Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa
File: zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa (raw, json)
Hash identifier: dZhp70Fm8wBLybFYAH8VTvH36PqVNE1zgwuzpEitFwQ=
Subject key identifier: CE:5E:ED:4F:C7:51:47:B3:B5:66:E8:DD:0B:4F:86:84:68:C1:24:05
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 0194258FBDCD73659D78F31B60554F9C6390
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215546
IP address blocks: 193.243.183.0/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bd:cd:73:65:9d:78:f3:1b:60:55:4f:9c:63:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce5eed4fc75147b3b566e8dd0b4f868468c12405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:c6:9c:a5:e8:38:b1:39:1c:cb:b8:78:98:
49:4d:cd:0f:32:61:66:74:cf:0a:df:ca:d9:8f:63:
6f:0c:9d:a6:cd:83:30:0e:fb:36:26:f5:e0:ba:12:
d7:f4:7d:b3:a1:cb:f5:9c:03:4e:4e:74:b2:1b:d9:
96:18:0a:34:cd:be:87:fc:11:27:a3:68:d3:67:ef:
46:d6:3f:c1:ba:11:1d:06:b5:cb:2e:7a:d4:9d:26:
f1:3e:53:b3:61:56:97:8d:c8:97:6f:79:28:59:24:
5d:fc:dc:09:a3:c1:a0:c1:53:8b:35:e7:fb:8e:48:
7e:8b:b4:08:3c:90:a1:45:66:0e:7c:6b:88:eb:2f:
22:19:e2:5f:4e:0d:e6:ab:e4:87:f1:a1:3a:5c:45:
bd:d1:99:c9:3f:41:1b:07:19:e9:01:75:73:25:4a:
0c:30:61:34:18:cc:60:62:7d:6c:7a:41:b8:fa:05:
d9:2e:60:37:47:94:a2:6b:1e:e6:57:2b:f4:d5:e5:
a9:28:86:63:ea:48:62:e0:d5:73:04:66:5f:c7:2b:
68:56:0a:15:5b:7a:cd:5b:48:9c:10:e4:98:66:97:
6b:bc:0a:f8:ed:69:ba:b9:16:a2:59:6f:c2:69:dc:
d6:d0:9a:64:b6:39:66:70:d1:fd:23:70:1a:79:10:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:ED:4F:C7:51:47:B3:B5:66:E8:DD:0B:4F:86:84:68:C1:24:05
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.183.0/26
Signature Algorithm: sha256WithRSAEncryption
a4:aa:3b:97:8a:2e:21:ce:5d:f2:71:f3:b2:64:9a:ab:66:49:
a4:36:80:b8:db:f2:70:0c:6e:29:e7:55:13:eb:5e:72:aa:89:
2d:7a:30:bc:f3:31:f2:b4:82:98:49:b1:25:0c:48:94:42:9d:
8a:8a:af:91:e4:c3:b2:67:1f:a1:62:df:71:f3:46:58:f6:54:
3f:27:cf:3b:9e:1d:a1:da:73:b9:6c:19:eb:23:c0:d6:6c:b9:
be:aa:7e:0a:8c:f3:93:ea:b5:c4:2b:f1:66:d3:a9:86:2d:ff:
a5:b9:fa:79:7b:ba:fd:ea:9a:44:b8:74:6a:84:bc:b8:f6:9e:
3e:3e:1b:d7:1a:cb:96:04:19:9b:96:c8:32:3c:49:d3:5e:2b:
4c:3b:0a:ff:72:f1:de:c6:e0:37:b8:d3:e6:9a:0e:aa:44:84:
00:54:5b:4c:ea:fa:9a:0f:08:d6:2a:f9:b1:36:22:7a:fc:27:
72:c8:4a:61:54:b1:a1:62:92:dc:19:32:b9:a0:55:c5:6e:bf:
0c:09:b1:1c:99:76:fe:eb:10:50:78:53:48:42:67:18:bf:3d:
f6:25:27:cc:0b:c3:2a:a9:af:55:6a:19:e4:6a:9d:24:7c:91:
1e:58:6a:ce:8f:bb:b8:ba:81:7e:9d:39:5b:3e:b0:7b:7b:d1:
84:02:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:16 2025 by rpki-client