Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/zkP5uuZLYo9QPyhko4b81Vp75xk.roa
File: zkP5uuZLYo9QPyhko4b81Vp75xk.roa (raw, json)
Hash identifier: Q7jfrwpN23UNp0QlVl+g69LdPL/9j4DNCRgUr9ow76I=
Subject key identifier: CE:43:F9:BA:E6:4B:62:8F:50:3F:28:64:A3:86:FC:D5:5A:7B:E7:19
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 0194236A03DD46C772B30E1C7D71F1C1E643
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/zkP5uuZLYo9QPyhko4b81Vp75xk.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216334
IP address blocks: 109.120.141.0/24 maxlen: 24
176.98.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:03:dd:46:c7:72:b3:0e:1c:7d:71:f1:c1:e6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce43f9bae64b628f503f2864a386fcd55a7be719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4c:87:c0:5c:e0:f3:46:87:7c:1a:73:51:32:
d8:71:73:54:b8:03:6e:80:37:2a:ec:7e:0b:1b:d2:
a3:4a:be:b1:88:48:3e:1b:35:e6:54:37:89:e8:8a:
66:be:e4:40:0d:34:76:f6:e6:43:5a:3f:81:ec:2d:
6e:e0:b3:54:8a:3e:b3:17:69:ce:0c:2a:a1:40:50:
e3:cb:4c:16:d4:82:8d:c6:8a:5a:b2:b5:f5:2d:a7:
63:ba:eb:68:58:ed:3e:78:23:64:a4:a6:fc:4a:7d:
96:fb:b0:a5:19:60:73:d2:b4:76:2e:ff:92:88:c1:
b6:81:53:6f:30:b7:3c:8e:15:f8:c0:aa:e1:f9:a0:
bd:76:78:13:41:c7:6c:e8:2f:b2:70:f3:7b:fc:9e:
d8:f1:8e:80:f1:27:f9:82:56:54:9c:f9:ab:31:00:
58:9b:2c:ad:a7:74:fa:f6:f2:47:66:eb:1d:3d:8d:
a1:22:19:2f:31:1f:1d:a6:53:59:06:bd:59:cb:e5:
df:b8:f6:3d:ee:80:d2:82:ef:32:eb:8f:ec:55:c1:
90:5b:ae:39:4c:f9:47:f1:a0:e0:2b:62:fe:22:00:
b6:7b:75:7b:ec:58:ae:de:48:ea:4e:91:9b:61:e6:
29:bd:b5:db:34:0a:79:05:4c:3b:56:a7:a1:35:9b:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:43:F9:BA:E6:4B:62:8F:50:3F:28:64:A3:86:FC:D5:5A:7B:E7:19
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/zkP5uuZLYo9QPyhko4b81Vp75xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.141.0/24
176.98.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d1:9d:a5:ee:24:a7:c9:d7:8f:c2:b9:fb:1a:da:b6:55:35:
a9:06:2c:87:9d:e9:39:b9:99:19:ca:19:70:c1:0a:7f:0c:b1:
22:42:ae:36:ae:4f:09:81:cb:06:ea:98:7c:f2:86:7e:87:e7:
04:c6:e7:27:5e:3a:83:9b:bc:1b:f9:78:28:39:b3:5d:2a:1d:
8a:af:42:31:a8:a7:70:62:4a:c0:48:4a:ad:57:71:0d:40:de:
05:79:36:4a:a5:99:ac:a3:aa:e0:c2:6a:59:59:35:c6:46:56:
f0:4a:38:68:7e:5c:11:e6:20:32:01:95:3b:38:69:db:25:e3:
38:63:42:db:93:cf:6a:e6:60:90:99:d9:08:34:18:b4:42:55:
da:61:7b:7d:44:65:1b:d9:67:30:33:e3:79:5f:e6:2d:17:6b:
fd:7f:f8:64:73:b1:4d:1b:2e:ad:4f:9e:c8:fe:1a:ca:d4:48:
16:93:24:06:a3:d2:2d:ad:d9:8c:12:53:76:6c:a2:2b:b8:29:
2c:4b:e0:b5:38:69:23:98:56:f0:5b:ef:9f:87:95:f0:20:38:
8c:12:d0:fa:11:0f:6b:30:58:a9:7e:8e:39:bc:d0:a1:72:d2:
a5:20:86:19:54:45:87:6e:ef:b8:84:78:39:f8:c9:4f:c0:52:
71:ab:a4:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjagPdRsdysw4cfXHxweZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjUwMTAxMTk0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTQzZjliYWU2NGI2MjhmNTAzZjI4NjRhMzg2ZmNkNTVhN2JlNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EyHwFzg80aHfBpzUTLYcXNUuANu
gDcq7H4LG9KjSr6xiEg+GzXmVDeJ6IpmvuRADTR29uZDWj+B7C1u4LNUij6zF2nO
DCqhQFDjy0wW1IKNxopasrX1LadjuutoWO0+eCNkpKb8Sn2W+7ClGWBz0rR2Lv+S
iMG2gVNvMLc8jhX4wKrh+aC9dngTQcds6C+ycPN7/J7Y8Y6A8Sf5glZUnPmrMQBY
myytp3T69vJHZusdPY2hIhkvMR8dplNZBr1Zy+XfuPY97oDSgu8y64/sVcGQW645
TPlH8aDgK2L+IgC2e3V77Fiu3kjqTpGbYeYpvbXbNAp5BUw7VqehNZtVcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM5D+brmS2KPUD8oZKOG/NVae+cZMB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvemtQNXV1WkxZbzlRUHloa280YjgxVnA3NXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXiNAwQA
sGK9MA0GCSqGSIb3DQEBCwUAA4IBAQAf0Z2l7iSnydePwrn7Gtq2VTWpBiyHnek5
uZkZyhlwwQp/DLEiQq42rk8JgcsG6ph88oZ+h+cExucnXjqDm7wb+XgoObNdKh2K
r0IxqKdwYkrASEqtV3ENQN4FeTZKpZmso6rgwmpZWTXGRlbwSjhoflwR5iAyAZU7
OGnbJeM4Y0Lbk89q5mCQmdkINBi0QlXaYXt9RGUb2WcwM+N5X+YtF2v9f/hkc7FN
Gy6tT57I/hrK1EgWkyQGo9ItrdmMElN2bKIruCksS+C1OGkjmFbwW++fh5XwIDiM
EtD6EQ9rMFipfo45vNChctKlIIYZVEWHbu+4hHg5+MlPwFJxq6Qk
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:06:04 2025 by rpki-client