Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/r-LFYkPYLB9SHC2Z1B_qz_trgHY.roa
File: r-LFYkPYLB9SHC2Z1B_qz_trgHY.roa (raw, json)
Hash identifier: te2VOfUQNAnLZdAmjhbUK4WhCj5kkTOTXCATaV2iEvM=
Subject key identifier: AF:E2:C5:62:43:D8:2C:1F:52:1C:2D:99:D4:1F:EA:CF:FB:6B:80:76
Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial: 019424B26458FE8B02F099E0DE257A74B0E7
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/r-LFYkPYLB9SHC2Z1B_qz_trgHY.roa
Signing time: Thu 02 Jan 2025 01:47:38 +0000
ROA not before: Thu 02 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12762
IP address blocks: 193.186.88.0/21 maxlen: 21
193.186.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:64:58:fe:8b:02:f0:99:e0:de:25:7a:74:b0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Validity
Not Before: Jan 2 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afe2c56243d82c1f521c2d99d41feacffb6b8076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:e5:dc:2d:36:fc:56:47:ae:64:59:66:66:
5f:92:cd:be:9c:21:04:cb:d5:78:da:e9:89:4f:38:
64:3e:43:c1:84:e6:f8:91:00:c5:16:fc:21:38:8b:
38:1b:52:31:0b:3d:18:a9:13:ae:c0:f2:09:3b:76:
73:50:49:2a:af:c5:1c:12:28:86:89:fe:29:2a:42:
72:49:53:8d:e5:76:b6:b5:a1:aa:27:62:bc:ff:42:
cd:c1:94:8d:61:9f:30:42:39:bb:f8:23:74:14:8b:
25:61:d0:0a:7c:d9:93:f9:a8:aa:bb:6b:a1:03:89:
bf:c8:e6:84:93:84:db:e6:6a:67:c2:42:34:e7:6a:
e8:df:bc:52:1a:be:d5:a6:0a:a1:d3:e7:8c:03:8f:
c7:fd:47:8e:63:12:bc:ca:51:85:69:c1:3e:58:78:
ab:2d:29:93:00:50:6d:cb:b0:13:c6:be:0c:53:cc:
c2:a9:26:87:7b:bb:42:e5:d0:20:43:8c:ce:0f:98:
11:c7:ff:4a:2f:37:57:6f:1b:a9:f1:0a:60:f2:70:
8a:40:85:3d:13:d5:74:48:80:d2:fa:7d:5e:39:e9:
ff:b0:f9:20:2d:30:51:19:08:41:1c:c5:9b:fb:7b:
17:13:c9:32:fa:de:7d:38:a9:e7:49:89:d9:75:3b:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E2:C5:62:43:D8:2C:1F:52:1C:2D:99:D4:1F:EA:CF:FB:6B:80:76
X509v3 Authority Key Identifier:
keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/r-LFYkPYLB9SHC2Z1B_qz_trgHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.88.0-193.186.103.255
Signature Algorithm: sha256WithRSAEncryption
59:d9:42:f9:1f:20:c5:92:80:ab:93:f1:12:07:dd:72:dc:e7:
db:d1:d9:19:49:57:8e:4e:cb:03:42:d9:06:69:73:a5:93:a7:
c4:a4:7e:37:ff:3a:d1:72:ba:7f:6d:9b:9f:9c:6b:32:42:73:
3e:25:35:37:79:3b:39:df:bc:10:3e:d0:ff:1d:7e:30:58:d4:
52:bf:08:69:f5:6d:fb:f1:f8:7d:b4:8f:a8:71:4d:57:13:f3:
da:e4:91:d9:c1:ad:92:9c:19:c1:dc:7d:bf:2e:7d:fa:4b:be:
ee:10:22:1f:7e:3a:22:22:30:22:f3:df:05:d3:0e:0d:8c:3c:
8b:2d:b4:7f:ca:74:2a:04:b6:41:55:f0:6f:a0:2d:d2:01:77:
96:38:ec:a2:7a:a0:bd:05:54:2a:e1:19:96:ab:28:7d:ca:48:
15:10:b7:41:25:58:8d:00:14:d6:6e:50:67:02:1b:1a:6f:c0:
bb:2d:8f:58:9a:a1:db:e6:33:2a:c3:9c:b4:ba:5c:17:3a:a9:
17:c8:cb:57:49:bd:5b:e1:d2:68:10:4c:64:85:78:a4:9d:77:
f8:ff:56:12:9a:56:66:88:e2:b5:7c:0b:f1:a9:bf:8d:a1:a8:
1b:a7:8d:60:c3:f4:34:68:10:88:02:6e:6d:d2:31:d9:30:3f:
01:cc:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net