Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/Zba0dbkP3QNmaDB4ArR3Umg6Rgk.roa
File: Zba0dbkP3QNmaDB4ArR3Umg6Rgk.roa (raw, json)
Hash identifier: kQKUnAXsYjrSXxpkEoPAlKc0i25JNr4zEm21SjfVhd4=
Subject key identifier: 65:B6:B4:75:B9:0F:DD:03:66:68:30:78:02:B4:77:52:68:3A:46:09
Certificate issuer: /CN=f998035895f95549c2cdaac3f005446cbdd11c02
Certificate serial: 01877B9F7865F5BF37A983EA5E387F8F67F9
Authority key identifier: F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/Zba0dbkP3QNmaDB4ArR3Umg6Rgk.roa
Signing time: Thu 13 Apr 2023 17:17:41 +0000
ROA not before: Thu 13 Apr 2023 17:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 185.250.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:9f:78:65:f5:bf:37:a9:83:ea:5e:38:7f:8f:67:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f998035895f95549c2cdaac3f005446cbdd11c02
Validity
Not Before: Apr 13 17:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b6b475b90fdd036668307802b47752683a4609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:02:8a:bc:9b:fe:0c:ff:38:91:6d:ab:15:
b7:ca:be:d8:ec:b3:1f:d2:7e:f3:0d:f1:e4:f3:f4:
ce:2b:80:58:17:8d:ca:93:1f:01:d9:ee:0c:b6:d3:
49:b4:41:ba:a6:16:e5:fe:f6:0f:76:49:40:67:6c:
92:fa:fe:3f:53:22:99:cb:08:eb:95:ff:db:82:57:
10:80:73:4b:f7:73:d7:12:96:92:a1:e7:9e:c9:df:
81:64:e4:f5:e5:39:96:aa:d6:e0:0e:8d:16:1f:81:
43:68:2f:2b:00:59:b2:08:9c:2d:88:a9:7a:2e:de:
3f:62:f5:2d:23:d5:de:56:42:8e:40:a8:6b:6d:c0:
f0:e0:86:b0:19:89:15:fb:86:3f:37:a9:53:f8:e9:
49:12:fb:c4:9d:dc:ca:8a:f6:f0:af:86:af:65:12:
4e:67:28:64:b5:51:e1:17:fc:f2:a1:cb:af:5c:8a:
7d:45:8e:4b:b8:07:54:6e:93:e8:7a:87:d0:b6:bc:
80:34:d9:04:a0:13:18:1b:ea:67:ff:17:39:23:ce:
6b:35:2d:5b:de:ec:2e:cd:08:fa:21:32:c4:ac:bb:
7e:9b:45:e9:bc:6a:57:37:ee:ec:e3:84:5d:54:ec:
33:05:f5:82:20:f4:14:e3:5a:7c:e0:e0:2c:34:67:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B6:B4:75:B9:0F:DD:03:66:68:30:78:02:B4:77:52:68:3A:46:09
X509v3 Authority Key Identifier:
keyid:F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/Zba0dbkP3QNmaDB4ArR3Umg6Rgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.42.0/23
Signature Algorithm: sha256WithRSAEncryption
91:bf:d9:13:a3:e8:e8:11:bb:12:f2:59:1f:6b:fe:a7:8f:24:
ec:b4:0d:73:d5:ba:da:64:fc:c1:70:81:65:78:b2:79:33:9a:
02:79:97:04:96:be:93:44:b0:2d:7f:6c:5c:ca:e7:ee:8a:72:
b9:2f:17:64:f6:ad:e3:4d:94:43:89:aa:6d:26:01:19:65:06:
f2:ac:54:92:1a:ed:f4:20:c3:fb:3d:2e:22:01:60:58:1c:3b:
96:10:15:8d:75:50:6b:00:05:51:ea:32:5e:15:5c:ed:8a:89:
98:34:d2:3f:73:6a:3e:86:c8:a0:16:f1:dc:ea:43:81:50:f8:
92:f7:8c:f7:a0:fa:bf:7d:10:0f:56:57:ad:4d:ec:0b:6a:ba:
38:8f:f1:37:89:3c:63:03:e1:68:da:be:4f:b4:b3:82:8f:cc:
74:f2:28:35:3b:4c:73:c9:6a:9d:b6:c6:32:c8:6b:6d:34:3a:
ff:90:bd:e7:fd:cb:8e:41:40:76:0a:39:e1:46:ca:30:5d:eb:
4b:e5:6d:49:a0:8b:1c:71:95:8f:f8:e9:46:ab:11:60:0b:99:
38:0c:ac:ea:2d:9e:3d:d4:86:a8:a3:19:45:e7:66:21:51:6e:
ae:f1:a5:a5:b6:1c:6f:e4:33:00:14:04:fe:fb:58:d6:48:ca:
38:f1:c6:7b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYd7n3hl9b83qYPqXjh/j2f5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OTgwMzU4OTVmOTU1NDljMmNkYWFjM2YwMDU0NDZjYmRk
MTFjMDIwHhcNMjMwNDEzMTcxNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWI2YjQ3NWI5MGZkZDAzNjY2ODMwNzgwMmI0Nzc1MjY4M2E0NjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHsCiryb/gz/OJFtqxW3yr7Y7LMf
0n7zDfHk8/TOK4BYF43Kkx8B2e4MttNJtEG6phbl/vYPdklAZ2yS+v4/UyKZywjr
lf/bglcQgHNL93PXEpaSoeeeyd+BZOT15TmWqtbgDo0WH4FDaC8rAFmyCJwtiKl6
Lt4/YvUtI9XeVkKOQKhrbcDw4IawGYkV+4Y/N6lT+OlJEvvEndzKivbwr4avZRJO
ZyhktVHhF/zyocuvXIp9RY5LuAdUbpPoeofQtryANNkEoBMYG+pn/xc5I85rNS1b
3uwuzQj6ITLErLt+m0XpvGpXN+7s44RdVOwzBfWCIPQU41p84OAsNGftaQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGW2tHW5D90DZmgweAK0d1JoOkYJMB8GA1UdIwQY
MBaAFPmYA1iV+VVJws2qw/AFRGy90RwCMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1aZ0RXSlg1VlVuQ3phckQ4QVZFYkwzUkhBSS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvODdjM2VlLWQwODYtNDU1OS05MGQ0
LWYzYmE5ZTdlYzc4Zi8xL1piYTBkYmtQM1FObWFEQjRBclIzVW1nNlJnay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDQvODdjM2VlLWQwODYtNDU1OS05MGQ0LWYzYmE5ZTdlYzc4
Zi8xLzEtWmdEV0pYNVZVbkN6YXJEOEFWRWJMM1JIQUkuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG5+iow
DQYJKoZIhvcNAQELBQADggEBAJG/2ROj6OgRuxLyWR9r/qePJOy0DXPVutpk/MFw
gWV4snkzmgJ5lwSWvpNEsC1/bFzK5+6KcrkvF2T2reNNlEOJqm0mARllBvKsVJIa
7fQgw/s9LiIBYFgcO5YQFY11UGsABVHqMl4VXO2KiZg00j9zaj6GyKAW8dzqQ4FQ
+JL3jPeg+r99EA9WV61N7AtqujiP8TeJPGMD4Wjavk+0s4KPzHTyKDU7THPJap22
xjLIa200Ov+Qvef9y45BQHYKOeFGyjBd60vlbUmgixxxlY/46UarEWALmTgMrOot
nj3UhqijGUXnZiFRbq7xpaW2HG/kMwAUBP77WNZIyjjxxns=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:23 2025 by rpki-client