Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/zVowOYdrLXjOllfokZCro3LwFco.roa
File: zVowOYdrLXjOllfokZCro3LwFco.roa (raw, json)
Hash identifier: fa8kKm8EBFjedN//eCc+/WjYwfGOm49xfOWHmkIoI3E=
Subject key identifier: CD:5A:30:39:87:6B:2D:78:CE:96:57:E8:91:90:AB:A3:72:F0:15:CA
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B065A02BEBBCD2E7F6C3E86A5023C
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/zVowOYdrLXjOllfokZCro3LwFco.roa
Signing time: Sun 01 Jan 2023 13:35:05 +0000
ROA not before: Sun 01 Jan 2023 13:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47803
IP address blocks: 217.192.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:06:5a:02:be:bb:cd:2e:7f:6c:3e:86:a5:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd5a3039876b2d78ce9657e89190aba372f015ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:62:fe:73:99:a1:f5:51:27:71:1a:03:cf:
28:2e:8e:4a:59:f3:95:cb:42:8a:07:e8:a6:39:8c:
0d:f5:26:9c:11:1d:49:8e:9a:a5:f1:06:05:21:b2:
66:a0:1e:c5:d3:17:72:2c:9c:01:ad:10:ee:b2:41:
a9:30:f6:68:03:84:5b:28:d2:03:a4:15:ea:94:60:
be:f1:56:66:09:46:cb:e5:06:d4:f2:c2:df:44:d2:
dc:26:7c:f2:fa:0d:b0:11:4e:ea:19:d1:5a:25:86:
69:fc:99:e1:61:7f:64:55:d2:cb:7a:0a:55:76:0a:
6a:c1:44:a4:9a:a9:63:35:3a:d9:dd:05:71:94:68:
cd:7a:d1:4c:49:46:6a:a2:b8:3c:9b:54:ac:1c:21:
f3:d5:b9:94:7e:41:a6:4a:88:f0:56:82:6d:cc:4c:
d9:a6:97:6f:d9:f4:ed:f7:f8:84:0e:ed:5a:4e:c8:
dc:76:de:83:4a:58:49:a7:b8:dc:80:e2:ef:84:6f:
7a:b5:2d:fd:f0:67:5a:cb:43:c5:c1:66:99:1e:3e:
d0:dd:cd:f9:d8:90:c7:40:08:36:28:b6:53:d9:2e:
de:47:61:23:43:a6:83:c5:c6:7c:13:b1:09:29:c1:
4e:f7:84:ed:f2:20:25:e0:c3:5f:8b:92:01:85:ed:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5A:30:39:87:6B:2D:78:CE:96:57:E8:91:90:AB:A3:72:F0:15:CA
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/zVowOYdrLXjOllfokZCro3LwFco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.192.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:49:28:fc:e3:e9:8c:6e:5d:7c:5e:84:0d:ff:89:53:75:f8:
1b:fe:29:db:fa:54:2a:d2:b1:34:2e:00:2e:dc:da:f7:8d:36:
c7:b4:d7:66:f4:87:e2:2f:ea:0f:72:54:4e:25:58:4b:2e:3e:
65:dd:71:23:ff:14:4b:b6:b3:fd:f2:ed:b0:15:8c:97:3d:d5:
e9:b7:41:20:b3:3a:c0:98:20:f2:42:e8:ec:e1:af:91:f5:64:
71:33:9e:1d:04:04:d8:84:f9:51:15:6e:75:e9:8f:2b:cb:17:
b1:b6:c9:c4:56:9a:7d:ca:44:00:8d:91:f2:ed:6a:b7:15:e1:
1a:3f:e9:69:e9:2f:9a:ed:53:26:02:df:60:36:10:84:72:15:
26:6e:71:7a:06:b2:de:f4:1a:7a:fb:b0:6d:c4:ab:b2:15:31:
39:ce:ec:50:db:2a:64:d7:85:28:a3:2a:55:3d:cb:e3:10:00:
49:8f:40:9f:2b:a4:1e:d9:b0:f2:1a:29:f7:56:11:d4:2f:4a:
63:98:19:0d:a0:9b:4f:55:7d:cd:88:3d:b6:8a:27:2e:ef:aa:
fd:2d:37:9f:8e:91:a4:f6:4b:50:cd:47:b4:f1:bb:0c:85:27:
1b:ae:33:84:7c:ad:7d:39:95:f8:44:c7:44:1d:49:f5:74:56:
9b:e5:df:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtiwZaAr67zS5/bD6GpQI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjMwMTAxMTMzNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDVhMzAzOTg3NmIyZDc4Y2U5NjU3ZTg5MTkwYWJhMzcyZjAxNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQBi/nOZofVRJ3EaA88oLo5KWfOV
y0KKB+imOYwN9SacER1Jjpql8QYFIbJmoB7F0xdyLJwBrRDuskGpMPZoA4RbKNID
pBXqlGC+8VZmCUbL5QbU8sLfRNLcJnzy+g2wEU7qGdFaJYZp/JnhYX9kVdLLegpV
dgpqwUSkmqljNTrZ3QVxlGjNetFMSUZqorg8m1SsHCHz1bmUfkGmSojwVoJtzEzZ
ppdv2fTt9/iEDu1aTsjcdt6DSlhJp7jcgOLvhG96tS398Gday0PFwWaZHj7Q3c35
2JDHQAg2KLZT2S7eR2EjQ6aDxcZ8E7EJKcFO94Tt8iAl4MNfi5IBhe2ozQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1aMDmHay14zpZX6JGQq6Ny8BXKMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvelZvd09ZZHJMWGpPbGxmb2taQ3JvM0x3RmNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cBcMA0G
CSqGSIb3DQEBCwUAA4IBAQCmSSj84+mMbl18XoQN/4lTdfgb/inb+lQq0rE0LgAu
3Nr3jTbHtNdm9IfiL+oPclROJVhLLj5l3XEj/xRLtrP98u2wFYyXPdXpt0EgszrA
mCDyQujs4a+R9WRxM54dBATYhPlRFW516Y8ryxextsnEVpp9ykQAjZHy7Wq3FeEa
P+lp6S+a7VMmAt9gNhCEchUmbnF6BrLe9Bp6+7BtxKuyFTE5zuxQ2ypk14UooypV
PcvjEABJj0CfK6Qe2bDyGin3VhHUL0pjmBkNoJtPVX3NiD22iicu76r9LTefjpGk
9ktQzUe08bsMhScbrjOEfK19OZX4RMdEHUn1dFab5d98
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:42:14 2025 by rpki-client