Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/ziMnIz8pla9bs2D29jTJqndKXk8.roa
File: ziMnIz8pla9bs2D29jTJqndKXk8.roa (raw, json)
Hash identifier: U7/5Qd4u7yjMw1Gd3Q3wAoDkW5U3I5yo6ZHAyt1g350=
Subject key identifier: CE:23:27:23:3F:29:95:AF:5B:B3:60:F6:F6:34:C9:AA:77:4A:5E:4F
Certificate issuer: /CN=a73fb508c8eb3d138c5055769ec2148369e869bc
Certificate serial: 05970C0F
Authority key identifier: A7:3F:B5:08:C8:EB:3D:13:8C:50:55:76:9E:C2:14:83:69:E8:69:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pz-1CMjrPROMUFV2nsIUg2noabw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/ziMnIz8pla9bs2D29jTJqndKXk8.roa
Signing time: Sat 01 Jan 2022 06:03:58 +0000
ROA not before: Sat 01 Jan 2022 06:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43618
IP address blocks: 194.147.23.0/24 maxlen: 24
194.147.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93785103 (0x5970c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73fb508c8eb3d138c5055769ec2148369e869bc
Validity
Not Before: Jan 1 06:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce2327233f2995af5bb360f6f634c9aa774a5e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:ed:91:b8:42:e2:4f:43:84:3f:dc:fd:5c:
a2:d7:46:a2:20:74:67:ce:7b:3a:25:b1:a0:f1:bf:
13:fb:c2:af:6e:4f:33:5d:66:68:0b:47:dd:5b:a1:
e6:ac:7f:b6:ac:3a:16:6b:57:93:d2:54:16:ee:fe:
31:2c:a1:af:94:5b:d7:84:35:0c:16:57:2e:b4:e2:
3f:91:00:eb:a3:0c:0e:9e:ff:a5:b1:4e:24:6d:0f:
ac:92:59:63:cd:95:e0:af:03:ca:c2:f2:a5:b5:8f:
d3:8b:3e:42:cf:7b:3b:a2:05:d3:cb:d4:96:f3:f3:
23:4f:43:f1:31:f6:75:59:0d:4d:e1:c5:85:17:a4:
2e:15:6e:55:20:19:7e:e7:8a:f5:5b:fd:88:bb:2a:
7b:ea:ec:36:16:44:46:3b:96:dd:05:fa:c3:b1:8f:
65:84:ee:bc:74:bb:84:1d:2a:e2:00:a9:e4:9f:1a:
b6:00:32:a3:e3:4e:68:32:79:05:67:50:16:3b:0b:
28:26:c5:9d:04:1c:1a:fe:60:85:3a:de:e5:63:93:
f4:3d:97:96:91:52:dc:ce:e5:6c:b5:ec:d0:ee:72:
41:dd:72:f9:dc:40:e8:3c:4c:bc:ec:39:e0:d5:4d:
d5:34:70:7a:17:dc:21:61:06:39:8b:49:bd:0f:96:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:23:27:23:3F:29:95:AF:5B:B3:60:F6:F6:34:C9:AA:77:4A:5E:4F
X509v3 Authority Key Identifier:
keyid:A7:3F:B5:08:C8:EB:3D:13:8C:50:55:76:9E:C2:14:83:69:E8:69:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz-1CMjrPROMUFV2nsIUg2noabw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/ziMnIz8pla9bs2D29jTJqndKXk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67a0b9-e16c-4d22-b9d0-037e99f1a6ab/1/pz-1CMjrPROMUFV2nsIUg2noabw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.22.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:82:54:86:f1:4d:57:85:de:cb:bb:dc:5f:85:41:62:4d:9d:
0f:75:06:bb:a4:c9:76:21:00:a8:5e:5b:b7:30:e2:1c:00:e2:
d1:fd:50:73:65:e8:6c:bb:2d:e7:3f:ac:72:bc:75:ac:05:98:
56:d0:36:25:55:70:44:f3:56:34:a8:ac:89:91:53:43:73:5e:
19:f7:60:cf:77:6a:cd:4d:ee:cd:de:4d:37:b6:1b:a9:de:4a:
94:b5:be:bf:82:62:85:1c:d1:9e:02:8e:d8:67:03:4e:14:57:
85:c3:a3:2e:30:f1:9d:70:e3:5d:dd:4e:8f:ef:d9:d5:e8:50:
0a:9a:da:b8:47:6f:0c:10:b8:c8:05:4a:f7:73:1a:ae:c4:4d:
30:ac:47:aa:41:0b:ca:77:d9:2e:2e:8c:aa:8a:76:fe:fc:71:
35:e0:70:a7:cb:29:63:97:ad:84:76:b7:8e:95:ea:9e:49:da:
59:43:a7:39:ee:3f:4e:69:a0:d9:1c:02:77:64:ee:28:35:84:
04:c0:9b:35:bf:d3:35:50:3e:2b:8b:3f:a6:88:be:80:ae:b8:
ee:c0:d8:12:42:c5:80:52:0e:a0:62:e8:d3:2f:15:48:be:f2:
8a:37:f1:55:20:ad:22:52:f5:01:fd:2d:d5:a1:79:37:d6:72:
70:e4:08:47
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBZcMDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NzNmYjUwOGM4ZWIzZDEzOGM1MDU1NzY5ZWMyMTQ4MzY5ZTg2OWJjMB4XDTIyMDEw
MTA2MDM1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2UyMzI3MjMzZjI5
OTVhZjViYjM2MGY2ZjYzNGM5YWE3NzRhNWU0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN9a7ZG4QuJPQ4Q/3P1cotdGoiB0Z857OiWxoPG/E/vCr25P
M11maAtH3Vuh5qx/tqw6FmtXk9JUFu7+MSyhr5Rb14Q1DBZXLrTiP5EA66MMDp7/
pbFOJG0PrJJZY82V4K8DysLypbWP04s+Qs97O6IF08vUlvPzI09D8TH2dVkNTeHF
hRekLhVuVSAZfueK9Vv9iLsqe+rsNhZERjuW3QX6w7GPZYTuvHS7hB0q4gCp5J8a
tgAyo+NOaDJ5BWdQFjsLKCbFnQQcGv5ghTre5WOT9D2XlpFS3M7lbLXs0O5yQd1y
+dxA6DxMvOw54NVN1TRwehfcIWEGOYtJvQ+W5j0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTOIycjPymVr1uzYPb2NMmqd0peTzAfBgNVHSMEGDAWgBSnP7UIyOs9E4xQ
VXaewhSDaehpvDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3B6LTFDTWpyUFJPTVVGVjJuc0lVZzJub2Fidy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWUvNjdhMGI5LWUxNmMtNGQyMi1iOWQwLTAzN2U5OWYxYTZhYi8x
L3ppTW5JejhwbGE5YnMyRDI5alRKcW5kS1hrOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUv
NjdhMGI5LWUxNmMtNGQyMi1iOWQwLTAzN2U5OWYxYTZhYi8xL3B6LTFDTWpyUFJP
TVVGVjJuc0lVZzJub2Fidy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcKTFjANBgkqhkiG9w0BAQsFAAOC
AQEAD4JUhvFNV4Xey7vcX4VBYk2dD3UGu6TJdiEAqF5btzDiHADi0f1Qc2XobLst
5z+scrx1rAWYVtA2JVVwRPNWNKisiZFTQ3NeGfdgz3dqzU3uzd5NN7Ybqd5KlLW+
v4JihRzRngKO2GcDThRXhcOjLjDxnXDjXd1Oj+/Z1ehQCprauEdvDBC4yAVK93Ma
rsRNMKxHqkELynfZLi6Mqop2/vxxNeBwp8spY5ethHa3jpXqnknaWUOnOe4/Tmmg
2RwCd2TuKDWEBMCbNb/TNVA+K4s/poi+gK647sDYEkLFgFIOoGLo0y8VSL7yijfx
VSCtIlL1Af0t1aF5N9ZycOQIRw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:49 2025 by rpki-client