Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa
File: Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa (raw, json)
Hash identifier: k+SlRJ8Eg3Sd/kSZfZH8+gupJSBpD7AMqyYcN2gXnJ0=
Subject key identifier: 67:62:57:3D:BE:5A:73:30:6A:E9:69:8A:FE:C7:7A:85:7E:94:A0:5D
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 0194258F69AB49048B79D0CD02EE53B54675
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213100
IP address blocks: 193.17.35.0/24 maxlen: 24
2a10:cdc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:69:ab:49:04:8b:79:d0:cd:02:ee:53:b5:46:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6762573dbe5a73306ae9698afec77a857e94a05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:ed:8d:8e:1b:c9:9f:b7:4d:77:00:f5:b1:
4e:a3:88:c0:86:43:54:02:89:f8:93:ed:0f:2c:39:
8f:9f:7b:8b:1d:51:80:00:05:26:10:ac:2f:3c:7b:
09:b4:29:22:06:25:eb:db:eb:3e:09:be:8b:e3:3d:
b8:9f:36:5b:d1:9d:7e:36:28:4d:fe:9b:47:28:4f:
50:7c:39:a4:f7:54:34:60:a6:75:3c:1d:4b:af:05:
30:25:8b:79:33:bc:2d:4f:05:43:fd:03:8d:27:ad:
31:66:6b:5f:c5:38:3e:1e:18:10:68:4e:66:8e:8f:
a8:8e:12:87:a6:25:19:85:45:cf:91:4b:a7:d9:34:
03:46:d5:10:c5:c6:ef:7d:e5:37:cc:16:fb:69:ce:
27:d2:e6:4c:42:8b:b6:0b:7a:58:d2:1c:9d:30:2c:
8b:15:0b:43:cf:1e:43:bf:b6:bd:36:29:28:7c:26:
f9:f7:a3:34:24:55:ce:c5:21:ac:73:0d:ad:07:eb:
5f:c0:64:d0:6d:e1:72:d1:b7:d7:65:3e:33:cf:a0:
24:d5:00:61:99:f1:77:36:ce:ed:5e:72:54:e2:94:
3e:52:51:73:9b:14:0e:59:8a:7d:4d:4b:62:a8:64:
fe:e2:39:1e:70:59:60:c4:53:72:c7:7a:46:10:de:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:62:57:3D:BE:5A:73:30:6A:E9:69:8A:FE:C7:7A:85:7E:94:A0:5D
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.35.0/24
IPv6:
2a10:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
e4:35:0f:cf:28:92:02:18:7d:6d:9d:02:f3:d6:72:55:1d:a4:
51:06:0d:d0:c5:29:61:a5:cb:24:44:50:b0:cb:a9:5d:de:39:
34:7a:43:35:bf:36:8a:a2:9f:2b:ec:fd:a3:cc:a3:9a:83:4f:
1a:08:be:ee:aa:b9:a8:38:d4:04:08:00:57:c7:af:a2:af:f3:
e4:85:72:a0:51:fd:65:f9:d5:fd:b1:16:54:ea:47:c7:8a:e9:
e8:a8:5e:9f:54:d1:cb:39:8e:e3:ae:9d:2e:b6:31:a0:02:a1:
6e:83:3c:6b:69:2e:fa:87:b8:fe:9d:52:32:d8:21:d6:91:f5:
df:14:cc:27:0e:d4:0b:24:b9:3e:29:ae:75:51:d7:d9:1d:48:
97:49:44:a7:50:4c:ad:38:d5:54:af:55:45:5b:6d:cb:27:55:
3c:5d:df:89:98:62:07:4d:70:7a:1a:9d:40:be:9f:88:96:d1:
f6:b8:f4:84:f5:87:46:b1:b5:43:ce:33:87:eb:a1:39:7e:13:
74:c0:57:c6:a7:55:77:b7:68:f9:d3:bf:ed:5f:cb:3f:99:40:
8b:32:4d:f8:57:12:d7:4f:87:69:7f:db:ce:32:64:05:23:56:
0d:27:fc:96:ec:09:d8:bd:25:96:45:14:a4:36:93:0c:01:9e:
13:98:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:06 2025 by rpki-client