Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/zKEsruxE4cDY7eG8e5BdPLgZZLk.roa
File: zKEsruxE4cDY7eG8e5BdPLgZZLk.roa (raw, json)
Hash identifier: Nz28QZnXJ3PO2kQqaWAGQuglhdiOX9sRFv6wk4pN+lA=
Subject key identifier: CC:A1:2C:AE:EC:44:E1:C0:D8:ED:E1:BC:7B:90:5D:3C:B8:19:64:B9
Certificate issuer: /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Certificate serial: 019421445BD637A1C803F2DDB65E051A3F66
Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/zKEsruxE4cDY7eG8e5BdPLgZZLk.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12795
IP address blocks: 194.246.110.0/24 maxlen: 24
194.246.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5b:d6:37:a1:c8:03:f2:dd:b6:5e:05:1a:3f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cca12caeec44e1c0d8ede1bc7b905d3cb81964b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:56:da:2b:74:63:57:f4:60:45:12:88:77:
dd:18:c9:63:a3:89:5d:6c:7f:2b:96:fb:7d:91:41:
0f:7f:90:94:11:9a:99:a0:b0:ce:56:e4:c6:99:9a:
84:5f:82:89:82:33:07:8f:63:d3:79:cc:16:ad:92:
d0:50:a9:7a:d8:69:63:7e:e4:4f:71:ad:66:5f:64:
1d:6f:c9:ab:23:20:34:3b:ba:f7:72:ae:b3:d2:11:
35:0f:28:f6:22:64:c5:1e:06:67:09:89:99:e1:fc:
5c:dd:f0:54:90:d8:a0:3f:4f:51:0c:9b:e7:71:06:
da:b5:43:03:8d:48:48:96:ff:28:38:bf:27:f4:a9:
24:88:13:ef:50:8e:69:e3:75:fa:6c:b2:6b:6c:9b:
40:db:bf:e8:1f:64:97:f7:67:d5:a5:e5:bd:7b:0a:
28:6c:02:ba:ba:95:78:63:f8:7a:b9:8f:fa:a1:fe:
4e:d0:f7:6e:07:60:c8:59:14:56:32:e8:4f:a4:6a:
78:d7:03:dd:b7:f7:82:30:3f:f6:76:ae:13:19:38:
bd:95:2f:21:b4:a0:94:bf:20:0a:48:fb:80:e3:7d:
f1:cc:ad:d7:04:0b:18:6c:71:be:e9:06:ac:2c:cc:
0e:56:ee:6d:1a:43:34:4a:77:9d:ca:9f:25:8d:fd:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:2C:AE:EC:44:E1:C0:D8:ED:E1:BC:7B:90:5D:3C:B8:19:64:B9
X509v3 Authority Key Identifier:
keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/zKEsruxE4cDY7eG8e5BdPLgZZLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.110.0/23
Signature Algorithm: sha256WithRSAEncryption
97:60:62:9a:01:d6:9f:db:b4:96:a9:25:fa:73:53:3a:8e:21:
15:50:ab:ca:5b:87:25:37:0a:e6:13:9e:78:1c:f5:c2:e3:dd:
d3:fa:5b:b2:93:99:28:f8:b1:4e:0e:97:24:b3:7a:cd:15:5d:
33:e7:a6:f0:6d:9e:3d:bd:a0:88:e5:25:28:00:e8:8f:ff:c9:
0c:8f:31:59:f0:eb:34:5c:7d:2d:06:98:91:03:42:48:a9:02:
af:f4:c0:63:40:ba:9a:8f:04:b8:a2:a2:82:ef:3f:0e:bf:06:
9a:25:01:3d:a6:62:b3:e6:2f:73:59:e3:78:81:ee:6b:b5:93:
52:88:ac:dc:65:73:16:3e:55:ed:b2:55:9a:63:2d:69:b3:83:
17:53:4c:56:4e:13:26:0e:82:ce:4d:2a:f6:dc:74:e1:78:1f:
ea:21:ff:70:5f:7e:11:77:bf:a6:6e:2e:89:64:8c:6d:cb:e0:
4e:2d:b6:1b:ed:e2:af:62:0c:91:fb:28:bc:40:76:67:c1:14:
16:52:5d:64:53:79:c1:67:c2:02:c0:33:f4:fe:ef:fc:1e:3c:
59:61:d5:eb:54:7d:ec:f7:6f:48:4a:4f:5e:da:b9:c9:c5:df:
e2:30:b9:a0:d6:34:fa:90:01:eb:eb:c4:7d:fc:f9:a6:4b:95:
0d:5c:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:37 2025 by rpki-client