Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/z46k-i-bjDUO4Ol48wcdFv3fJS8.roa
File: z46k-i-bjDUO4Ol48wcdFv3fJS8.roa (raw, json)
Hash identifier: sn1w3xRnzI7Jkm3KXN6s7I0s9xcKRoJb9fQHsE63d9Y=
Subject key identifier: CF:8E:A4:FA:2F:9B:8C:35:0E:E0:E9:78:F3:07:1D:16:FD:DF:25:2F
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 019427B49CE8B1C9F4200499F2AE5EB3AC80
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/z46k-i-bjDUO4Ol48wcdFv3fJS8.roa
Signing time: Thu 02 Jan 2025 15:48:55 +0000
ROA not before: Thu 02 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12891
IP address blocks: 193.110.208.0/24 maxlen: 24
193.110.210.0/24 maxlen: 24
193.110.211.0/24 maxlen: 24
193.110.212.0/24 maxlen: 24
193.110.213.0/24 maxlen: 24
193.110.214.0/24 maxlen: 24
193.110.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:9c:e8:b1:c9:f4:20:04:99:f2:ae:5e:b3:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Jan 2 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf8ea4fa2f9b8c350ee0e978f3071d16fddf252f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:4c:74:84:86:42:05:d7:ee:15:52:71:e3:
7e:ff:e2:62:a1:1c:ea:17:03:40:70:86:6c:60:c3:
93:a5:29:fb:bc:8a:35:48:e8:8c:e2:9d:76:df:a8:
0a:cf:a8:d8:84:1d:c7:1c:5a:2a:57:92:5d:01:55:
9e:95:1f:64:86:3d:fd:71:34:c4:00:3e:c0:51:29:
d2:f5:f0:ea:fb:ba:37:95:5c:e7:dd:0f:9a:3d:98:
36:67:d6:f1:54:7b:3e:bc:98:96:92:c9:5b:3a:69:
58:07:58:a7:f9:b9:49:c3:cb:34:59:1c:29:b5:af:
fb:16:13:2d:5b:a6:93:ea:5c:17:64:7e:b2:de:54:
86:f7:b2:57:24:ce:79:36:0d:dc:c0:c3:06:59:7c:
8c:22:36:45:f8:eb:f2:5c:41:23:bc:fa:12:76:40:
b9:b9:d4:45:db:a1:b5:16:ef:46:37:d1:fa:9f:3e:
85:af:b7:a3:54:f5:f8:43:89:70:d6:2f:25:50:96:
00:e8:70:1b:82:fb:3d:e7:26:13:bc:67:a8:96:ec:
6a:ae:93:4e:c1:46:77:d0:d7:05:89:fa:cb:9f:67:
f2:66:32:a2:3f:48:29:12:39:5b:1a:3c:56:de:0f:
00:26:68:63:4f:1e:00:81:65:a8:6d:4e:d3:19:46:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8E:A4:FA:2F:9B:8C:35:0E:E0:E9:78:F3:07:1D:16:FD:DF:25:2F
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/z46k-i-bjDUO4Ol48wcdFv3fJS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.208.0/24
193.110.210.0-193.110.215.255
Signature Algorithm: sha256WithRSAEncryption
5d:a7:25:10:4b:00:29:71:f3:4a:f9:17:69:04:a3:1c:59:d4:
41:24:e3:f0:09:4c:cb:c7:9e:f5:ce:e9:96:cd:e2:77:20:de:
0a:27:da:dd:52:02:f2:c1:bf:c2:31:11:66:21:2e:71:33:79:
a8:2f:03:fc:21:46:e3:7c:05:7b:37:31:da:49:1d:89:3e:a4:
8b:23:be:25:47:2f:84:bb:79:95:f7:3f:e6:8c:ce:78:a0:2f:
b1:2f:93:ff:6e:fe:fc:dd:f5:4e:7c:f3:c4:88:1d:fe:77:6a:
cc:aa:4e:cd:47:d6:8c:c7:cf:57:56:43:85:5f:a8:f8:3e:8d:
33:ec:d2:5b:38:9c:bc:cf:fa:ee:6a:c3:2a:6d:a1:e8:4b:68:
53:68:76:57:37:1c:eb:2e:fc:54:44:83:a8:4f:80:be:1b:9d:
e7:6f:1d:56:19:0b:a6:9c:fe:4d:2a:65:e5:f9:e7:94:92:91:
5a:a1:85:34:fc:fe:fa:61:54:70:f9:c5:9a:cc:38:68:2c:62:
f3:e8:f5:75:d6:19:b0:e0:e2:28:cd:54:e3:a8:6b:d8:fc:ef:
cd:78:90:fd:49:2c:c3:51:43:32:cb:54:33:d7:bf:21:b9:ed:
ea:1c:d3:5b:d4:ad:f0:35:a0:fd:c7:ab:85:74:91:bc:e4:09:
ee:c3:48:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:57 2025 by rpki-client