Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZSTJCHJ9FD8JerKeIqPuNbm2RCI.roa
File: ZSTJCHJ9FD8JerKeIqPuNbm2RCI.roa (raw, json)
Hash identifier: /7QZ5ByPsWsXphRxSeDx//9OSuOriPF7D2en6h6G9TY=
Subject key identifier: 65:24:C9:08:72:7D:14:3F:09:7A:B2:9E:22:A3:EE:35:B9:B6:44:22
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2E4D380F05D8A5620DB768BFEE274
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZSTJCHJ9FD8JerKeIqPuNbm2RCI.roa
Signing time: Thu 02 Jan 2025 01:48:11 +0000
ROA not before: Thu 02 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6832
IP address blocks: 159.148.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:e4:d3:80:f0:5d:8a:56:20:db:76:8b:fe:e2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6524c908727d143f097ab29e22a3ee35b9b64422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:cb:94:95:a7:1e:b2:45:ce:f7:7d:48:9e:
1c:2d:1d:cd:9a:25:25:59:cd:b3:56:d0:10:5f:00:
59:be:a9:4e:4d:87:bf:24:bf:a9:a1:36:16:33:ba:
7b:02:90:93:b2:2d:cd:13:58:ec:38:7b:c0:14:19:
9e:c8:13:ae:3a:77:b7:57:3f:8c:bf:c3:36:f6:10:
89:3b:db:00:3a:a3:0c:84:d7:ac:5b:4b:5d:19:5d:
fe:5c:41:46:fa:e3:39:b9:d7:28:a8:51:e8:2c:5a:
b4:b5:8a:6d:12:16:2a:07:51:f4:fa:c1:c1:29:be:
b4:ef:cc:7d:08:a9:6b:79:cc:af:71:e8:0d:4c:a6:
2a:34:96:e2:e4:ce:dc:57:4f:86:ac:0c:bb:99:82:
34:1c:73:f7:10:55:d9:b0:29:11:93:6c:a1:8f:ff:
06:ef:7c:08:58:fb:47:18:e5:43:c5:17:78:69:c9:
5c:ee:1d:ed:1f:83:22:8f:a5:7e:3f:67:a2:36:89:
ae:de:66:51:4b:a4:0d:7c:61:6d:48:32:6a:85:48:
ab:9a:cc:2c:b5:9e:39:e2:56:15:ac:44:f8:89:d8:
34:c4:b5:61:b8:40:24:e9:47:2e:67:bd:4c:f8:79:
0b:25:57:4a:fc:ae:8f:bc:e8:de:26:d9:ab:b9:67:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:24:C9:08:72:7D:14:3F:09:7A:B2:9E:22:A3:EE:35:B9:B6:44:22
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ZSTJCHJ9FD8JerKeIqPuNbm2RCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.144.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4e:d7:f2:3d:77:0e:cc:d9:ad:ab:51:6d:60:bb:7e:a3:f8:
22:8d:81:76:3c:a8:4b:11:b6:7a:ff:eb:f7:e8:8d:50:23:0f:
30:39:7c:20:d6:c0:b8:f9:9f:dc:5d:e2:ec:06:2b:16:51:8f:
92:0d:71:9c:32:a7:25:56:6a:3d:15:3c:c4:4d:12:cf:3d:b9:
b4:62:00:aa:49:9a:de:a9:f9:e4:f4:05:f8:6c:79:92:0e:9c:
29:62:a7:aa:8e:97:d5:ac:28:60:11:9e:45:ac:e7:11:ab:3a:
79:31:54:72:73:c3:d5:c0:2d:6f:d6:44:40:99:43:e3:f3:b9:
fd:98:5d:69:00:0c:c3:94:2e:8f:dd:05:07:22:cd:3c:4e:84:
33:7c:8e:a1:85:d3:66:d5:24:e1:93:c3:46:33:58:c3:7f:46:
fe:69:5f:e8:6e:a2:7f:4e:0e:99:2c:c9:0c:d8:e3:ba:f1:df:
44:63:d3:ae:8d:81:33:7e:e0:74:94:05:58:1e:9a:88:4c:ba:
3e:be:ba:a6:cc:c7:fe:73:08:a4:44:7d:2a:c2:34:38:13:e5:
2f:f6:0a:f6:58:07:85:89:e9:b0:b0:2d:cd:32:7b:40:d7:df:
a9:93:3b:20:39:28:c6:9b:ac:15:25:ab:ba:79:bd:55:96:35:
4d:7a:3c:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksuTTgPBdilYg23aL/uJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwMTAyMDE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTI0YzkwODcyN2QxNDNmMDk3YWIyOWUyMmEzZWUzNWI5YjY0NDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIvLlJWnHrJFzvd9SJ4cLR3NmiUl
Wc2zVtAQXwBZvqlOTYe/JL+poTYWM7p7ApCTsi3NE1jsOHvAFBmeyBOuOne3Vz+M
v8M29hCJO9sAOqMMhNesW0tdGV3+XEFG+uM5udcoqFHoLFq0tYptEhYqB1H0+sHB
Kb6078x9CKlrecyvcegNTKYqNJbi5M7cV0+GrAy7mYI0HHP3EFXZsCkRk2yhj/8G
73wIWPtHGOVDxRd4aclc7h3tH4Mij6V+P2eiNomu3mZRS6QNfGFtSDJqhUirmsws
tZ454lYVrET4idg0xLVhuEAk6UcuZ71M+HkLJVdK/K6PvOjeJtmruWeSwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUkyQhyfRQ/CXqyniKj7jW5tkQiMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvWlNUSkNISjlGRDhKZXJLZUlxUHVOYm0yUkNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5SQMA0G
CSqGSIb3DQEBCwUAA4IBAQA1TtfyPXcOzNmtq1FtYLt+o/gijYF2PKhLEbZ6/+v3
6I1QIw8wOXwg1sC4+Z/cXeLsBisWUY+SDXGcMqclVmo9FTzETRLPPbm0YgCqSZre
qfnk9AX4bHmSDpwpYqeqjpfVrChgEZ5FrOcRqzp5MVRyc8PVwC1v1kRAmUPj87n9
mF1pAAzDlC6P3QUHIs08ToQzfI6hhdNm1SThk8NGM1jDf0b+aV/obqJ/Tg6ZLMkM
2OO68d9EY9OujYEzfuB0lAVYHpqITLo+vrqmzMf+cwikRH0qwjQ4E+Uv9gr2WAeF
iemwsC3NMntA19+pkzsgOSjGm6wVJau6eb1VljVNejxM
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:20 2025 by rpki-client