Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa
File: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (raw, json)
Hash identifier: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=
Subject key identifier: 65:9B:AD:08:E9:61:DC:09:62:EE:8E:7B:54:0A:D5:43:EA:FA:C4:44
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 0194266B59925ED267F7D153E044354D0D4C
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197688
IP address blocks: 193.142.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:59:92:5e:d2:67:f7:d1:53:e0:44:35:4d:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=659bad08e961dc0962ee8e7b540ad543eafac444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:b6:ab:dc:80:79:58:3f:d4:b6:df:17:79:
c3:f7:99:12:0a:1e:66:4e:db:93:6f:17:d4:39:65:
bd:1f:e3:cc:c6:b2:9e:49:37:ef:c7:19:3c:d0:89:
a4:24:59:a4:d9:a6:3f:0c:e9:27:9a:3a:83:73:98:
74:fb:89:87:84:d2:d7:b9:b0:9c:2c:63:2e:ed:50:
cd:6d:af:fb:01:85:eb:f8:69:87:2a:2c:d6:8d:a3:
0d:f1:ab:6f:7f:04:80:c5:7e:32:5f:0b:b4:2a:0c:
ba:d9:e9:f8:60:23:b5:db:a1:5b:e2:66:6e:0d:99:
ee:2e:4a:32:4f:94:09:22:83:de:bf:90:5b:a1:2d:
ce:d8:45:b9:b5:f4:67:6b:2f:c6:09:65:db:e4:d0:
25:4a:69:ee:60:94:82:5c:1f:1d:49:13:54:58:2d:
59:89:1a:89:df:28:b1:33:83:d3:d0:bd:ff:82:30:
e0:2e:b4:b3:40:01:4e:3f:68:ca:46:0a:42:cd:e0:
4c:44:35:4b:ac:0f:fd:d5:a7:5d:45:e9:b9:65:a1:
e5:3c:6b:c8:78:35:6b:14:f8:55:33:22:17:fc:f0:
1a:b5:2c:d4:e6:47:d3:10:9b:98:48:66:5a:35:b6:
3b:80:c5:93:2a:b6:03:95:4a:aa:d3:fe:51:e7:cc:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:AD:08:E9:61:DC:09:62:EE:8E:7B:54:0A:D5:43:EA:FA:C4:44
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:98:a3:f2:a5:6f:d9:24:1f:81:90:76:55:bf:f1:bd:c7:10:
0f:4c:18:1f:cb:46:a7:a5:57:92:d0:0b:bb:f5:31:f0:70:19:
99:47:bc:a9:cb:5b:0f:bf:e7:27:49:60:cc:24:1f:46:e4:fe:
ee:5e:79:c0:91:a7:b8:3a:c9:bd:68:82:23:dc:44:5c:2f:80:
5b:99:06:98:76:2d:80:65:ab:25:3e:64:c5:ef:e4:10:7e:a6:
51:50:63:35:6c:6b:f8:06:74:c8:7e:9d:86:95:17:74:2e:2e:
bf:59:d4:b9:ad:22:28:26:a7:f9:f2:88:ec:2f:fa:59:ca:ea:
93:4f:43:df:90:e6:fc:65:9a:4e:26:7d:94:b5:14:09:8b:e5:
2a:c4:b2:df:fa:00:08:38:48:1f:5e:c7:72:7f:b6:60:33:6b:
7a:7c:66:3d:ef:2c:8a:c8:f7:02:42:ca:5d:00:2d:64:15:97:
97:67:15:92:45:12:26:f3:8a:c0:24:08:a7:13:00:96:b3:4d:
86:3c:b1:ff:0c:c6:d9:c4:a0:a5:a7:a6:e6:1e:94:a1:c9:8a:
58:ed:b4:b3:9d:64:93:72:75:9f:55:e6:c5:63:94:0e:bf:d0:
7e:7d:af:14:84:cb:7e:d9:d0:0a:e3:1c:5b:6d:24:33:f7:c8:
3a:65:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:20 2025 by rpki-client