Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa
File: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (raw, json)
Hash identifier: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=
Subject key identifier: CF:7F:9D:B1:92:A3:F6:3E:E7:08:A5:D2:F8:CD:AF:B6:AE:1A:26:B9
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 019425218D3227C6147F6F45F520DCCAD957
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa
Signing time: Thu 02 Jan 2025 03:49:03 +0000
ROA not before: Thu 02 Jan 2025 03:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.232.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8d:32:27:c6:14:7f:6f:45:f5:20:dc:ca:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf7f9db192a3f63ee708a5d2f8cdafb6ae1a26b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:89:ca:9f:47:3b:c7:12:a8:89:e7:1a:d2:
7d:7e:7f:5c:e3:28:70:2a:fb:bd:69:77:0b:5b:62:
02:f3:73:fb:25:58:09:4b:a0:d2:41:08:9d:4e:8a:
c5:94:8c:23:40:d4:e5:ab:d9:81:3b:48:8a:f8:35:
50:5b:ca:5c:e6:82:e0:a8:6e:64:7c:f6:46:2c:52:
70:98:e4:09:b7:76:85:73:4a:3c:31:22:ac:81:66:
17:c9:19:8c:48:8b:b5:17:b3:3c:1b:bd:04:82:7c:
47:c6:35:68:41:9b:ad:ee:75:fd:c8:ce:aa:8c:b5:
e8:43:b1:5d:5f:af:0a:1c:dc:e2:db:a4:97:45:15:
dc:56:15:3e:e6:65:58:75:2a:40:5a:4d:2e:5c:97:
0d:5a:6b:a5:b6:ee:07:17:b6:6e:0e:d5:a3:2a:4c:
45:44:2f:60:7e:ae:64:24:2e:73:68:60:d1:67:10:
18:a4:9f:82:a6:86:2a:eb:1e:68:16:ad:9a:9d:95:
1f:7b:c1:77:9b:6e:fe:47:a3:36:51:69:fb:77:32:
39:f5:2d:89:96:59:3d:0f:98:dd:03:e7:e8:ee:bf:
ed:0a:d2:12:da:38:b1:07:07:0f:bc:38:71:6b:61:
73:ab:97:14:27:15:58:6b:f1:46:20:84:c0:56:61:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7F:9D:B1:92:A3:F6:3E:E7:08:A5:D2:F8:CD:AF:B6:AE:1A:26:B9
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c2:01:dd:1c:2d:ea:21:be:ef:34:14:9f:11:95:ad:d6:28:
b6:c4:11:6e:47:0f:4f:c2:ee:54:b5:eb:c3:f2:17:09:82:a0:
3a:37:da:dc:d4:88:78:b2:c7:e1:77:d6:03:10:90:4c:df:0b:
ec:d0:3e:79:2d:f0:05:31:ff:f6:49:ce:f0:8c:d8:66:cf:f7:
cd:bd:6b:ce:8d:65:4d:0d:1a:fc:10:ca:f4:eb:d0:8f:78:f2:
2d:0e:6e:f2:e1:32:05:ac:b2:46:1e:d0:75:b5:d8:01:ed:88:
9f:17:c8:67:c7:27:a2:f7:03:8a:e6:f0:2e:a6:92:ff:15:85:
64:c9:92:b9:49:4d:b1:1c:0c:18:c5:d7:22:b7:5c:10:3f:ff:
2c:0b:35:e9:5f:06:ed:82:4e:7a:ea:3b:6f:73:6a:26:1b:64:
f4:49:cf:b4:76:56:3e:5f:49:dd:50:f9:b0:ac:58:61:23:9f:
f0:13:fc:cc:8d:7e:5a:f9:5f:9f:75:e1:68:89:2b:2f:3c:a9:
34:70:21:36:bf:19:d9:4e:d2:df:f0:1e:ca:b9:b2:11:fa:1c:
74:eb:0d:d2:be:78:47:78:d7:56:32:fa:d8:7e:bc:43:86:41:
fd:b3:0f:07:c2:52:2b:9a:4a:ff:ba:8b:5e:3d:6d:2d:56:ad:
91:6b:9c:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIY0yJ8YUf29F9SDcytlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmM5M2QyNjY4NTI3ODhlNDk5ODJkOWY3YTYyMGRiNmQ5
ZjU4OGQwHhcNMjUwMTAyMDM0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjdmOWRiMTkyYTNmNjNlZTcwOGE1ZDJmOGNkYWZiNmFlMWEyNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdSJyp9HO8cSqInnGtJ9fn9c4yhw
Kvu9aXcLW2IC83P7JVgJS6DSQQidTorFlIwjQNTlq9mBO0iK+DVQW8pc5oLgqG5k
fPZGLFJwmOQJt3aFc0o8MSKsgWYXyRmMSIu1F7M8G70EgnxHxjVoQZut7nX9yM6q
jLXoQ7FdX68KHNzi26SXRRXcVhU+5mVYdSpAWk0uXJcNWmultu4HF7ZuDtWjKkxF
RC9gfq5kJC5zaGDRZxAYpJ+CpoYq6x5oFq2anZUfe8F3m27+R6M2UWn7dzI59S2J
llk9D5jdA+fo7r/tCtIS2jixBwcPvDhxa2Fzq5cUJxVYa/FGIITAVmGRsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM9/nbGSo/Y+5wil0vjNr7auGia5MB8GA1UdIwQY
MBaAFCgsk9JmhSeI5JmC2femINttn1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAt
OTZhZGZmZTJlODZhLzEvejMtZHNaS2o5ajduQ0tYUy1NMnZ0cTRhSnJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAtOTZhZGZmZTJlODZh
LzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuehjMA0G
CSqGSIb3DQEBCwUAA4IBAQAswgHdHC3qIb7vNBSfEZWt1ii2xBFuRw9Pwu5UtevD
8hcJgqA6N9rc1Ih4ssfhd9YDEJBM3wvs0D55LfAFMf/2Sc7wjNhmz/fNvWvOjWVN
DRr8EMr069CPePItDm7y4TIFrLJGHtB1tdgB7YifF8hnxyei9wOK5vAuppL/FYVk
yZK5SU2xHAwYxdcit1wQP/8sCzXpXwbtgk566jtvc2omG2T0Sc+0dlY+X0ndUPmw
rFhhI5/wE/zMjX5a+V+fdeFoiSsvPKk0cCE2vxnZTtLf8B7KubIR+hx06w3SvnhH
eNdWMvrYfrxDhkH9sw8HwlIrmkr/uotePW0tVq2Ra5zD
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:43 2025 by rpki-client