Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/zP7I_99KOzw-K2C5FfXk3yHXz-w.roa
File: zP7I_99KOzw-K2C5FfXk3yHXz-w.roa (raw, json)
Hash identifier: T5aWKttVvr+9VLqxXTSB6NNBr8xz1g39FEsAQB4Qzc0=
Subject key identifier: CC:FE:C8:FF:DF:4A:3B:3C:3E:2B:60:B9:15:F5:E4:DF:21:D7:CF:EC
Certificate issuer: /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial: 0194258FC6D69A05F6F20E42052F8681E285
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/zP7I_99KOzw-K2C5FfXk3yHXz-w.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 65011
IP address blocks: 185.3.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c6:d6:9a:05:f6:f2:0e:42:05:2f:86:81:e2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccfec8ffdf4a3b3c3e2b60b915f5e4df21d7cfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:6b:33:93:8c:e8:62:45:fb:49:fd:c3:7d:
bc:f3:63:71:25:b5:a3:02:45:76:06:60:e9:08:b0:
e5:9d:08:b5:b1:50:17:32:90:75:05:48:77:c1:be:
70:e9:ea:fe:31:ca:89:f9:81:69:c0:93:21:02:73:
2f:d0:7c:ad:5d:9e:ec:26:31:dc:6d:03:ec:0f:81:
2f:30:33:d6:ea:16:e2:a9:c1:09:a0:ed:4c:17:87:
df:bf:08:e8:43:2b:8e:f8:51:17:db:8c:43:18:23:
b7:19:09:13:41:49:51:43:a0:ec:f1:1f:b6:4a:0c:
53:56:21:f0:6a:97:7e:dc:43:15:0f:ee:4a:e0:34:
ca:dd:0e:d7:e4:f5:42:72:4f:b1:63:65:d1:cc:2a:
ce:69:ad:6d:3b:63:b3:52:63:94:e5:e5:3c:d6:d1:
c0:2f:ce:6e:e0:55:aa:f4:d0:5c:d8:9a:fc:54:22:
02:54:a4:95:ac:cd:cb:69:12:dc:60:a5:62:9c:50:
2a:77:c1:0d:10:2b:06:40:c0:22:f3:d6:fa:c0:69:
71:65:33:72:0d:fc:bb:67:f5:a6:da:05:cb:8a:af:
32:69:76:f4:a2:25:4a:81:61:d6:61:7f:3e:b1:4e:
65:6e:68:21:1c:0a:c3:37:05:0f:86:a7:f1:1d:d2:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FE:C8:FF:DF:4A:3B:3C:3E:2B:60:B9:15:F5:E4:DF:21:D7:CF:EC
X509v3 Authority Key Identifier:
keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/zP7I_99KOzw-K2C5FfXk3yHXz-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.30.0/23
Signature Algorithm: sha256WithRSAEncryption
16:95:a4:c2:b7:04:92:ca:90:63:c7:b9:fd:bc:be:03:e7:66:
dd:9e:50:1e:f8:29:03:09:71:a3:29:16:6a:fc:77:02:1d:4e:
95:b8:28:af:b1:5c:44:46:e1:c6:30:5f:f8:3f:51:89:c3:56:
be:1c:cd:cf:64:34:54:2c:ad:8f:c0:2e:d8:09:17:45:72:38:
9b:9b:a6:6c:08:06:0e:84:b8:da:a4:ac:69:88:3a:73:40:3c:
a5:a5:05:1b:11:bf:d0:4f:e3:c3:f6:61:ed:d2:d0:19:7a:63:
a3:8b:be:f3:12:3d:00:84:13:5e:c0:87:ad:fa:f6:ed:e7:9c:
5c:a3:0e:a9:7c:d9:29:3e:fe:25:8d:37:b6:97:5d:3b:21:08:
74:41:73:7f:62:03:37:8e:98:76:20:b3:a1:c9:eb:70:b5:c9:
52:36:35:95:38:8e:d7:b9:5c:89:54:5f:04:e3:41:7f:4e:16:
a4:b2:f3:08:4e:a7:5a:4d:bd:75:a0:b1:86:1e:be:71:fb:ef:
8a:0f:a9:3b:40:bb:55:3b:5b:74:2f:aa:1d:2a:83:ab:19:c2:
af:f1:54:9a:b9:e0:32:19:6f:d1:1e:c3:45:33:56:11:28:a1:
a0:d3:eb:34:49:9e:85:9f:89:68:d3:84:2a:cb:85:10:83:97:
5c:91:cb:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj8bWmgX28g5CBS+GgeKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMTY3YmI2YjA2MWZmZmE2MjlkZDJhODRjY2Y3ZGI0NGM3
MWEzNTEwHhcNMjUwMTAyMDU0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2ZlYzhmZmRmNGEzYjNjM2UyYjYwYjkxNWY1ZTRkZjIxZDdjZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYlrM5OM6GJF+0n9w32882NxJbWj
AkV2BmDpCLDlnQi1sVAXMpB1BUh3wb5w6er+McqJ+YFpwJMhAnMv0HytXZ7sJjHc
bQPsD4EvMDPW6hbiqcEJoO1MF4ffvwjoQyuO+FEX24xDGCO3GQkTQUlRQ6Ds8R+2
SgxTViHwapd+3EMVD+5K4DTK3Q7X5PVCck+xY2XRzCrOaa1tO2OzUmOU5eU81tHA
L85u4FWq9NBc2Jr8VCICVKSVrM3LaRLcYKVinFAqd8ENECsGQMAi89b6wGlxZTNy
Dfy7Z/Wm2gXLiq8yaXb0oiVKgWHWYX8+sU5lbmghHArDNwUPhqfxHdKZUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMz+yP/fSjs8PitguRX15N8h18/sMB8GA1UdIwQY
MBaAFOwWe7awYf/6Yp3SqEzPfbRMcaNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0JaN3RyQmhfX3BpbmRLb1RNOTl0RXh4bzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mNTVkNDQtNTg5My00YzIyLWIwYjct
YzY1NWFkNTk0MTkzLzEvelA3SV85OUtPenctSzJDNUZmWGszeUhYei13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9mNTVkNDQtNTg5My00YzIyLWIwYjctYzY1NWFkNTk0MTkz
LzEvN0JaN3RyQmhfX3BpbmRLb1RNOTl0RXh4bzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQMeMA0G
CSqGSIb3DQEBCwUAA4IBAQAWlaTCtwSSypBjx7n9vL4D52bdnlAe+CkDCXGjKRZq
/HcCHU6VuCivsVxERuHGMF/4P1GJw1a+HM3PZDRULK2PwC7YCRdFcjibm6ZsCAYO
hLjapKxpiDpzQDylpQUbEb/QT+PD9mHt0tAZemOji77zEj0AhBNewIet+vbt55xc
ow6pfNkpPv4ljTe2l107IQh0QXN/YgM3jph2ILOhyetwtclSNjWVOI7XuVyJVF8E
40F/ThaksvMITqdaTb11oLGGHr5x+++KD6k7QLtVO1t0L6odKoOrGcKv8VSaueAy
GW/RHsNFM1YRKKGg0+s0SZ6Fn4lo04Qqy4UQg5dckcse
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:27:47 2025 by rpki-client