Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/zmA_4zxXMcTORxmCgPEyljXw27c.roa
File: zmA_4zxXMcTORxmCgPEyljXw27c.roa (raw, json)
Hash identifier: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=
Subject key identifier: CE:60:3F:E3:3C:57:31:C4:CE:47:19:82:80:F1:32:96:35:F0:DB:B7
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 019427B37384E1265472E64BC0EEF03B44AA
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/zmA_4zxXMcTORxmCgPEyljXw27c.roa
Signing time: Thu 02 Jan 2025 15:47:39 +0000
ROA not before: Thu 02 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212186
IP address blocks: 194.169.190.0/24 maxlen: 24
194.169.193.0/24 maxlen: 24
194.169.196.0/24 maxlen: 24
194.169.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:73:84:e1:26:54:72:e6:4b:c0:ee:f0:3b:44:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Jan 2 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce603fe33c5731c4ce47198280f1329635f0dbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:e2:82:5f:2e:21:66:dc:18:5d:68:b0:fd:
b3:e0:99:59:2b:9a:8b:f4:d2:ca:e7:c2:b1:92:bb:
22:a8:b5:f7:a4:f9:74:ad:34:e1:79:dc:6c:00:91:
50:7f:88:5a:d1:91:37:6b:a6:6a:4f:31:45:bc:8c:
5c:a0:91:4a:10:b4:f4:7b:db:c6:f9:e2:32:a7:53:
a0:f6:8d:33:00:0a:88:66:b9:34:6c:c4:c2:a1:26:
02:7c:21:a4:1c:2d:4c:17:6c:99:33:eb:bb:72:4b:
5e:65:6e:5f:af:eb:d8:58:c7:c1:bb:7d:5e:00:7e:
65:48:f7:f1:f7:6b:86:69:98:07:cc:20:34:27:5b:
ea:2b:69:c5:ca:bc:13:89:83:21:69:e2:66:ab:1f:
e9:c3:c7:69:e4:3d:db:31:17:f7:b7:95:28:06:83:
8f:99:f9:e8:ae:1d:aa:ae:09:7f:11:d8:5b:b3:fd:
b1:65:79:09:c7:97:73:f7:69:75:5c:2d:c7:c2:3d:
89:3c:1c:3a:86:1d:bb:88:b2:73:fb:d6:39:d8:c7:
c9:83:1d:92:3e:74:54:2f:aa:6f:63:f0:37:52:6e:
6b:c4:2a:28:c4:4f:ee:12:ef:b4:e2:3d:85:cb:5f:
7b:57:ff:e0:99:b3:58:76:62:ca:5c:00:47:d3:ff:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:60:3F:E3:3C:57:31:C4:CE:47:19:82:80:F1:32:96:35:F0:DB:B7
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/zmA_4zxXMcTORxmCgPEyljXw27c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.190.0/24
194.169.193.0/24
194.169.196.0/24
194.169.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ad:50:d7:df:fc:16:47:fb:e0:3c:1c:fc:24:2e:33:68:70:
7d:7f:77:a7:7a:19:4a:d4:0b:6a:fb:ad:fe:95:85:3d:bf:9d:
7c:8c:1c:6d:62:f0:2b:6e:b3:35:3c:4f:69:2f:ff:7c:46:8b:
67:06:a2:5e:00:44:b9:c2:31:48:43:0c:03:10:10:83:dc:2c:
21:83:5f:ce:85:d1:65:01:9b:5c:79:e9:70:2b:60:ef:cf:2b:
a8:1e:f7:d9:7e:06:80:b3:ec:84:5f:07:ed:7a:0e:0b:e8:21:
b3:97:fe:37:f9:26:26:86:27:2c:86:ee:ee:ff:dc:4b:85:5e:
65:3c:e1:1c:c2:df:a1:d4:5c:dd:aa:9b:bc:27:d2:13:a1:a4:
67:36:65:86:21:3f:de:1c:2b:e3:73:7b:a0:81:5d:09:df:32:
88:11:0e:96:88:07:e9:be:80:1c:3e:63:f1:5b:dc:95:e1:9b:
84:0c:fb:74:98:25:86:77:b3:27:f6:73:27:1d:87:54:a7:93:
39:6e:44:a7:41:6f:54:7b:f0:b6:b2:6c:98:9c:2c:db:d3:ff:
1c:0a:bc:db:5b:4b:b6:3c:28:71:c3:a8:d2:9b:97:87:86:a8:
58:1d:4a:22:00:69:c1:7c:5b:5f:95:f7:ef:63:d8:6f:b5:43:
a7:3a:69:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net