Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/pzab-y4S6g4DZwEwFQWsy3DRkOI.roa
File: pzab-y4S6g4DZwEwFQWsy3DRkOI.roa (raw, json)
Hash identifier: hKiOLND56jGXA2Q2u9O0L+DdBo1zxKBcuwX1QXw1GUc=
Subject key identifier: A7:36:9B:FB:2E:12:EA:0E:03:67:01:30:15:05:AC:CB:70:D1:90:E2
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 0194266BA21B61C063A000B26F6DB374CA35
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/pzab-y4S6g4DZwEwFQWsy3DRkOI.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197448
IP address blocks: 193.239.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a2:1b:61:c0:63:a0:00:b2:6f:6d:b3:74:ca:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7369bfb2e12ea0e036701301505accb70d190e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:d6:18:52:39:c7:6d:6a:3c:61:c4:ae:aa:
05:3f:34:61:22:c8:a8:42:c2:91:88:40:60:dc:06:
6e:a5:05:2f:48:46:84:92:24:05:e9:42:17:f3:cb:
c9:e8:c1:fc:72:72:c1:b3:4a:c5:81:da:21:6d:cc:
3e:8b:31:65:12:15:f1:5f:e7:11:e9:87:05:67:64:
87:fb:74:ef:54:f0:8b:41:b0:21:0c:84:12:66:b5:
5d:80:14:6d:4c:17:ba:95:71:91:57:26:90:ec:8f:
c2:67:bd:c7:48:05:3c:1d:07:7a:d3:7e:af:bf:1c:
12:18:7d:ed:93:d9:56:a3:65:b8:94:bb:45:25:3a:
f3:60:33:96:90:bf:b2:de:0a:95:97:5f:9d:15:ee:
8e:ff:3a:ef:43:d1:8e:fc:30:c5:d8:a6:2d:30:9b:
c2:47:24:81:48:82:7e:ba:55:e4:f5:6c:22:56:5a:
21:2e:41:c3:39:89:e6:49:6c:97:49:3f:ff:7f:7c:
bf:e6:bd:8f:eb:ab:5c:4d:08:e0:47:fa:2e:c8:e7:
11:06:ab:b6:6c:b1:ab:78:35:4a:17:e4:7e:03:6d:
78:03:e5:8c:1c:0d:6c:d3:e8:85:d7:32:80:40:6d:
36:0a:bf:7c:ea:4f:71:e0:03:18:5d:4e:77:23:be:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:36:9B:FB:2E:12:EA:0E:03:67:01:30:15:05:AC:CB:70:D1:90:E2
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/pzab-y4S6g4DZwEwFQWsy3DRkOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.205.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4f:38:1f:16:c7:0b:d7:15:2d:a0:9d:d1:47:3b:8d:58:e9:
5a:0f:1a:f5:3c:06:2d:36:68:dc:62:ae:f0:4f:a9:61:be:bb:
64:da:98:a0:7d:54:cb:7c:6a:b1:a1:3b:26:34:7d:ec:f1:82:
ab:31:48:a5:60:63:1c:d1:f7:87:99:c6:9d:c8:99:58:25:72:
79:07:bd:5a:7b:a6:16:0c:2c:fc:7a:b9:f7:67:92:bb:28:f7:
b5:fd:65:fa:c7:35:6d:95:7b:e9:68:ed:a3:19:e0:5a:64:b8:
53:a5:57:62:f6:15:2a:6e:6f:1b:ac:7c:89:b3:06:30:93:9c:
ff:32:24:b5:5f:8b:20:9b:14:40:19:0a:3b:5e:4c:81:31:3f:
20:ad:14:5f:22:b8:bf:b7:f5:7e:28:be:6e:22:f3:4e:23:8d:
b3:f9:f5:27:bb:28:a4:b5:cc:ab:c3:56:cd:e5:75:79:c9:6a:
cb:fe:ef:05:3e:30:ec:92:6d:67:4f:cc:38:3f:8b:eb:63:4d:
3b:09:31:58:f1:e2:ad:34:b0:4b:de:e4:8c:f4:66:c0:52:db:
b9:51:0a:e7:b5:18:a6:cc:a1:15:19:84:50:c5:21:19:e8:1a:
9e:66:2e:41:9b:df:43:59:86:f0:a0:c5:c4:5c:6c:32:c9:3d:
f1:07:41:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:32 2025 by rpki-client