Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/EZLCIrzpeAQOgAoPRAnL9Jsnyns.roa
File: EZLCIrzpeAQOgAoPRAnL9Jsnyns.roa (raw, json)
Hash identifier: zKcPyyZHtwlaeSTOg+sebV3wQH2iDfrkeYXwI2IGAm8=
Subject key identifier: 11:92:C2:22:BC:E9:78:04:0E:80:0A:0F:44:09:CB:F4:9B:27:CA:7B
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 019425FC63973F45EB4BC6A70E20D027A16C
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/EZLCIrzpeAQOgAoPRAnL9Jsnyns.roa
Signing time: Thu 02 Jan 2025 07:48:05 +0000
ROA not before: Thu 02 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206754
IP address blocks: 185.194.112.0/24 maxlen: 24
2a0a:4a40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:63:97:3f:45:eb:4b:c6:a7:0e:20:d0:27:a1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jan 2 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1192c222bce978040e800a0f4409cbf49b27ca7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2d:cd:77:08:8a:25:33:fe:41:77:56:3f:48:
4b:f8:bc:85:39:6f:fa:d7:d4:30:93:f4:e2:bf:29:
39:29:b8:f3:c9:2a:83:7c:6a:aa:9a:aa:49:23:95:
32:d4:3f:69:77:7e:57:71:34:1c:ad:2a:fd:63:b5:
db:6c:45:ab:ed:c2:e4:61:19:93:f1:c2:0f:d1:6e:
7a:5b:dc:e7:94:4f:25:43:09:e1:f4:be:cc:1f:1b:
a8:8b:7e:78:c3:ce:bb:35:3d:08:e3:9f:f7:84:d2:
f8:b7:6d:5d:55:91:02:9d:8f:40:fd:85:c2:21:96:
a3:61:a4:5d:31:c6:a4:85:6e:00:3f:49:6c:60:6f:
e8:6c:cf:a2:e3:60:c5:a5:64:8a:2d:e9:2b:29:54:
cf:a2:8d:a8:98:c5:7b:25:d0:04:71:62:b5:89:08:
8b:65:10:e9:39:46:db:62:94:74:85:76:61:df:11:
2e:df:f0:7d:a4:8b:db:a1:ac:3b:ea:2e:02:80:88:
aa:ad:9a:d3:a9:70:10:4f:e7:aa:25:78:e5:2e:a9:
52:a1:2b:5f:d5:9e:4e:ce:5a:1c:bf:fe:79:23:37:
16:b1:e3:9e:74:32:99:2c:71:37:61:99:79:49:65:
68:a2:84:78:38:e2:c0:fd:77:6c:68:bc:ed:f2:fb:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:C2:22:BC:E9:78:04:0E:80:0A:0F:44:09:CB:F4:9B:27:CA:7B
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/EZLCIrzpeAQOgAoPRAnL9Jsnyns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.112.0/24
IPv6:
2a0a:4a40::/29
Signature Algorithm: sha256WithRSAEncryption
06:c4:dc:65:6e:51:a2:02:a5:ac:6d:23:43:2d:0b:33:00:ad:
d6:84:fd:e4:af:d3:91:24:aa:de:23:4c:e5:cf:e0:68:b7:5a:
6c:68:d0:9c:8d:2c:eb:78:81:01:e4:4f:13:6d:28:9e:40:01:
b6:15:5c:81:34:97:e1:90:b4:83:4f:f8:fd:dd:0a:95:d0:df:
71:9c:3a:d2:bc:15:40:67:84:24:63:15:56:2c:9f:ba:4a:b7:
37:ec:80:1d:27:d9:2c:e1:ea:ac:fe:cb:bf:7f:c0:43:01:b6:
19:20:95:2a:60:bb:6e:76:4a:9c:11:06:b6:ae:05:27:7e:a2:
b9:96:00:9d:e6:a0:84:df:d9:da:4b:ce:f4:ff:01:27:ad:cd:
25:2e:b3:22:69:62:44:34:27:b7:b1:6a:45:2c:63:64:f7:72:
2d:18:58:6a:9a:81:d5:7c:f7:41:85:49:f0:50:87:04:03:2d:
94:71:e8:61:e7:c3:79:c9:e0:bd:8d:ec:64:f0:c9:6a:bb:08:
b9:ac:36:1d:7f:09:ad:6c:b1:48:44:90:ae:31:31:91:88:bd:
7c:81:7f:24:1a:62:e7:93:43:22:ca:4d:df:17:83:14:20:48:
b4:fc:d1:8c:59:80:5f:13:2a:b9:0c:20:a3:60:a2:b6:48:6f:
11:c3:0e:e8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQl/GOXP0XrS8anDiDQJ6FsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1
YjEwNjgwHhcNMjUwMTAyMDc0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTkyYzIyMmJjZTk3ODA0MGU4MDBhMGY0NDA5Y2JmNDliMjdjYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC3NdwiKJTP+QXdWP0hL+LyFOW/6
19Qwk/Tivyk5KbjzySqDfGqqmqpJI5Uy1D9pd35XcTQcrSr9Y7XbbEWr7cLkYRmT
8cIP0W56W9znlE8lQwnh9L7MHxuoi354w867NT0I45/3hNL4t21dVZECnY9A/YXC
IZajYaRdMcakhW4AP0lsYG/obM+i42DFpWSKLekrKVTPoo2omMV7JdAEcWK1iQiL
ZRDpOUbbYpR0hXZh3xEu3/B9pIvboaw76i4CgIiqrZrTqXAQT+eqJXjlLqlSoStf
1Z5Ozlocv/55IzcWseOedDKZLHE3YZl5SWVoooR4OOLA/XdsaLzt8vv7cwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBGSwiK86XgEDoAKD0QJy/SbJ8p7MB8GA1UdIwQY
MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt
MGY1ZjA5YjJlYjE0LzEvRVpMQ0lyenBlQVFPZ0FvUFJBbkw5SnNueW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0
LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAucJwMA0E
AgACMAcDBQMqCkpAMA0GCSqGSIb3DQEBCwUAA4IBAQAGxNxlblGiAqWsbSNDLQsz
AK3WhP3kr9ORJKreI0zlz+Bot1psaNCcjSzreIEB5E8TbSieQAG2FVyBNJfhkLSD
T/j93QqV0N9xnDrSvBVAZ4QkYxVWLJ+6Src37IAdJ9ks4eqs/su/f8BDAbYZIJUq
YLtudkqcEQa2rgUnfqK5lgCd5qCE39naS870/wEnrc0lLrMiaWJENCe3sWpFLGNk
93ItGFhqmoHVfPdBhUnwUIcEAy2Ucehh58N5yeC9jexk8Mlquwi5rDYdfwmtbLFI
RJCuMTGRiL18gX8kGmLnk0Miyk3fF4MUIEi0/NGMWYBfEyq5DCCjYKK2SG8Rww7o
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:21:37 2025 by rpki-client