Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa
File: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (raw, json)
Hash identifier: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=
Subject key identifier: 64:90:E7:2D:8D:02:99:6C:4F:3E:CD:FD:F2:6C:28:43:6C:ED:4D:30
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019427B59FC03F1BEF797F7317253EF0F742
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33965
IP address blocks: 193.47.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9f:c0:3f:1b:ef:79:7f:73:17:25:3e:f0:f7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6490e72d8d02996c4f3ecdfdf26c28436ced4d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:34:65:5d:cd:61:67:51:bf:29:34:03:2b:
f3:4b:5f:0d:ae:2c:3a:bd:67:b2:90:55:78:d9:40:
ef:02:13:f4:da:21:f9:eb:78:cb:eb:1e:15:a2:53:
e2:67:35:6b:06:6c:89:e9:6f:34:de:0a:a3:24:8a:
f6:80:74:46:3c:87:91:83:84:26:82:19:9f:05:44:
0b:65:59:fb:28:e5:04:a9:1e:02:57:f1:55:69:7d:
f4:22:ee:67:8d:e9:a1:d9:2e:98:8d:27:ba:94:59:
80:6a:e5:70:b0:0c:26:a4:ce:c4:67:9a:6c:63:99:
fb:0c:b8:ca:d0:60:ff:9e:16:12:24:67:97:24:c3:
4d:02:b6:60:a8:e5:f3:db:e8:1a:d9:5c:75:79:3e:
0d:84:51:38:98:0b:fe:3d:ca:dd:25:e9:b5:50:5d:
87:08:78:3a:4f:22:d0:fd:1d:aa:6a:c2:b7:23:a9:
46:c6:6d:bb:1c:f1:28:84:33:11:9a:f0:53:2a:3d:
30:82:b3:80:f0:cd:89:14:b5:d8:68:b3:59:21:02:
3a:a3:24:75:a4:61:43:f0:7e:59:81:a2:56:1a:c5:
b7:e8:07:37:f9:c1:76:25:13:57:ad:f8:84:13:c4:
ab:c5:af:4d:f2:fb:29:28:98:3f:ef:55:79:c5:a8:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:E7:2D:8D:02:99:6C:4F:3E:CD:FD:F2:6C:28:43:6C:ED:4D:30
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.132.0/22
Signature Algorithm: sha256WithRSAEncryption
67:ec:b2:9d:64:92:a3:55:a9:98:d3:e6:ed:30:23:0b:9a:84:
63:8f:dd:ca:06:1b:b6:8f:85:df:ed:21:39:ae:45:3c:fb:92:
d2:d2:21:f0:77:d0:53:5f:8c:09:a6:59:ec:fd:59:9c:40:5a:
f4:a7:7d:7b:d1:70:7b:b3:06:d5:54:06:a0:82:ef:7c:bd:53:
af:f8:c0:3f:5d:87:c5:90:f8:fc:12:ea:3a:15:8f:91:d9:22:
b9:6c:ab:62:12:88:8b:75:8c:2d:3d:a3:18:99:7f:5c:35:fc:
7b:81:1d:44:7d:33:53:5a:49:1b:47:8e:82:8e:ea:2f:ec:73:
b7:06:43:1f:2e:f6:b6:30:28:22:29:08:38:17:e5:3e:7a:7f:
dc:04:9a:53:99:8b:9f:ce:27:3a:c2:1b:21:fa:01:e5:c6:17:
84:99:47:48:4f:c5:66:b6:6e:e3:fd:60:80:4d:6c:22:96:1f:
9e:04:1f:ec:f1:47:6d:9d:b1:a1:16:1e:15:24:80:59:61:16:
6a:d1:a1:ba:81:e7:1b:ec:5a:cd:b0:a7:73:92:ca:92:1a:9d:
4b:55:98:97:3e:9f:d5:6e:d0:48:1e:07:ea:d4:91:3c:a7:b2:
a2:1a:21:3c:a9:75:9a:9d:57:34:ac:c2:47:d7:3e:dc:28:bf:
6e:2f:bb:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntZ/APxvveX9zFyU+8PdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWJmMGYxOWE5OTRjN2Y2ODZkNTVhYmZjMTY4NzVkMzll
NWQ0ZTIwHhcNMjUwMTAyMTU1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDkwZTcyZDhkMDI5OTZjNGYzZWNkZmRmMjZjMjg0MzZjZWQ0ZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwI0ZV3NYWdRvyk0AyvzS18Nriw6
vWeykFV42UDvAhP02iH563jL6x4VolPiZzVrBmyJ6W803gqjJIr2gHRGPIeRg4Qm
ghmfBUQLZVn7KOUEqR4CV/FVaX30Iu5njemh2S6YjSe6lFmAauVwsAwmpM7EZ5ps
Y5n7DLjK0GD/nhYSJGeXJMNNArZgqOXz2+ga2Vx1eT4NhFE4mAv+PcrdJem1UF2H
CHg6TyLQ/R2qasK3I6lGxm27HPEohDMRmvBTKj0wgrOA8M2JFLXYaLNZIQI6oyR1
pGFD8H5ZgaJWGsW36Ac3+cF2JRNXrfiEE8Srxa9N8vspKJg/71V5xailOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGSQ5y2NAplsTz7N/fJsKENs7U0wMB8GA1UdIwQY
MBaAFM9b8PGamUx/aG1Vq/wWh1055dTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMt
MzQwZmFjM2Y2YmFmLzEvWkpEbkxZMENtV3hQUHMzOThtd29RMnp0VFRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMtMzQwZmFjM2Y2YmFm
LzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwS+EMA0G
CSqGSIb3DQEBCwUAA4IBAQBn7LKdZJKjVamY0+btMCMLmoRjj93KBhu2j4Xf7SE5
rkU8+5LS0iHwd9BTX4wJplns/VmcQFr0p3170XB7swbVVAaggu98vVOv+MA/XYfF
kPj8Euo6FY+R2SK5bKtiEoiLdYwtPaMYmX9cNfx7gR1EfTNTWkkbR46Cjuov7HO3
BkMfLva2MCgiKQg4F+U+en/cBJpTmYufzic6whsh+gHlxheEmUdIT8Vmtm7j/WCA
TWwilh+eBB/s8UdtnbGhFh4VJIBZYRZq0aG6gecb7FrNsKdzksqSGp1LVZiXPp/V
btBIHgfq1JE8p7KiGiE8qXWanVc0rMJH1z7cKL9uL7vv
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:57 2025 by rpki-client