Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/zAVl6KN24j-HKETuiZlV3hao63U.roa
File: zAVl6KN24j-HKETuiZlV3hao63U.roa (raw, json)
Hash identifier: djF473q/t5BuBhPbvFB06yhsIPQKmfmJ61GIeE/TTOg=
Subject key identifier: CC:05:65:E8:A3:76:E2:3F:87:28:44:EE:89:99:55:DE:16:A8:EB:75
Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial: 0196154C6B3A972C463E4FE63B29EC96E407
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/zAVl6KN24j-HKETuiZlV3hao63U.roa
Signing time: Tue 08 Apr 2025 12:07:31 +0000
ROA not before: Tue 08 Apr 2025 12:07:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61136
IP address blocks: 193.104.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:4c:6b:3a:97:2c:46:3e:4f:e6:3b:29:ec:96:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Validity
Not Before: Apr 8 12:07:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc0565e8a376e23f872844ee899955de16a8eb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:b3:c6:63:8e:20:3c:ac:ea:24:d4:b7:03:
d0:de:b2:78:60:4b:92:73:e9:f6:ca:ae:db:17:36:
77:6c:54:13:ff:df:b9:3c:17:a1:e1:68:27:98:11:
fa:ec:87:58:14:e8:c0:ca:9a:bb:02:6e:45:5e:6f:
d8:20:6b:86:cf:43:5f:26:a4:05:70:60:51:7c:2f:
d9:81:c5:22:c9:40:73:20:b8:66:9e:a6:27:12:4d:
7f:18:2b:cd:b9:74:25:69:79:c5:be:fa:4f:4f:44:
03:fd:a3:12:b6:06:fb:af:5b:96:9b:82:98:02:32:
86:f5:15:64:fd:4c:5e:e8:32:37:9a:d5:c4:dd:2a:
82:2c:c7:bf:f2:95:2a:7a:b5:bd:ed:cd:83:e3:8d:
d2:70:f4:7b:02:36:e6:e0:07:ce:86:7b:bb:70:20:
64:26:65:29:1e:bc:e2:66:13:fc:70:b6:c0:52:af:
0f:24:e0:77:15:0e:7b:92:e7:fc:1e:ef:bf:d7:1d:
10:9c:e1:29:b6:07:76:00:c2:36:a0:fd:88:4a:8a:
de:28:70:54:2a:b4:72:7c:cc:ea:c9:d5:9a:05:ad:
ea:0b:dc:e9:65:38:4e:96:fc:d9:03:a0:95:15:84:
86:1d:b4:97:d9:7a:74:0c:13:df:99:a1:9f:12:6d:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:05:65:E8:A3:76:E2:3F:87:28:44:EE:89:99:55:DE:16:A8:EB:75
X509v3 Authority Key Identifier:
keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/zAVl6KN24j-HKETuiZlV3hao63U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:50:0d:a9:85:48:dd:71:68:40:91:36:83:48:fe:25:2a:20:
c2:40:72:65:16:e6:e8:bc:d4:35:58:10:dc:00:2c:64:6f:f7:
80:b6:2e:50:e1:30:b4:fa:b8:28:6e:72:30:df:76:52:c2:86:
8d:33:09:c7:a1:f0:3f:49:e8:bd:3e:49:ce:20:2d:66:5a:28:
45:43:a9:5c:c4:7a:76:ad:fd:76:6e:9f:bb:70:68:45:2d:ef:
8c:60:07:9c:23:26:e2:fe:9a:cd:eb:23:7b:64:14:15:4c:e7:
cc:a5:74:e0:9e:32:39:46:c8:4b:78:70:06:7d:5d:c0:4d:9b:
5e:7f:96:57:5c:d9:da:ea:56:5c:e9:1a:19:80:7b:5a:9c:f9:
75:33:55:8d:6a:cc:84:3f:70:4b:20:75:77:83:b3:5c:f4:d8:
36:75:c6:fb:0c:a5:3d:ee:64:bd:d3:89:45:63:53:72:ba:23:
ea:7e:bc:27:8c:9d:8d:d7:f8:ee:14:55:b7:f0:ed:1a:e2:4a:
c4:46:00:a5:a9:19:2b:98:f1:df:09:2a:3f:9f:7e:70:36:a7:
fb:88:df:59:8c:46:1a:bd:a1:e5:51:43:4c:a9:b0:cc:5a:08:
44:56:e0:60:1d:d7:24:17:43:73:e9:39:5b:f0:d5:39:b0:b5:
08:45:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net