Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/zGkJmZBhpVrvOWyVcYm7_dlNt8w.roa
File: zGkJmZBhpVrvOWyVcYm7_dlNt8w.roa (raw, json)
Hash identifier: mEVV3OWetxdaHpLD/GBaSo18YAHD3LmZNlmiKPXVBkw=
Subject key identifier: CC:69:09:99:90:61:A5:5A:EF:39:6C:95:71:89:BB:FD:D9:4D:B7:CC
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A46B7BB40FFDAF3940D6AF50A74B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/zGkJmZBhpVrvOWyVcYm7_dlNt8w.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 193.107.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a4:6b:7b:b4:0f:fd:af:39:40:d6:af:50:a7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc6909999061a55aef396c957189bbfdd94db7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:5b:1d:6a:f9:ac:ab:2b:99:bf:9c:41:6b:
14:17:01:09:d5:ec:43:1c:5d:14:f2:e2:8b:44:0d:
ab:02:05:af:79:49:df:34:9b:9c:32:24:99:98:a7:
08:79:d3:22:96:14:94:8f:b1:70:1c:2e:44:12:fe:
60:0f:3c:bc:e3:9c:33:35:73:4e:5f:1b:c1:3e:d4:
d1:6f:00:7e:cd:b8:81:01:fe:5e:5e:eb:6a:32:a6:
22:03:46:fa:0f:7f:ab:0b:a4:53:63:28:9a:c7:95:
6e:00:bb:32:e2:2d:b1:c2:09:7c:08:58:15:42:f2:
77:8a:61:68:55:1f:fb:53:56:d1:8e:15:d2:7c:fb:
74:65:e9:b5:4a:60:e8:75:01:47:ac:05:23:3d:d6:
fb:4a:ba:af:11:30:66:71:96:45:65:41:77:be:eb:
ec:55:26:e0:55:9d:51:af:c8:94:c5:95:13:42:4f:
d1:b9:58:26:f6:59:b4:67:c0:fc:cf:e9:24:cf:6f:
d2:b3:ee:4f:ee:cf:f1:d3:f1:76:ac:d0:ec:79:a5:
83:b3:bb:1c:56:bc:4e:79:be:2a:8e:ce:67:2a:01:
c1:b5:17:41:d9:0c:c5:1b:06:e2:07:76:8f:04:8b:
f1:38:9f:88:f5:25:bc:2a:ad:e8:67:8b:dc:ee:d9:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:69:09:99:90:61:A5:5A:EF:39:6C:95:71:89:BB:FD:D9:4D:B7:CC
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/zGkJmZBhpVrvOWyVcYm7_dlNt8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.216.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8e:00:ec:91:a0:ea:ea:7b:b4:73:a7:d5:2c:58:47:8e:56:
a6:40:ab:f6:5c:90:aa:df:09:42:30:7c:36:ac:48:a8:f7:05:
a3:57:2f:60:17:99:c6:90:c2:48:9b:bb:6b:9f:32:24:2b:5b:
4e:88:c6:7e:d6:0a:0c:56:d9:5f:06:0d:76:e1:6c:6d:83:cb:
1c:ac:b4:68:f7:56:ef:b6:24:d9:70:2c:3d:81:67:50:47:8c:
4f:ac:c2:1f:79:8c:1d:13:2a:e8:6a:11:14:0d:04:6b:c1:af:
b6:06:d4:de:70:b2:dc:d2:cf:02:09:54:4c:68:72:dd:ef:92:
76:f9:77:d0:76:2e:0d:0d:35:08:e1:87:95:8f:7e:89:a1:d5:
e1:06:a4:b9:70:22:d3:9f:52:81:68:67:97:5f:a8:24:2b:b7:
0b:ab:7c:25:0b:52:65:b5:00:d4:b3:e2:1d:a9:b9:1d:64:8a:
b7:5b:a9:1a:b5:71:9b:a6:33:5b:df:d3:4b:f0:0b:7e:9b:26:
ad:84:ca:1f:e0:36:de:47:67:99:b2:03:62:a9:af:bb:83:50:
b6:e0:b9:40:bf:ba:f9:7f:dd:56:64:92:9a:1e:20:62:10:aa:
04:c9:91:c5:c3:13:25:7c:54:14:76:c6:38:c1:09:d8:d5:b1:
12:80:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:54 2025 by rpki-client