Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ziAErXap3gE4oUQ_30DyvIau8mU.roa
File: ziAErXap3gE4oUQ_30DyvIau8mU.roa (raw, json)
Hash identifier: zI6SwX02+qOlq17QooQYsFVB47XHuwzw3+jlks2XEb4=
Subject key identifier: CE:20:04:AD:76:A9:DE:01:38:A1:44:3F:DF:40:F2:BC:86:AE:F2:65
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 019421445CB90E98D45C4AE8CD0FB4D95D7A
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ziAErXap3gE4oUQ_30DyvIau8mU.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59812
IP address blocks: 193.134.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5c:b9:0e:98:d4:5c:4a:e8:cd:0f:b4:d9:5d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce2004ad76a9de0138a1443fdf40f2bc86aef265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:e5:63:7d:f8:db:41:35:fe:0a:80:cc:0e:
c4:61:be:d6:43:40:ec:e1:8b:87:80:1e:83:44:d9:
12:1f:03:4e:b8:5c:d9:cf:54:55:55:fa:7e:16:33:
d5:5e:c5:a5:83:ac:e8:0d:b0:d2:40:32:26:74:a5:
8f:b2:f0:6a:7c:84:f4:87:2f:20:b4:41:c9:33:ef:
d3:ac:6f:e3:49:8d:75:86:fe:51:8a:19:08:b4:ee:
19:a5:3b:3a:88:3a:bb:89:aa:a3:40:e9:a0:d4:72:
8e:f5:bf:6a:78:2b:8a:56:aa:d2:ae:36:fd:d3:44:
68:9b:df:31:c9:34:f9:2e:bd:8c:7a:d4:bd:6e:d8:
cd:41:95:09:65:fb:3a:03:98:e3:54:d9:47:c7:8e:
04:4c:49:6d:a3:a4:ee:ca:db:63:0e:5c:d3:52:32:
82:cd:84:97:82:97:a7:fc:be:7e:27:be:7d:ce:f7:
a3:81:b2:09:c4:dd:f7:ce:a6:8b:34:0f:0e:fa:ad:
bf:bb:b0:30:5a:27:0c:c8:f3:7f:d7:bb:11:a4:3f:
c4:b5:58:91:03:3a:e9:37:db:9e:a1:95:71:1c:26:
4d:70:fd:63:d7:df:21:bf:c5:c3:49:ba:ea:b5:2d:
7b:ad:da:88:d1:f5:f6:19:48:6f:63:92:e2:26:80:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:20:04:AD:76:A9:DE:01:38:A1:44:3F:DF:40:F2:BC:86:AE:F2:65
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ziAErXap3gE4oUQ_30DyvIau8mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:44:1b:c7:b6:14:d2:57:3c:f4:58:3b:72:e7:ef:97:0c:b6:
18:95:03:db:3e:1b:ee:a4:05:d9:e8:0c:f7:44:e8:5c:4e:b6:
e7:39:ca:e7:80:4a:b3:dd:69:7e:a6:bb:eb:d3:90:9a:a0:7f:
9a:8a:42:80:40:16:ab:13:78:c9:1f:74:4c:cd:96:2b:dd:ba:
32:26:c3:f5:b7:1a:0c:de:cc:88:03:6f:9d:15:76:a5:2f:7f:
ee:3a:50:31:75:24:c4:cb:08:19:fb:ce:a7:7f:a3:02:04:22:
e1:de:dd:f9:c7:83:f1:ba:bc:3c:ca:4f:4e:b7:49:19:4b:18:
a4:a5:62:23:f1:b8:53:9e:c4:75:14:bb:0a:29:83:14:aa:2e:
8f:aa:32:64:79:a0:dd:31:73:a1:6b:ce:dd:46:87:e7:87:07:
b9:6f:48:6f:ca:7b:26:e9:1c:df:5b:7b:b4:5d:3e:0b:d9:36:
f6:c0:59:32:80:60:a4:b9:70:2c:3e:b0:33:65:f2:24:06:9d:
a7:c6:15:86:16:1c:51:65:33:f5:80:e5:62:02:bf:f7:98:43:
f2:fc:27:58:0a:77:7f:ad:89:44:48:d4:6e:6b:bc:14:9d:30:
9d:20:8f:a1:1e:e3:4f:f3:1a:1c:93:05:4a:4b:4d:f3:92:bc:
d2:db:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:28 2025 by rpki-client