Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ZZfcddqU19ROlobnh6mRecKE7t4.roa
File: ZZfcddqU19ROlobnh6mRecKE7t4.roa (raw, json)
Hash identifier: Aid8GrNChGUyyEO2fUfPk30FrIsFSQa93lgk6hvY3cY=
Subject key identifier: 65:97:DC:75:DA:94:D7:D4:4E:96:86:E7:87:A9:91:79:C2:84:EE:DE
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019409F688372867D412F769D18FD249E2EB
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ZZfcddqU19ROlobnh6mRecKE7t4.roa
Signing time: Fri 27 Dec 2024 21:12:19 +0000
ROA not before: Fri 27 Dec 2024 21:12:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212219
IP address blocks: 176.96.129.0/24 maxlen: 24
176.96.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:09:f6:88:37:28:67:d4:12:f7:69:d1:8f:d2:49:e2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 27 21:12:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6597dc75da94d7d44e9686e787a99179c284eede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:55:6d:16:e4:9a:91:46:76:2b:f5:b8:23:
19:17:32:c4:61:5e:cc:cf:50:d0:76:09:ae:cf:64:
bf:ec:a9:09:ee:f2:8f:c7:58:2a:6e:04:84:c8:70:
76:0e:72:c3:00:79:21:44:71:a9:90:df:32:10:a2:
a3:73:f2:e5:d3:60:d9:d6:f0:db:04:11:a8:f5:08:
45:b4:1a:d2:3e:68:99:74:d2:27:c5:11:2e:e5:1f:
42:5e:a0:79:26:98:b6:da:d3:73:4d:e7:96:25:20:
bf:fe:e9:e8:c6:33:ff:4b:4b:88:c8:c1:31:86:91:
a1:94:6a:20:d1:c6:f6:af:2f:f2:da:fa:a0:f5:8a:
fe:b8:d4:ef:05:70:e0:57:0d:9f:90:10:e3:79:9a:
c2:d7:04:5b:28:80:69:b5:e7:2a:16:22:50:7e:2c:
d8:62:b3:f9:dd:d5:f4:5c:46:24:19:b3:d2:f2:ac:
b3:21:86:07:5a:43:24:c2:58:83:c0:29:6b:08:35:
97:4f:c8:a2:e2:36:f1:fc:9e:16:97:5e:b3:ab:48:
85:b6:d6:df:ed:7d:d6:fd:8a:d1:66:07:df:cc:5b:
c8:5e:ba:b6:b9:08:e6:e3:d3:b4:fe:9f:1a:cf:db:
f2:19:d9:52:ae:90:02:34:45:b7:d4:ef:38:b9:d5:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:97:DC:75:DA:94:D7:D4:4E:96:86:E7:87:A9:91:79:C2:84:EE:DE
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ZZfcddqU19ROlobnh6mRecKE7t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.129.0/24
176.96.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d5:bb:30:06:02:03:66:96:9a:60:65:ee:4b:97:9f:db:b1:
b3:48:11:59:df:68:0b:9e:bb:a4:fb:18:a7:ee:a2:b0:10:9f:
39:54:77:04:3a:08:0b:e5:67:0c:58:fa:fd:60:85:9c:d1:a2:
23:cc:f6:5b:ad:df:36:f4:18:68:cb:17:b5:f7:01:11:ff:4c:
2b:5c:9a:eb:e9:24:b7:1f:6b:9f:cd:f9:08:c0:21:d2:f7:c0:
58:bc:b4:77:dd:95:d5:7e:8e:e5:1e:47:eb:a7:ce:6f:74:29:
ab:94:27:d0:1a:34:26:41:7e:72:b6:35:e6:01:71:fd:f4:2c:
84:30:97:9f:4c:32:a3:e7:fe:4b:6f:8a:58:56:f6:0a:85:aa:
68:ea:ff:9d:04:a6:20:4b:f8:62:2d:a2:21:04:e5:8d:c0:99:
2d:77:ca:63:13:06:1c:7e:29:30:36:d3:b6:c6:8d:74:7c:ef:
b5:d5:44:69:e9:c3:d2:81:1c:77:93:ff:a7:26:8b:37:0a:fd:
d6:52:4d:1c:5f:02:71:8b:3c:ac:7b:f0:96:f4:35:5b:62:31:
b8:ea:2e:e0:0b:3c:96:1c:ca:3a:27:1f:a8:da:45:eb:8f:15:
b6:c8:00:f8:dc:6c:0c:88:8b:54:00:39:3a:6c:40:44:e0:79:
19:fe:cd:e2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQJ9og3KGfUEvdp0Y/SSeLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjQxMjI3MjExMjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTk3ZGM3NWRhOTRkN2Q0NGU5Njg2ZTc4N2E5OTE3OWMyODRlZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK1VbRbkmpFGdiv1uCMZFzLEYV7M
z1DQdgmuz2S/7KkJ7vKPx1gqbgSEyHB2DnLDAHkhRHGpkN8yEKKjc/Ll02DZ1vDb
BBGo9QhFtBrSPmiZdNInxREu5R9CXqB5Jpi22tNzTeeWJSC//unoxjP/S0uIyMEx
hpGhlGog0cb2ry/y2vqg9Yr+uNTvBXDgVw2fkBDjeZrC1wRbKIBptecqFiJQfizY
YrP53dX0XEYkGbPS8qyzIYYHWkMkwliDwClrCDWXT8ii4jbx/J4Wl16zq0iFttbf
7X3W/YrRZgffzFvIXrq2uQjm49O0/p8az9vyGdlSrpACNEW31O84udU5NQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGWX3HXalNfUTpaG54epkXnChO7eMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvWlpmY2RkcVUxOVJPbG9ibmg2bVJlY0tFN3Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsGCBAwQA
sGCDMA0GCSqGSIb3DQEBCwUAA4IBAQBv1bswBgIDZpaaYGXuS5ef27GzSBFZ32gL
nruk+xin7qKwEJ85VHcEOggL5WcMWPr9YIWc0aIjzPZbrd829Bhoyxe19wER/0wr
XJrr6SS3H2ufzfkIwCHS98BYvLR33ZXVfo7lHkfrp85vdCmrlCfQGjQmQX5ytjXm
AXH99CyEMJefTDKj5/5Lb4pYVvYKhapo6v+dBKYgS/hiLaIhBOWNwJktd8pjEwYc
fikwNtO2xo10fO+11URp6cPSgRx3k/+nJos3Cv3WUk0cXwJxizyse/CW9DVbYjG4
6i7gCzyWHMo6Jx+o2kXrjxW2yAD43GwMiItUADk6bEBE4HkZ/s3i
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:50:22 2025 by rpki-client