Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/ZUbaqrj_yFTDGp2flKk5KYAWImA.roa
File: ZUbaqrj_yFTDGp2flKk5KYAWImA.roa (raw, json)
Hash identifier: 8sRBl8RMRTSCzITTUP5fI9xbiQWEPVeo/rx5tDOUqn4=
Subject key identifier: 65:46:DA:AA:B8:FF:C8:54:C3:1A:9D:9F:94:A9:39:29:80:16:22:60
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 0194258E4DC9A5C7F57D3DA2A7216954B7DD
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/ZUbaqrj_yFTDGp2flKk5KYAWImA.roa
Signing time: Thu 02 Jan 2025 05:47:50 +0000
ROA not before: Thu 02 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 176.119.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:4d:c9:a5:c7:f5:7d:3d:a2:a7:21:69:54:b7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Jan 2 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6546daaab8ffc854c31a9d9f94a9392980162260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:51:dc:53:8c:35:b0:b6:d2:ac:88:c6:72:
71:6f:cb:0a:9a:35:99:07:13:64:96:c1:cf:44:bf:
5f:b5:56:f5:fe:fa:83:0b:50:ae:71:8e:d2:e5:bc:
f8:f6:f6:7d:e9:cf:55:73:9c:45:ce:9b:68:a3:f6:
85:71:db:7b:74:02:8a:96:e8:6b:16:e4:8e:0c:d4:
7a:4c:63:45:81:21:7e:6e:4d:d4:7c:58:f4:a6:60:
90:a2:d1:5d:3f:05:47:58:55:a0:f0:bb:c3:71:1e:
2e:1c:f5:af:e9:7d:63:11:f8:c5:3c:7e:ed:4f:24:
40:34:2c:a3:84:c4:a9:13:ee:de:02:14:d1:8e:16:
d9:d6:ec:e2:07:2a:32:eb:62:54:e8:f8:3c:ec:b1:
39:0e:80:76:b7:20:3c:e9:18:a6:13:ae:40:d3:38:
76:ce:6e:77:7f:91:fc:e1:5d:be:4b:a1:80:b0:35:
e8:f4:38:a5:65:b1:cf:69:46:58:65:da:38:f8:c4:
90:e4:7f:5d:3b:a9:f5:a0:6a:e5:9c:bf:75:2b:32:
e5:be:6b:a4:1e:2c:94:5f:fd:b6:01:ca:88:48:a3:
54:94:40:4b:5f:d3:9c:c0:7f:00:fd:70:41:1c:cf:
94:73:f5:06:66:c8:0b:c3:21:ca:d9:6a:67:a3:00:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:46:DA:AA:B8:FF:C8:54:C3:1A:9D:9F:94:A9:39:29:80:16:22:60
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/ZUbaqrj_yFTDGp2flKk5KYAWImA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.194.0/24
Signature Algorithm: sha256WithRSAEncryption
54:72:ec:1d:43:f8:c6:70:65:04:d2:6c:8c:d7:ea:58:7e:c1:
87:b2:ee:3c:25:4e:41:71:c2:b1:83:13:c8:23:dd:c1:c8:b3:
62:ce:fb:e0:bb:42:63:92:25:d4:e7:9c:31:54:ff:31:3f:05:
1b:2d:34:32:ba:4d:43:60:37:43:d7:16:ea:b5:c2:98:fd:97:
47:67:ac:99:d7:11:a5:bf:91:fd:46:d2:b8:61:a4:8a:79:55:
a7:73:ae:fb:f4:e6:8b:ea:3f:9c:40:b0:4e:b2:f6:ae:e0:e7:
19:26:bc:eb:2d:76:20:1e:91:82:7b:84:a6:d6:69:48:73:4b:
78:19:0a:97:99:0d:1e:7c:d8:d1:52:20:c4:7b:01:2e:97:45:
9e:75:6b:de:a1:93:88:09:47:32:74:ac:71:8e:39:78:1e:e8:
e2:3f:bc:71:10:81:97:3b:ed:01:42:2e:a4:2d:e7:39:5e:07:
a0:21:68:d3:ca:cc:04:3d:36:f4:ea:56:f1:3f:a0:29:7c:fe:
2f:ce:18:87:0d:a7:48:d3:84:48:cf:e3:86:12:ee:f7:a8:32:
5d:a6:52:27:97:06:df:7a:3b:9b:73:ef:10:3f:8b:ee:2d:33:
7e:da:65:9b:d1:b5:84:68:62:64:13:65:c0:10:59:be:60:dc:
44:73:41:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljk3Jpcf1fT2ipyFpVLfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZjFiYjYxMWYyYjdhMzc4MDBmNDljNmMxMjVjNWVlOThi
NzE5YzUwHhcNMjUwMTAyMDU0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTQ2ZGFhYWI4ZmZjODU0YzMxYTlkOWY5NGE5MzkyOTgwMTYyMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pBR3FOMNbC20qyIxnJxb8sKmjWZ
BxNklsHPRL9ftVb1/vqDC1CucY7S5bz49vZ96c9Vc5xFzptoo/aFcdt7dAKKluhr
FuSODNR6TGNFgSF+bk3UfFj0pmCQotFdPwVHWFWg8LvDcR4uHPWv6X1jEfjFPH7t
TyRANCyjhMSpE+7eAhTRjhbZ1uziByoy62JU6Pg87LE5DoB2tyA86RimE65A0zh2
zm53f5H84V2+S6GAsDXo9DilZbHPaUZYZdo4+MSQ5H9dO6n1oGrlnL91KzLlvmuk
HiyUX/22AcqISKNUlEBLX9OcwH8A/XBBHM+Uc/UGZsgLwyHK2WpnowAoeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVG2qq4/8hUwxqdn5SpOSmAFiJgMB8GA1UdIwQY
MBaAFBLxu2EfK3o3gA9JxsElxe6YtxnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXZHN1lSOHJlamVBRDBuR3dTWEY3cGkzR2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYjhjYTItOWZjOS00ODk4LWIwNDgt
NTJhMzY4Y2FjNDAzLzEvWlViYXFyal95RlRER3AyZmxLazVLWUFXSW1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mYjhjYTItOWZjOS00ODk4LWIwNDgtNTJhMzY4Y2FjNDAz
LzEvRXZHN1lSOHJlamVBRDBuR3dTWEY3cGkzR2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHfCMA0G
CSqGSIb3DQEBCwUAA4IBAQBUcuwdQ/jGcGUE0myM1+pYfsGHsu48JU5BccKxgxPI
I93ByLNizvvgu0JjkiXU55wxVP8xPwUbLTQyuk1DYDdD1xbqtcKY/ZdHZ6yZ1xGl
v5H9RtK4YaSKeVWnc6779OaL6j+cQLBOsvau4OcZJrzrLXYgHpGCe4Sm1mlIc0t4
GQqXmQ0efNjRUiDEewEul0WedWveoZOICUcydKxxjjl4HujiP7xxEIGXO+0BQi6k
Lec5XgegIWjTyswEPTb06lbxP6ApfP4vzhiHDadI04RIz+OGEu73qDJdplInlwbf
ejubc+8QP4vuLTN+2mWb0bWEaGJkE2XAEFm+YNxEc0FA
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:32 2025 by rpki-client