Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZS9RR0wiFpwN3wNz_U3G2xnsVHY.roa
File: ZS9RR0wiFpwN3wNz_U3G2xnsVHY.roa (raw, json)
Hash identifier: UCixvcH3yXR5iisgRW9RGv8rJbb8/BSlef0jE/STBV8=
Subject key identifier: 65:2F:51:47:4C:22:16:9C:0D:DF:03:73:FD:4D:C6:DB:19:EC:54:76
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824C902657728ECD544873AB1FDD9A6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZS9RR0wiFpwN3wNz_U3G2xnsVHY.roa
Signing time: Thu 02 Jan 2025 17:51:26 +0000
ROA not before: Thu 02 Jan 2025 17:51:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 94.156.177.0/24 maxlen: 24
94.156.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:c9:02:65:77:28:ec:d5:44:87:3a:b1:fd:d9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=652f51474c22169c0ddf0373fd4dc6db19ec5476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d2:d4:aa:d7:56:e7:c7:ce:cc:d2:5f:f8:3a:
89:93:f9:d3:31:33:9e:30:8e:14:b5:13:54:a1:16:
76:56:4a:74:d3:c8:88:e9:1b:4a:4b:dd:a9:29:05:
14:91:37:fa:0b:b1:d9:26:6d:ed:d6:2e:18:3a:a1:
d2:d1:67:de:d7:3a:d1:e6:92:46:25:1d:d6:14:f3:
cf:bb:05:0a:b9:08:64:27:63:71:41:c1:67:3f:8a:
7c:1e:a9:3d:b3:fa:5a:68:d4:85:44:9f:3a:99:8e:
f7:1a:8f:c3:0c:16:e1:c9:30:1a:61:f6:f7:c3:88:
9c:c8:23:b1:d1:3e:dc:b4:ea:ac:69:6e:c2:b4:16:
dc:c2:34:a3:81:76:88:ae:4a:1a:79:72:81:94:de:
24:ff:94:b4:45:bd:98:35:c1:7c:10:ef:d5:b5:c0:
52:9d:30:bf:72:15:42:e4:f2:b4:49:21:0d:9f:d5:
59:49:57:62:70:4d:0c:14:13:46:b9:01:76:c8:bd:
dd:f4:0b:cd:01:29:7f:c8:ab:1c:97:de:73:8b:90:
29:8f:f0:75:4f:ce:c1:75:38:1b:ff:4a:bd:ac:62:
f0:2a:f0:50:5c:85:d9:b0:bd:58:61:d6:c8:79:b6:
90:58:f6:66:64:ed:43:d9:ab:e2:08:0b:8c:28:e1:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:51:47:4C:22:16:9C:0D:DF:03:73:FD:4D:C6:DB:19:EC:54:76
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZS9RR0wiFpwN3wNz_U3G2xnsVHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.177.0/24
94.156.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1c:09:3f:de:ff:d2:8b:69:1a:2b:7a:14:11:94:47:f3:6c:
78:77:d2:0e:11:d6:ef:f1:e0:ed:99:05:22:58:d0:c3:29:d3:
57:ef:c7:24:23:e6:f5:90:f7:1a:64:e4:73:f7:f1:40:8e:a1:
a6:ee:2c:06:68:63:92:95:dc:06:7a:8b:43:5e:85:17:2f:8b:
1c:bb:65:ac:d0:0d:4b:f9:48:5a:22:f1:1e:05:97:89:6a:de:
8f:10:a3:b0:99:34:71:c0:5b:46:d5:57:fd:38:9d:19:0a:5e:
06:69:e5:5b:46:f1:85:fd:5e:4c:5f:74:57:47:1f:bd:1d:6a:
a3:51:18:51:b9:e5:96:c0:50:e6:eb:42:eb:2e:54:f4:cf:d0:
6b:8d:5a:98:38:71:ef:d9:bd:42:3c:6a:29:04:ae:1d:64:75:
dc:ef:8d:ed:ad:af:3d:bf:60:56:0e:fb:ad:9e:60:c2:1f:66:
17:5f:05:45:5a:23:70:1b:d5:e7:3e:e7:e2:1a:02:99:ac:ea:
93:6d:40:7c:7f:45:5a:60:8f:38:81:04:93:b3:75:27:1d:52:
c9:d1:ee:74:9a:af:96:08:46:6c:44:a0:f8:5e:01:a4:ad:f7:
b6:2a:c2:ff:38:1f:c3:2b:78:57:36:80:5c:5b:8e:23:9e:46:
38:22:ff:39
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJMkCZXco7NVEhzqx/dmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTJmNTE0NzRjMjIxNjljMGRkZjAzNzNmZDRkYzZkYjE5ZWM1NDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9LUqtdW58fOzNJf+DqJk/nTMTOe
MI4UtRNUoRZ2Vkp008iI6RtKS92pKQUUkTf6C7HZJm3t1i4YOqHS0Wfe1zrR5pJG
JR3WFPPPuwUKuQhkJ2NxQcFnP4p8Hqk9s/paaNSFRJ86mY73Go/DDBbhyTAaYfb3
w4icyCOx0T7ctOqsaW7CtBbcwjSjgXaIrkoaeXKBlN4k/5S0Rb2YNcF8EO/VtcBS
nTC/chVC5PK0SSENn9VZSVdicE0MFBNGuQF2yL3d9AvNASl/yKscl95zi5Apj/B1
T87BdTgb/0q9rGLwKvBQXIXZsL1YYdbIebaQWPZmZO1D2aviCAuMKOHfxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGUvUUdMIhacDd8Dc/1NxtsZ7FR2MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWlM5UlIwd2lGcHdOM3dOel9VM0cyeG5zVkhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpyxAwQA
XpzjMA0GCSqGSIb3DQEBCwUAA4IBAQB/HAk/3v/Si2kaK3oUEZRH82x4d9IOEdbv
8eDtmQUiWNDDKdNX78ckI+b1kPcaZORz9/FAjqGm7iwGaGOSldwGeotDXoUXL4sc
u2Ws0A1L+UhaIvEeBZeJat6PEKOwmTRxwFtG1Vf9OJ0ZCl4GaeVbRvGF/V5MX3RX
Rx+9HWqjURhRueWWwFDm60LrLlT0z9BrjVqYOHHv2b1CPGopBK4dZHXc743tra89
v2BWDvutnmDCH2YXXwVFWiNwG9XnPufiGgKZrOqTbUB8f0VaYI84gQSTs3UnHVLJ
0e50mq+WCEZsRKD4XgGkrfe2KsL/OB/DK3hXNoBcW44jnkY4Iv85
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:34 2025 by rpki-client