Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa
File: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (raw, json)
Hash identifier: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=
Subject key identifier: 64:C0:C7:7E:2A:2B:01:07:87:88:0A:F6:55:2A:37:D4:8A:EC:5F:D6
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F66F80EABC04508CB49D9219440D2
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 212.30.33.0/24 maxlen: 24
212.30.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:66:f8:0e:ab:c0:45:08:cb:49:d9:21:94:40:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64c0c77e2a2b010787880af6552a37d48aec5fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:d3:df:4d:43:22:6d:dd:d2:9f:39:e5:a3:
94:e9:9d:00:61:78:2e:68:33:ef:2f:fc:d9:41:3d:
05:30:97:cc:70:93:3f:de:ba:9d:9f:28:bf:fe:8c:
33:f8:05:ca:0d:fe:68:c7:51:1d:be:e3:60:ee:23:
a5:18:9c:dc:bc:60:27:2c:e8:0d:5f:a5:de:19:93:
e8:23:5c:29:57:ed:f2:5b:7b:a1:39:13:86:29:f9:
22:36:e5:ef:b4:33:1d:3f:21:71:f4:d4:06:d3:60:
05:e6:e8:29:03:79:16:61:ff:93:0b:17:58:eb:a2:
3b:bd:61:ed:7b:73:f3:46:48:64:f1:97:3e:99:d0:
91:55:0f:3f:2e:db:c1:1c:06:00:dc:09:20:0d:6b:
f2:f3:84:ac:9d:fe:44:d7:38:ec:ec:e0:99:44:3c:
f0:ae:ec:5c:81:c5:08:1d:b1:24:73:96:38:07:e1:
53:47:c2:95:ec:84:c8:0a:29:18:30:76:27:f8:24:
ec:8a:db:79:f3:29:5f:1d:45:c6:4d:44:2c:4c:26:
8c:41:6c:04:6e:2a:de:d3:9e:52:ba:af:e7:f6:50:
60:dc:0a:8d:46:47:f8:d7:64:70:17:0a:e7:fd:92:
77:90:1e:5f:26:c1:bc:2b:30:2e:b1:30:f5:df:6f:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C0:C7:7E:2A:2B:01:07:87:88:0A:F6:55:2A:37:D4:8A:EC:5F:D6
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.33.0/24
212.30.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:10:b6:61:0d:80:7e:11:f3:e2:11:7f:9c:df:0a:3d:9c:53:
e2:88:59:03:fc:33:41:5d:56:e9:aa:3c:ae:34:f8:f8:63:b6:
98:ff:4c:96:5a:ae:c4:85:ef:d8:16:7a:b5:45:0c:86:7c:e5:
43:e8:6c:bf:44:09:8e:fc:96:42:90:eb:7c:e3:7a:ca:bf:84:
4b:66:00:18:06:d5:1c:0e:88:05:b1:b5:c1:c2:08:eb:da:4d:
81:01:b0:06:a3:00:c5:fa:49:4d:34:fd:48:55:d8:a5:52:48:
d0:ce:61:4b:26:25:62:94:07:35:2d:fb:d4:78:c6:74:aa:41:
80:ef:e2:3c:2a:9a:bf:a1:2e:e3:a2:a9:7e:c1:97:84:f2:62:
cd:c0:db:8d:15:1b:bb:1c:eb:1d:f8:8c:b9:0c:e7:72:44:05:
bf:12:6d:eb:09:53:29:66:b4:48:4c:ab:01:96:73:26:72:ec:
74:47:d6:51:a6:8b:d0:6b:32:58:6e:9c:d2:89:e6:67:b7:e9:
e6:a3:b4:29:a5:47:ae:67:ee:b0:41:6e:3f:c6:b0:cd:08:f9:
e2:5c:9e:63:18:ea:f5:a9:4d:b4:6a:b1:44:68:77:05:f0:2d:
3a:ce:1d:12:75:75:81:cf:d6:2a:c1:e6:27:f2:cc:c7:6e:d3:
d8:6c:d1:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj2b4DqvARQjLSdkhlEDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjUwMTAyMDU0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGMwYzc3ZTJhMmIwMTA3ODc4ODBhZjY1NTJhMzdkNDhhZWM1ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaHT301DIm3d0p855aOU6Z0AYXgu
aDPvL/zZQT0FMJfMcJM/3rqdnyi//owz+AXKDf5ox1EdvuNg7iOlGJzcvGAnLOgN
X6XeGZPoI1wpV+3yW3uhOROGKfkiNuXvtDMdPyFx9NQG02AF5ugpA3kWYf+TCxdY
66I7vWHte3PzRkhk8Zc+mdCRVQ8/LtvBHAYA3AkgDWvy84Ssnf5E1zjs7OCZRDzw
ruxcgcUIHbEkc5Y4B+FTR8KV7ITICikYMHYn+CTsitt58ylfHUXGTUQsTCaMQWwE
bire055Suq/n9lBg3AqNRkf412RwFwrn/ZJ3kB5fJsG8KzAusTD1329RZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGTAx34qKwEHh4gK9lUqN9SK7F/WMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvWk1ESGZpb3JBUWVIaUFyMlZTbzMxSXJzWDlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1B4hAwQA
1B48MA0GCSqGSIb3DQEBCwUAA4IBAQCcELZhDYB+EfPiEX+c3wo9nFPiiFkD/DNB
XVbpqjyuNPj4Y7aY/0yWWq7Ehe/YFnq1RQyGfOVD6Gy/RAmO/JZCkOt843rKv4RL
ZgAYBtUcDogFsbXBwgjr2k2BAbAGowDF+klNNP1IVdilUkjQzmFLJiVilAc1LfvU
eMZ0qkGA7+I8Kpq/oS7joql+wZeE8mLNwNuNFRu7HOsd+Iy5DOdyRAW/Em3rCVMp
ZrRITKsBlnMmcux0R9ZRpovQazJYbpzSieZnt+nmo7QppUeuZ+6wQW4/xrDNCPni
XJ5jGOr1qU20arFEaHcF8C06zh0SdXWBz9YqweYn8szHbtPYbNG2
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:32:40 2025 by rpki-client