Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/zEolHRB2AMzAHPn0pcNPX5SKSz8.roa
File: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (raw, json)
Hash identifier: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=
Subject key identifier: CC:4A:25:1D:10:76:00:CC:C0:1C:F9:F4:A5:C3:4F:5F:94:8A:4B:3F
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01941F8C550C10807B7ACD5D0271266CD039
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/zEolHRB2AMzAHPn0pcNPX5SKSz8.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.74.54.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:55:0c:10:80:7b:7a:cd:5d:02:71:26:6c:d0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc4a251d107600ccc01cf9f4a5c34f5f948a4b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:84:43:cd:ac:40:c3:8d:be:b0:63:28:5e:
aa:a0:1c:7a:dc:5c:5d:c8:3a:e0:51:b1:1c:5e:2d:
ae:06:1c:27:fe:03:a7:24:d8:16:12:cc:6b:e9:78:
52:2b:48:2d:24:a7:20:fc:fd:c0:78:3e:47:9e:33:
d7:ca:39:ed:d6:92:df:fa:9a:23:e8:18:df:38:d0:
8c:32:13:28:c6:6e:00:4b:13:91:b3:87:a5:d3:44:
67:d6:e3:3e:d8:b7:22:b0:3e:fc:e5:a0:d7:c0:00:
01:c7:e9:e5:c1:67:34:9f:8c:16:54:3e:93:97:7e:
e7:98:5f:fb:5d:5c:d6:1b:47:f1:95:d3:24:56:40:
51:31:e6:66:33:5a:65:b8:12:83:1c:6f:35:5a:d7:
34:a6:3f:18:aa:6f:34:71:1c:c0:29:e6:7b:02:ea:
6c:dd:ab:63:52:75:a8:01:1f:73:54:87:82:91:28:
b5:c5:c2:36:35:3d:93:ae:ea:09:ec:67:5a:c1:10:
67:ed:42:14:fd:92:b6:4f:70:6f:50:29:07:93:1c:
fd:ae:63:57:ca:57:8b:66:c6:38:2f:74:7b:07:b2:
3f:dc:6d:a7:90:51:ef:b7:93:9a:7e:0b:ff:85:9b:
e5:3e:c1:3b:b5:5f:a3:87:2f:a2:08:d0:93:07:6f:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:25:1D:10:76:00:CC:C0:1C:F9:F4:A5:C3:4F:5F:94:8A:4B:3F
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/zEolHRB2AMzAHPn0pcNPX5SKSz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.54.0/23
Signature Algorithm: sha256WithRSAEncryption
37:7a:e9:fa:65:eb:b1:77:cb:db:7d:7c:ae:84:72:ff:11:39:
34:0d:7a:9d:2a:33:45:44:a0:59:df:47:5b:7f:14:8c:97:b3:
e7:62:be:09:4c:d1:b7:87:99:dc:51:12:fd:17:f6:cc:fe:19:
d8:e1:d9:9c:6d:6e:a7:ea:ec:47:0f:f6:b8:e6:a6:18:e8:66:
24:97:b9:a2:9e:ab:32:85:13:2b:30:44:57:5a:4e:4c:52:33:
c9:f5:04:dc:db:fb:1e:d1:6c:3b:e1:67:91:f9:88:e3:6a:b6:
28:ed:a4:54:97:ea:85:c5:b6:68:ac:36:74:b0:bd:eb:7b:6c:
a9:10:bc:19:d0:01:df:1e:7b:3f:d4:5e:2d:6c:82:f4:66:12:
72:6f:96:0c:84:d9:1a:3e:77:32:8f:87:7a:35:10:a3:f4:d6:
c9:8b:91:ce:60:b2:97:a6:d1:aa:44:99:94:3c:68:96:e8:b3:
c4:05:aa:99:9e:0e:6f:85:07:9d:37:10:be:56:cf:d7:88:9e:
4f:c2:0f:2e:93:dd:f8:e7:53:f8:2f:67:c5:b6:a2:fc:5f:ed:
87:ed:5a:cd:c1:3c:95:d9:15:8a:39:81:4b:cf:12:86:c7:12:
17:61:ef:58:81:af:9e:cd:38:85:d1:90:2a:f9:1e:10:27:43:
da:f2:81:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjFUMEIB7es1dAnEmbNA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjUwMTAxMDE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzRhMjUxZDEwNzYwMGNjYzAxY2Y5ZjRhNWMzNGY1Zjk0OGE0YjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzteEQ82sQMONvrBjKF6qoBx63Fxd
yDrgUbEcXi2uBhwn/gOnJNgWEsxr6XhSK0gtJKcg/P3AeD5HnjPXyjnt1pLf+poj
6BjfONCMMhMoxm4ASxORs4el00Rn1uM+2LcisD785aDXwAABx+nlwWc0n4wWVD6T
l37nmF/7XVzWG0fxldMkVkBRMeZmM1pluBKDHG81Wtc0pj8Yqm80cRzAKeZ7Aups
3atjUnWoAR9zVIeCkSi1xcI2NT2TruoJ7GdawRBn7UIU/ZK2T3BvUCkHkxz9rmNX
yleLZsY4L3R7B7I/3G2nkFHvt5Oafgv/hZvlPsE7tV+jhy+iCNCTB29sBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMxKJR0QdgDMwBz59KXDT1+Uiks/MB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvekVvbEhSQjJBTXpBSFBuMHBjTlBYNVNLU3o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUo2MA0G
CSqGSIb3DQEBCwUAA4IBAQA3eun6Zeuxd8vbfXyuhHL/ETk0DXqdKjNFRKBZ30db
fxSMl7PnYr4JTNG3h5ncURL9F/bM/hnY4dmcbW6n6uxHD/a45qYY6GYkl7minqsy
hRMrMERXWk5MUjPJ9QTc2/se0Ww74WeR+YjjarYo7aRUl+qFxbZorDZ0sL3re2yp
ELwZ0AHfHns/1F4tbIL0ZhJyb5YMhNkaPncyj4d6NRCj9NbJi5HOYLKXptGqRJmU
PGiW6LPEBaqZng5vhQedNxC+Vs/XiJ5Pwg8uk93451P4L2fFtqL8X+2H7VrNwTyV
2RWKOYFLzxKGxxIXYe9Yga+ezTiF0ZAq+R4QJ0Pa8oFa
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:09 2025 by rpki-client