Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa
File: ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa (raw, json)
Hash identifier: 8ysxTHtlcBGpselXIHgOo3ohrRPYZzrFKyhkLGGKcWQ=
Subject key identifier: 66:21:8A:40:D6:15:59:4D:14:4D:E8:07:CB:4B:73:14:FB:5D:00:50
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 019425FDA414ECEEB0B13B20FB1B099ED857
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206894
IP address blocks: 193.24.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a4:14:ec:ee:b0:b1:3b:20:fb:1b:09:9e:d8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66218a40d615594d144de807cb4b7314fb5d0050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:b3:6a:7e:18:d6:8c:14:40:57:9f:a9:5e:
55:78:34:06:df:8a:43:7a:1c:be:9b:a0:42:19:c5:
6f:5c:96:07:51:ab:79:04:ce:65:5a:b7:5b:4c:c7:
8b:14:b2:c3:be:57:b6:a9:b2:f7:94:4d:3f:f6:d5:
63:7f:ac:e4:94:1a:03:26:1d:14:18:b2:ea:dd:25:
73:9c:54:64:d2:40:bd:0a:f8:0a:9e:1b:07:0d:63:
d2:e7:42:8c:4f:ab:b2:cf:09:6c:d2:0e:d5:29:b5:
85:71:99:8d:74:b8:85:a1:90:2e:c9:68:45:5e:a1:
fb:cc:4f:d4:c2:78:3b:ed:c2:42:4f:fb:e3:bf:2c:
f6:7e:0d:fc:57:4d:ce:b0:6a:ca:16:f2:9f:d4:52:
bb:49:f3:92:08:24:62:15:6e:ae:0d:56:df:b0:d0:
8a:96:db:e2:d8:00:68:3b:cb:6b:15:b3:4c:f2:2b:
39:32:bb:80:fe:8d:ba:3a:98:96:0e:26:cd:87:f6:
71:bf:53:95:a2:d4:25:50:24:77:35:02:9c:53:6b:
a5:af:93:31:db:9d:c4:d7:4e:41:c3:c0:54:f4:00:
41:8d:9a:5a:49:e4:6b:f7:56:13:32:06:10:f4:4e:
9f:5b:fb:8f:97:81:bf:8a:a4:3f:d7:21:66:11:28:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:21:8A:40:D6:15:59:4D:14:4D:E8:07:CB:4B:73:14:FB:5D:00:50
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.38.0/23
Signature Algorithm: sha256WithRSAEncryption
19:1c:55:89:7f:72:d7:bc:af:74:a7:2a:8c:7f:e1:07:ec:4f:
5b:92:17:5d:8e:c8:d7:41:9f:1c:81:ba:6f:19:5b:07:f9:d8:
e8:20:15:22:d3:8a:1b:cd:1d:d3:c4:da:33:c6:ff:af:d0:65:
23:da:c6:3d:15:7f:e6:d6:71:8f:e6:5c:54:f9:e8:1b:a0:25:
ab:7f:27:44:03:43:33:6f:e7:b0:7d:fa:6e:4d:4d:fb:5e:3b:
01:13:9f:1d:7a:75:57:ef:b6:53:f2:05:29:a6:a5:d4:72:b8:
27:f1:fc:c6:b9:6d:3a:d6:da:2a:87:67:81:9d:42:6c:0b:e2:
83:4e:14:d3:c9:c9:e1:45:41:16:4e:ae:40:88:02:7d:99:9c:
ce:74:8a:41:61:78:cf:70:09:a6:08:2d:4c:a3:aa:c7:85:e7:
df:a2:44:fb:d9:60:e1:93:47:aa:c9:da:ef:2b:1a:bf:8f:ec:
75:c1:e5:61:b6:5a:0b:6a:21:60:66:6b:90:7b:24:5a:82:e7:
c2:3b:31:b0:78:b8:5f:09:f1:66:95:bf:65:62:96:1d:14:1c:
76:d6:d7:2a:83:2d:b2:cc:fb:5d:2e:2b:98:d0:92:72:59:ed:
c3:d1:0c:c8:ba:34:a8:1d:4e:c5:0e:23:c1:51:05:9f:6d:bb:
6e:5c:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:05:03 2025 by rpki-client