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=119faa006ddd452ad1471de62a138eb237e2b128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:3a:a1:06:1b:26:a6:9e:da:ab:71:7c:2e:
b6:da:c6:f3:1e:c6:9f:7d:c3:a3:94:fe:d4:c4:3e:
a6:1e:96:ab:21:fb:ff:ce:30:b6:b6:24:8c:6a:13:
64:8d:11:ae:2b:42:5b:f1:f6:a3:c2:5f:2f:4c:ad:
50:23:4e:a6:12:b5:93:6b:0d:62:78:f6:db:4e:ab:
d8:69:a7:ba:1f:1a:49:ca:0a:9e:b2:77:39:57:df:
e6:78:12:aa:66:b8:a5:9f:ed:a2:0f:6d:47:77:3c:
a7:14:bd:05:b7:5b:cf:ce:89:fc:a8:31:69:20:7e:
51:5f:11:b3:f3:4c:5f:67:25:62:ae:0d:1e:be:3b:
9f:b9:5a:f6:fd:ef:57:9f:7a:1e:4d:b8:1d:a1:1d:
2a:74:44:16:5d:58:09:1d:35:cf:fe:c1:1f:40:89:
9c:72:85:ef:33:7e:7c:89:a8:ee:cf:f6:18:57:fb:
cc:ff:4e:06:22:28:86:b5:e4:40:96:82:91:7f:8a:
ff:92:9b:eb:e9:21:f6:d5:01:4b:0c:3e:70:dc:d7:
f9:6d:56:09:68:45:92:7a:b3:84:0c:cd:66:04:e5:
7d:d8:22:03:a4:13:fc:be:c0:67:3f:56:24:b6:89:
25:90:59:31:ae:87:28:2b:ea:1a:bb:91:1e:d2:3e:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9F:AA:00:6D:DD:45:2A:D1:47:1D:E6:2A:13:8E:B2:37:E2:B1:28
X509v3 Authority Key Identifier:
keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/EZ-qAG3dRSrRRx3mKhOOsjfisSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.39.0/24
IPv6:
2001:67c:26f4::/48
Signature Algorithm: sha256WithRSAEncryption
a3:71:70:f9:21:45:8f:9b:2c:3e:5f:93:94:0e:77:97:0f:3a:
50:ec:4e:02:34:41:95:ae:4e:c1:f8:93:a7:67:d3:d1:c9:c2:
80:f3:af:cc:15:7d:b4:25:9a:b3:7a:fd:2a:44:65:a8:60:80:
6d:46:f6:0b:5d:e3:6d:a3:ab:92:c2:11:d4:99:41:53:d3:cd:
ff:f2:5b:43:60:cc:04:d4:1c:5f:02:5a:d9:99:1a:21:91:63:
b5:40:49:7f:2b:ee:bb:6d:a0:a2:c9:ea:3a:4e:17:0b:ec:99:
a6:26:c1:00:2b:a8:91:cf:5d:6c:f6:aa:9a:9a:2a:b7:8b:35:
fd:23:f8:50:85:a6:d2:9e:5b:cc:a4:3e:34:cc:8a:f8:8b:94:
17:80:82:0c:3d:3c:75:e0:bf:d5:56:13:01:bf:3c:83:26:7e:
1e:ed:e2:3c:b5:a5:92:1c:98:02:ed:81:bb:87:cd:d8:7f:0c:
6f:36:72:08:62:9a:7b:25:c8:0d:84:63:c5:e0:07:2e:22:6d:
03:44:3c:c7:e0:35:39:6d:ae:d0:8a:da:b6:9a:9c:97:4a:2f:
78:b1:d0:f7:72:f7:4f:66:c5:cb:af:85:b1:11:3e:ee:68:d8:
66:79:2b:c1:74:e1:31:da:fd:d0:18:0b:3c:34:0b:24:80:ed:
87:ac:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:55:14 2025 by rpki-client