Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/zGOXqDkKzJdU0p47Wrv4dob9WRY.roa
File: zGOXqDkKzJdU0p47Wrv4dob9WRY.roa (raw, json)
Hash identifier: h/PYhmoQAY7EhuYv56qskYi6sqC9Lx5gg5uwdXV3h5s=
Subject key identifier: CC:63:97:A8:39:0A:CC:97:54:D2:9E:3B:5A:BB:F8:76:86:FD:59:16
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 0194258F2D0E08F243FA01C0BCC82942DACE
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/zGOXqDkKzJdU0p47Wrv4dob9WRY.roa
Signing time: Thu 02 Jan 2025 05:48:47 +0000
ROA not before: Thu 02 Jan 2025 05:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 85.92.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2d:0e:08:f2:43:fa:01:c0:bc:c8:29:42:da:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Jan 2 05:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc6397a8390acc9754d29e3b5abbf87686fd5916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:f7:de:86:98:a8:3b:b5:95:3f:a6:78:fc:
18:cf:b7:22:a2:5d:4d:94:48:a6:8d:f1:ec:15:c3:
76:bb:ae:31:b9:b8:ff:ff:cb:91:5b:03:86:1b:f3:
19:5e:bd:9c:d5:7f:c1:1a:39:f9:06:67:7a:41:53:
ca:a8:22:4c:7b:dd:3e:3c:a6:2b:d9:be:98:4e:78:
26:50:19:99:f9:57:8f:87:09:b1:c6:4a:b2:e4:cd:
c4:e1:eb:4a:d2:d2:00:d7:66:81:ad:28:82:77:b1:
a1:c7:35:b6:c6:b1:75:98:ee:76:ae:c4:24:30:be:
4b:17:aa:d2:58:69:e9:d9:3f:0c:b0:1e:28:b2:4b:
7b:d9:2f:2d:24:93:84:f6:33:db:38:b2:e4:8d:c2:
b3:b0:69:25:01:aa:97:2d:87:7b:ef:d1:c6:04:2d:
36:37:9d:15:14:a1:74:17:47:11:44:86:2d:cf:b5:
86:82:0c:51:c7:58:7f:d5:77:a9:db:1b:f4:55:2a:
74:e0:86:7b:10:23:c8:95:d7:ea:a8:3d:25:46:bc:
47:5f:88:c7:88:d8:d4:1d:9c:4e:78:e8:67:0f:1f:
b0:7d:e1:56:9a:92:5d:4f:3f:88:34:4a:8d:02:a7:
68:74:83:ce:c8:19:91:5e:1a:cd:22:5c:c2:c8:68:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:63:97:A8:39:0A:CC:97:54:D2:9E:3B:5A:BB:F8:76:86:FD:59:16
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/zGOXqDkKzJdU0p47Wrv4dob9WRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:80:00:b2:24:17:2d:4d:c7:c9:62:97:97:be:45:f2:d4:d1:
65:38:4d:fb:b6:b0:b0:d4:f7:50:78:56:cc:f9:a1:a0:e6:b4:
ec:e0:47:7a:fb:e0:b6:2b:83:36:96:71:f0:8c:6a:9f:ba:62:
59:9b:9a:52:59:80:78:c3:f8:12:43:f1:bc:c3:83:e2:ad:d6:
25:cd:be:5b:b2:b2:85:fb:25:2f:14:d1:c0:ee:a5:df:61:6c:
d1:e6:93:64:87:90:2c:d5:57:f1:25:33:bc:21:0b:06:13:45:
17:2c:02:f6:5d:a4:c1:8b:9c:24:4b:1f:15:84:e1:fa:47:b0:
c9:f8:45:f7:9b:e1:bd:fe:aa:48:81:6b:8c:dc:8a:05:52:c1:
2d:7d:b9:48:42:77:36:06:ec:d3:70:c1:70:cc:8e:9b:20:e3:
4a:ae:8e:70:55:97:6d:e8:ee:0f:f3:ac:39:19:38:09:39:e0:
f9:06:21:af:7d:b5:50:98:77:78:74:9e:df:2c:08:e0:5b:dd:
96:ee:a2:5a:ce:3d:42:61:cb:8b:9d:94:52:0f:46:05:6f:5c:
0f:cb:b9:71:b0:2b:7f:e0:97:42:75:18:fc:74:44:9c:fd:d1:
d0:46:30:d3:ab:a0:59:44:62:12:d4:bd:11:00:9e:25:60:f0:
a7:13:23:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljy0OCPJD+gHAvMgpQtrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NWZiY2I0ZWEzMDhhOThiMDkzOTc2MjVlNjM4NjYzODNj
MTZkZDAwHhcNMjUwMTAyMDU0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzYzOTdhODM5MGFjYzk3NTRkMjllM2I1YWJiZjg3Njg2ZmQ1OTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTL33oaYqDu1lT+mePwYz7ciol1N
lEimjfHsFcN2u64xubj//8uRWwOGG/MZXr2c1X/BGjn5Bmd6QVPKqCJMe90+PKYr
2b6YTngmUBmZ+VePhwmxxkqy5M3E4etK0tIA12aBrSiCd7GhxzW2xrF1mO52rsQk
ML5LF6rSWGnp2T8MsB4oskt72S8tJJOE9jPbOLLkjcKzsGklAaqXLYd779HGBC02
N50VFKF0F0cRRIYtz7WGggxRx1h/1Xep2xv0VSp04IZ7ECPIldfqqD0lRrxHX4jH
iNjUHZxOeOhnDx+wfeFWmpJdTz+INEqNAqdodIPOyBmRXhrNIlzCyGgjeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMxjl6g5CsyXVNKeO1q7+HaG/VkWMB8GA1UdIwQY
MBaAFKZfvLTqMIqYsJOXYl5jhmODwW3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUt
NjJkNDJmZTZmZDNjLzEvekdPWHFEa0t6SmRVMHA0N1dydjRkb2I5V1JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUtNjJkNDJmZTZmZDNj
LzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVxlMA0G
CSqGSIb3DQEBCwUAA4IBAQCKgACyJBctTcfJYpeXvkXy1NFlOE37trCw1PdQeFbM
+aGg5rTs4Ed6++C2K4M2lnHwjGqfumJZm5pSWYB4w/gSQ/G8w4PirdYlzb5bsrKF
+yUvFNHA7qXfYWzR5pNkh5As1VfxJTO8IQsGE0UXLAL2XaTBi5wkSx8VhOH6R7DJ
+EX3m+G9/qpIgWuM3IoFUsEtfblIQnc2BuzTcMFwzI6bIONKro5wVZdt6O4P86w5
GTgJOeD5BiGvfbVQmHd4dJ7fLAjgW92W7qJazj1CYcuLnZRSD0YFb1wPy7lxsCt/
4JdCdRj8dESc/dHQRjDTq6BZRGIS1L0RAJ4lYPCnEyNF
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:56 2025 by rpki-client