Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/zKYpcRfJ0yCrd-f2baj9-TyNLi8.roa
File: zKYpcRfJ0yCrd-f2baj9-TyNLi8.roa (raw, json)
Hash identifier: T7q7FvhXmWHJ0yC6vmc/dnmnSYNoJL5+7o5GUV51uGY=
Subject key identifier: CC:A6:29:71:17:C9:D3:20:AB:77:E7:F6:6D:A8:FD:F9:3C:8D:2E:2F
Certificate issuer: /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Certificate serial: 01941FFA42589C1E062482FFBE0B25950F1B
Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/zKYpcRfJ0yCrd-f2baj9-TyNLi8.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205237
IP address blocks: 193.104.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:42:58:9c:1e:06:24:82:ff:be:0b:25:95:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cca6297117c9d320ab77e7f66da8fdf93c8d2e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:d4:84:c1:73:e0:ac:cd:bd:02:d1:73:14:
1f:fe:12:47:a7:68:06:5b:63:86:b9:84:7a:77:7a:
65:24:f4:bc:86:4f:28:a3:b2:02:fb:e0:cb:ca:18:
ea:89:70:c5:1d:61:10:82:b9:70:af:f5:6c:31:6f:
b2:2a:24:4e:27:ab:79:11:9d:3b:1a:00:82:64:ad:
06:c9:d1:76:4a:97:8a:33:9d:9e:64:a3:08:32:ad:
66:16:05:75:64:d6:2b:f8:f1:5a:d7:8d:5b:8d:68:
b0:8a:ac:fa:90:bc:4e:0e:85:56:be:24:ed:06:00:
fb:a9:92:da:5b:2e:b8:a0:e0:8b:20:3a:e8:f5:e3:
e8:a6:58:6b:05:b8:30:99:6b:08:04:17:5f:26:5b:
9e:5d:55:45:7e:ca:57:db:ec:20:0a:df:a0:4a:18:
9b:dd:aa:a3:74:aa:4a:24:2b:5e:de:d8:a5:a4:fc:
1c:a4:af:a7:4f:39:70:92:bd:85:c4:41:45:5a:92:
ba:50:a2:6c:fd:d0:aa:e3:cc:45:28:19:a0:30:45:
b2:d3:c1:fd:69:60:a4:c0:16:2a:99:8b:c0:88:4a:
c9:fd:ee:95:5d:3f:03:59:1a:3f:da:2b:1e:a5:7e:
b6:7e:85:7f:e7:b7:69:5b:0a:9f:36:44:e4:2e:75:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A6:29:71:17:C9:D3:20:AB:77:E7:F6:6D:A8:FD:F9:3C:8D:2E:2F
X509v3 Authority Key Identifier:
keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/zKYpcRfJ0yCrd-f2baj9-TyNLi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.25.0/24
Signature Algorithm: sha256WithRSAEncryption
46:21:85:f2:8a:c8:fa:10:ae:39:bd:ef:81:cf:1a:62:cd:43:
8a:47:99:e9:0a:48:6a:94:56:00:26:75:21:17:bf:61:0f:43:
98:83:b2:6d:5c:ee:e7:77:4b:d6:b2:a8:24:0c:7f:e8:42:b4:
0e:c2:02:ea:9c:35:ee:8b:c3:5e:59:7b:b0:4d:31:15:f2:e9:
0f:21:48:24:ab:10:07:51:71:e0:39:d1:30:66:65:e6:41:99:
35:f4:1c:7a:5c:5f:6e:8a:cf:0d:2e:3a:85:a3:28:67:8d:94:
88:95:3b:e4:eb:51:ba:70:a8:94:e8:65:b1:6f:3f:bb:79:04:
40:7b:14:bd:61:bc:88:ea:90:31:4e:3e:f2:94:36:7a:07:a1:
1b:72:90:72:ef:11:0b:2d:db:a3:e8:0e:44:4c:fc:fc:a2:ca:
ef:1e:d6:88:58:e7:d9:25:d8:00:c4:f7:6e:48:8e:1d:8b:c1:
72:bc:ca:a0:64:69:92:b5:3f:fb:9a:ee:9f:25:2c:93:f4:bb:
ec:f1:d4:a5:46:8a:2e:a1:5d:17:32:2c:3c:3b:c0:5a:ad:81:
a3:1b:c5:d5:15:52:ca:e3:f6:91:2f:41:d5:6c:3b:9f:3c:39:
b8:b8:54:21:70:d2:2b:f9:1c:38:db:0b:6b:b1:87:1b:bb:9a:
b4:1c:31:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:10 2025 by rpki-client