Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/zgLaoSkTCPdXRwEY9R1zuC_EuD0.roa
File: zgLaoSkTCPdXRwEY9R1zuC_EuD0.roa (raw, json)
Hash identifier: caV8XvbvYvTeP2gu8mvB0Yr9FFJ3dPbg8lmuIaETFCA=
Subject key identifier: CE:02:DA:A1:29:13:08:F7:57:47:01:18:F5:1D:73:B8:2F:C4:B8:3D
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50ED0E9E
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/zgLaoSkTCPdXRwEY9R1zuC_EuD0.roa
Signing time: Sat 01 Jan 2022 16:02:02 +0000
ROA not before: Sat 01 Jan 2022 16:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209326
IP address blocks: 212.243.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357713054 (0x50ed0e9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce02daa1291308f757470118f51d73b82fc4b83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:e1:6b:06:f5:49:31:12:69:3a:0a:ce:d2:
de:bb:98:ef:c2:89:2b:4f:a2:78:8f:d5:ff:be:b4:
d5:0e:da:07:14:56:61:cf:9d:b3:e8:ec:ee:bd:2b:
1e:11:e4:1f:01:c6:8d:e8:66:f9:a2:bf:3b:57:b6:
ac:a0:b9:8a:50:53:aa:61:60:99:6e:ac:e3:6a:14:
42:b2:64:23:8a:21:9c:89:32:58:ff:27:22:ee:96:
93:da:12:76:ec:10:77:93:b9:d9:7a:45:b0:ce:de:
ae:ec:63:1a:3d:1f:6d:ba:8a:16:6d:a1:c8:c6:17:
12:0c:a2:15:82:69:fe:09:00:f0:24:85:11:00:18:
e9:45:7c:33:b1:c8:79:44:ab:6f:f1:d0:5e:1c:da:
c1:ac:3b:22:24:89:c0:0a:d4:58:3d:cd:79:11:ad:
cc:fb:a4:73:89:75:c3:a9:a7:2a:38:79:3e:34:b2:
d8:f4:f3:d8:35:71:8f:62:f9:d4:07:c0:31:49:31:
c5:30:55:0b:90:e6:26:b7:d1:12:a8:bc:f8:7d:29:
a9:ce:a0:ce:99:7a:14:ff:40:15:5c:26:d5:7b:50:
44:b7:de:8b:b6:e0:44:fd:df:89:f4:82:b1:e1:26:
ec:56:df:cd:4a:99:b2:12:d7:b5:7a:61:93:55:6f:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:DA:A1:29:13:08:F7:57:47:01:18:F5:1D:73:B8:2F:C4:B8:3D
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/zgLaoSkTCPdXRwEY9R1zuC_EuD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.112.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d3:d9:57:f5:d4:00:9b:f0:72:97:f1:c6:a0:5e:8d:ba:e8:
e1:9d:7a:2d:0f:07:f9:dd:c0:99:54:10:3c:e0:e3:06:86:82:
04:b9:68:27:3e:36:97:ea:62:78:f0:70:cc:38:4b:a9:9d:39:
2f:35:29:63:59:43:0f:b7:98:99:bf:69:f7:5c:35:d2:01:a5:
e7:2d:13:70:85:35:f7:15:f5:c9:4f:07:14:88:0b:af:07:46:
f7:ea:6b:6b:ed:1c:f2:5b:98:85:24:b8:c8:1f:05:b3:af:15:
7e:66:98:fe:b0:4f:04:3d:52:c8:da:fa:3d:3f:5d:45:bb:ec:
75:97:8d:1c:a0:29:cc:dd:fa:f2:25:91:aa:9c:68:df:cd:ca:
3d:da:8b:3b:76:63:1d:ff:27:d0:84:a8:f6:d7:f5:82:da:04:
77:bd:5f:80:49:66:6b:01:11:e4:cd:9c:40:f8:ff:24:23:48:
a7:64:b8:f4:c5:77:88:c8:7e:1e:bc:10:7c:b6:70:0f:73:ae:
0e:e8:d6:9d:41:4c:1e:7d:34:9c:57:d0:a6:ba:99:4b:c7:a9:
d6:19:76:1b:64:58:26:6d:c7:2e:b1:84:8d:69:bf:99:05:71:
c8:6f:17:f2:8d:2c:06:95:49:d1:8b:44:ca:1a:a6:af:df:70:
f8:0d:a8:31
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEUO0OnjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjYzZjNkYjE1MmUwNTVhYzE0NWJkYmI0MjllMDE4NjU0MjA0YzhkMB4XDTIyMDEw
MTE2MDIwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2UwMmRhYTEyOTEz
MDhmNzU3NDcwMTE4ZjUxZDczYjgyZmM0YjgzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ6y4WsG9UkxEmk6Cs7S3ruY78KJK0+ieI/V/7601Q7aBxRW
Yc+ds+js7r0rHhHkHwHGjehm+aK/O1e2rKC5ilBTqmFgmW6s42oUQrJkI4ohnIky
WP8nIu6Wk9oSduwQd5O52XpFsM7eruxjGj0fbbqKFm2hyMYXEgyiFYJp/gkA8CSF
EQAY6UV8M7HIeUSrb/HQXhzawaw7IiSJwArUWD3NeRGtzPukc4l1w6mnKjh5PjSy
2PTz2DVxj2L51AfAMUkxxTBVC5DmJrfREqi8+H0pqc6gzpl6FP9AFVwm1XtQRLfe
i7bgRP3fifSCseEm7FbfzUqZshLXtXphk1Vvbt8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTOAtqhKRMI91dHARj1HXO4L8S4PTAfBgNVHSMEGDAWgBQmY/PbFS4FWsFF
vbtCngGGVCBMjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ptUHoyeFV1QlZyQlJiMjdRcDRCaGxRZ1RJMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvYzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2YzliYi8x
L3pnTGFvU2tUQ1BkWFJ3RVk5UjF6dUNfRXVEMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
YzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2YzliYi8xL0ptUHoyeFV1QlZy
QlJiMjdRcDRCaGxRZ1RJMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANTzcDANBgkqhkiG9w0BAQsFAAOC
AQEAPNPZV/XUAJvwcpfxxqBejbro4Z16LQ8H+d3AmVQQPODjBoaCBLloJz42l+pi
ePBwzDhLqZ05LzUpY1lDD7eYmb9p91w10gGl5y0TcIU19xX1yU8HFIgLrwdG9+pr
a+0c8luYhSS4yB8Fs68VfmaY/rBPBD1SyNr6PT9dRbvsdZeNHKApzN368iWRqpxo
383KPdqLO3ZjHf8n0ISo9tf1gtoEd71fgElmawER5M2cQPj/JCNIp2S49MV3iMh+
HrwQfLZwD3OuDujWnUFMHn00nFfQprqZS8ep1hl2G2RYJm3HLrGEjWm/mQVxyG8X
8o0sBpVJ0YtEyhqmr99w+A2oMQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:27:15 2025 by rpki-client