Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/ZT-Ft8KUADF5JEzvqz5Pv0kGcXw.roa
File: ZT-Ft8KUADF5JEzvqz5Pv0kGcXw.roa (raw, json)
Hash identifier: +fkjkjNyGillgEXe6K+SUw7Ff91+wRtZZyizGTkHWKA=
Subject key identifier: 65:3F:85:B7:C2:94:00:31:79:24:4C:EF:AB:3E:4F:BF:49:06:71:7C
Certificate issuer: /CN=4b2d90122264719147a561e7c6c61f7cc1706c92
Certificate serial: 01856D386E399EA7CC828702AF891BB4C0F0
Authority key identifier: 4B:2D:90:12:22:64:71:91:47:A5:61:E7:C6:C6:1F:7C:C1:70:6C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy2QEiJkcZFHpWHnxsYffMFwbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/ZT-Ft8KUADF5JEzvqz5Pv0kGcXw.roa
Signing time: Sun 01 Jan 2023 12:04:52 +0000
ROA not before: Sun 01 Jan 2023 12:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 62.106.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:6e:39:9e:a7:cc:82:87:02:af:89:1b:b4:c0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2d90122264719147a561e7c6c61f7cc1706c92
Validity
Not Before: Jan 1 12:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=653f85b7c294003179244cefab3e4fbf4906717c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:88:22:1f:67:2f:f6:95:13:a9:9a:98:52:
44:2e:54:1e:f8:64:92:49:7e:4c:94:1d:ea:d1:61:
85:cb:dc:6d:93:94:35:0a:79:d6:cc:3b:fc:9b:c3:
02:be:5e:b4:3a:5f:1f:1e:bf:0d:5b:15:b6:07:6e:
97:0b:1b:01:36:e0:8b:5e:b6:b8:ae:34:bd:12:a9:
ca:04:b4:be:35:21:da:b6:f4:11:54:17:06:79:88:
31:ab:f4:be:3f:3c:20:ec:b8:17:70:55:62:1a:e1:
a6:07:3b:c3:b8:58:87:8b:a0:50:f8:7f:fb:8f:15:
e1:9e:0e:a6:70:25:93:50:a9:22:25:0c:81:54:c2:
d4:7a:c2:94:b2:d9:34:f8:41:fa:2b:4c:74:0e:d8:
0b:9f:f4:25:5b:f6:8e:0d:4c:b6:d7:f6:46:40:16:
0a:75:f1:af:5c:a8:5b:31:ef:b8:6a:11:b0:30:bb:
d8:39:d9:08:44:c5:89:88:67:d7:97:5f:ea:10:02:
26:b8:d8:1a:6a:58:37:59:3b:d2:fb:04:72:36:1c:
aa:a6:0d:c3:ca:59:c9:63:46:72:4e:bc:31:7e:ed:
a0:be:1f:de:a1:b6:a0:b1:42:f0:f8:0d:cf:a0:7b:
44:86:66:5e:27:a7:7a:66:d9:a8:6e:b3:ce:28:49:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3F:85:B7:C2:94:00:31:79:24:4C:EF:AB:3E:4F:BF:49:06:71:7C
X509v3 Authority Key Identifier:
keyid:4B:2D:90:12:22:64:71:91:47:A5:61:E7:C6:C6:1F:7C:C1:70:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy2QEiJkcZFHpWHnxsYffMFwbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/ZT-Ft8KUADF5JEzvqz5Pv0kGcXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/Sy2QEiJkcZFHpWHnxsYffMFwbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:26:c5:7b:aa:52:05:0f:68:90:2c:e7:08:e7:c7:cd:e4:24:
f1:3e:4a:42:1d:a8:8d:ba:3b:d5:1b:a3:1b:66:b4:55:fb:69:
a0:6c:dc:d3:91:80:59:41:99:1d:54:b3:c2:36:e1:64:19:b3:
bc:fb:d3:95:e4:b0:94:0b:64:1e:84:8d:e2:75:58:46:80:d3:
b8:92:9d:67:52:a7:f2:e8:50:60:64:2a:b7:ba:35:91:0c:0e:
80:43:25:dc:d0:c7:56:97:e9:bf:4a:ae:72:e7:d4:60:ab:18:
09:67:03:eb:05:cc:a3:71:8d:9b:41:a8:62:7a:4b:b3:a5:3e:
7e:16:60:15:f9:87:e4:2d:2a:ea:68:4b:ee:40:7c:2e:98:a4:
6c:87:e7:0b:4a:82:e7:22:5c:0b:e4:53:cd:8b:68:d6:c5:8f:
ab:d5:ca:4f:e7:b6:14:a9:40:08:06:77:9f:f0:f0:3e:d5:bc:
d7:62:2a:a0:25:97:f2:f7:01:df:14:59:f0:42:50:a3:1a:50:
fc:00:34:a3:86:32:79:1e:e0:d2:33:14:02:15:0b:c3:a2:46:
c7:82:9a:4a:af:8d:97:52:48:fe:22:71:d9:f5:32:5f:e0:38:
af:59:cd:ca:53:a2:d5:c3:4c:1b:8f:0b:8a:01:33:39:0d:46:
4d:25:e7:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtOG45nqfMgocCr4kbtMDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMmQ5MDEyMjI2NDcxOTE0N2E1NjFlN2M2YzYxZjdjYzE3
MDZjOTIwHhcNMjMwMTAxMTIwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTNmODViN2MyOTQwMDMxNzkyNDRjZWZhYjNlNGZiZjQ5MDY3MTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZWIIh9nL/aVE6mamFJELlQe+GSS
SX5MlB3q0WGFy9xtk5Q1CnnWzDv8m8MCvl60Ol8fHr8NWxW2B26XCxsBNuCLXra4
rjS9EqnKBLS+NSHatvQRVBcGeYgxq/S+Pzwg7LgXcFViGuGmBzvDuFiHi6BQ+H/7
jxXhng6mcCWTUKkiJQyBVMLUesKUstk0+EH6K0x0DtgLn/QlW/aODUy21/ZGQBYK
dfGvXKhbMe+4ahGwMLvYOdkIRMWJiGfXl1/qEAImuNgaalg3WTvS+wRyNhyqpg3D
ylnJY0ZyTrwxfu2gvh/eobagsULw+A3PoHtEhmZeJ6d6ZtmobrPOKEnybQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGU/hbfClAAxeSRM76s+T79JBnF8MB8GA1UdIwQY
MBaAFEstkBIiZHGRR6Vh58bGH3zBcGySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3kyUUVpSmtjWkZIcFdIbnhzWWZmTUZ3YkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYTFhNTEtN2E3My00MTFjLTk3MWYt
NDZkZDJkYWRkZjgwLzEvWlQtRnQ4S1VBREY1SkV6dnF6NVB2MGtHY1h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mYTFhNTEtN2E3My00MTFjLTk3MWYtNDZkZDJkYWRkZjgw
LzEvU3kyUUVpSmtjWkZIcFdIbnhzWWZmTUZ3YkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpfMA0G
CSqGSIb3DQEBCwUAA4IBAQChJsV7qlIFD2iQLOcI58fN5CTxPkpCHaiNujvVG6Mb
ZrRV+2mgbNzTkYBZQZkdVLPCNuFkGbO8+9OV5LCUC2QehI3idVhGgNO4kp1nUqfy
6FBgZCq3ujWRDA6AQyXc0MdWl+m/Sq5y59RgqxgJZwPrBcyjcY2bQahiekuzpT5+
FmAV+YfkLSrqaEvuQHwumKRsh+cLSoLnIlwL5FPNi2jWxY+r1cpP57YUqUAIBnef
8PA+1bzXYiqgJZfy9wHfFFnwQlCjGlD8ADSjhjJ5HuDSMxQCFQvDokbHgppKr42X
Ukj+InHZ9TJf4DivWc3KU6LVw0wbjwuKATM5DUZNJeeF
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:18 2025 by rpki-client