Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa
File: z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa (raw, json)
Hash identifier: RhWaGG++pr/cOsZo3DpIE+m6eX6qqpoZxRcmwUA1c6s=
Subject key identifier: CF:A3:26:0A:B8:C6:FC:CF:A5:CB:73:52:CF:DA:29:F7:39:F6:2A:9F
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 0194258FADAD522A39F48E42BE68E4466A53
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44858
IP address blocks: 193.105.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ad:ad:52:2a:39:f4:8e:42:be:68:e4:46:6a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfa3260ab8c6fccfa5cb7352cfda29f739f62a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:89:a3:38:1f:b8:35:be:69:fa:f0:26:a2:
e8:3c:90:a4:03:be:29:c9:2d:8b:74:1d:37:4f:5f:
47:67:d6:ec:74:26:be:e1:59:31:62:9e:0d:7b:db:
07:3c:6a:d3:ec:a8:ec:a9:95:e9:11:97:68:48:79:
15:da:f9:65:d6:4a:d4:98:62:5d:25:fb:3e:97:9e:
fa:99:ec:4e:a1:a5:b3:30:26:4c:7d:15:9e:1a:53:
64:cf:81:ab:13:ae:fb:b0:5a:33:cb:0f:fa:84:b4:
a2:0a:e9:f5:b5:77:fd:8d:27:4d:ae:56:c1:43:18:
e9:71:58:2d:bd:71:fe:89:29:76:0f:f9:82:2e:ba:
ce:3f:82:fd:bf:83:ec:67:4c:26:35:90:a2:8c:82:
60:54:f5:0e:52:6b:22:36:b1:d0:fa:d7:e3:65:13:
0e:b0:f0:12:c8:fe:cb:04:4b:d6:4c:07:d5:35:04:
14:99:42:92:a2:c3:fa:2e:d3:d6:36:2f:85:7d:92:
6a:67:ac:87:26:43:a4:f5:21:8c:65:23:9f:bf:40:
84:0b:63:7e:4e:8c:d7:7b:ae:1c:a2:29:93:fa:8c:
a9:44:8a:a8:b4:e3:48:81:41:f7:8e:10:d1:48:a9:
7c:4c:d5:ba:c1:34:3e:89:68:11:4f:60:52:90:e4:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:26:0A:B8:C6:FC:CF:A5:CB:73:52:CF:DA:29:F7:39:F6:2A:9F
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.50.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b6:c6:98:37:43:09:8c:7c:b2:f3:5c:c9:1b:b7:52:cf:cf:
45:8a:db:45:2e:58:17:9d:15:02:f3:61:10:17:34:8d:10:f1:
f9:a7:a9:f4:e2:97:2d:28:1b:bd:5d:e6:27:6a:b9:f3:19:de:
09:29:a5:56:e4:a1:cb:8f:20:96:e6:41:66:a4:c9:66:01:cb:
3c:cf:6c:f7:da:78:a3:d7:be:85:5e:01:10:92:8b:63:ec:a2:
6f:77:2f:53:17:ce:01:21:3d:b3:62:fa:19:da:f1:43:53:2a:
14:55:48:ba:19:2c:96:91:7c:58:e1:23:96:bd:53:d6:75:b0:
6f:f9:4d:c4:4c:c1:ec:88:d1:99:68:44:40:4b:be:4e:6e:68:
27:ab:33:35:bf:e7:1a:80:4f:12:ad:c1:72:a3:78:f9:f0:db:
94:2c:f1:fb:b0:f5:e0:6f:1f:5e:10:01:3e:f7:73:b0:b2:47:
df:2c:83:de:9d:6f:ff:49:bd:d2:d4:7d:c8:92:58:7a:0a:f9:
f7:75:ee:f3:84:e6:50:64:fb:78:e3:41:e4:a4:ae:fe:cf:ba:
2d:7e:22:4f:5b:8f:ab:6c:96:64:37:ec:c8:9e:ce:9c:47:24:
89:64:22:2f:37:92:67:a4:83:7d:c7:b8:da:c0:ec:08:d9:4c:
ba:0c:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:23 2025 by rpki-client