Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2434f8-74f1-4b89-a275-1a51561578cf/1/zkZtjIjEkqDcHt0WsJ8ofYZOvKM.roa
File: zkZtjIjEkqDcHt0WsJ8ofYZOvKM.roa (raw, json)
Hash identifier: Y3so9scBYkuZHYPZ18qSgwXRIeXF6BNlrIgSnTvpoyI=
Subject key identifier: CE:46:6D:8C:88:C4:92:A0:DC:1E:DD:16:B0:9F:28:7D:86:4E:BC:A3
Certificate issuer: /CN=264a190e0b7d712026abfbe7e3695e1299e0c074
Certificate serial: 086FA090
Authority key identifier: 26:4A:19:0E:0B:7D:71:20:26:AB:FB:E7:E3:69:5E:12:99:E0:C0:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkoZDgt9cSAmq_vn42leEpngwHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2434f8-74f1-4b89-a275-1a51561578cf/1/zkZtjIjEkqDcHt0WsJ8ofYZOvKM.roa
Signing time: Sat 01 Jan 2022 07:03:32 +0000
ROA not before: Sat 01 Jan 2022 07:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34993
IP address blocks: 37.148.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141533328 (0x86fa090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264a190e0b7d712026abfbe7e3695e1299e0c074
Validity
Not Before: Jan 1 07:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce466d8c88c492a0dc1edd16b09f287d864ebca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:e3:03:91:b1:f5:10:0f:75:a8:1d:1f:d7:
3f:1d:a5:66:5c:f6:f1:6c:66:7a:b9:6d:38:25:9e:
67:a6:7e:12:7b:5d:16:53:5f:6d:d7:84:bd:53:e8:
bb:0c:15:54:c0:82:e9:e2:38:69:94:99:1d:13:ec:
a7:94:72:1d:3a:57:a7:26:64:a8:fb:eb:01:31:9c:
f1:21:be:63:5d:67:9b:e6:e3:d2:a5:a3:c6:fc:8a:
32:41:a3:de:e6:ba:6c:e8:17:0b:36:55:07:95:b5:
8b:9a:2d:61:2b:32:09:c8:c2:c9:9b:4c:f0:17:b9:
b2:4f:7e:28:a6:fb:c2:88:9c:c3:54:88:6b:f0:56:
fa:78:50:1a:8c:8e:de:60:5e:24:91:f2:40:52:fc:
f4:2a:db:76:bf:32:d2:bd:91:27:aa:4b:3a:e2:5f:
94:2b:c2:1b:f2:3a:16:d0:a4:a8:63:f1:e7:6f:52:
a1:a6:4d:b1:2e:84:b5:bf:47:6e:c9:04:94:25:49:
b8:c6:0e:fc:1f:62:11:9e:46:ab:04:45:81:97:ca:
d6:dc:dd:57:9f:f3:09:e8:2f:43:58:40:58:00:2f:
b0:db:06:f7:87:8e:a6:6e:94:5c:fe:66:28:46:89:
2e:14:02:34:00:32:35:a1:bd:4e:27:a7:3c:cf:ce:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:46:6D:8C:88:C4:92:A0:DC:1E:DD:16:B0:9F:28:7D:86:4E:BC:A3
X509v3 Authority Key Identifier:
keyid:26:4A:19:0E:0B:7D:71:20:26:AB:FB:E7:E3:69:5E:12:99:E0:C0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkoZDgt9cSAmq_vn42leEpngwHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2434f8-74f1-4b89-a275-1a51561578cf/1/zkZtjIjEkqDcHt0WsJ8ofYZOvKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2434f8-74f1-4b89-a275-1a51561578cf/1/JkoZDgt9cSAmq_vn42leEpngwHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.252.0/22
Signature Algorithm: sha256WithRSAEncryption
34:90:d3:e4:c1:41:89:9c:64:7d:15:26:ff:7c:d9:e3:68:2b:
bc:8b:c5:53:c2:da:b8:00:0c:a8:47:23:51:a3:1a:54:73:ed:
8e:bc:47:f1:26:3e:35:e5:99:e2:5f:4a:16:6c:e9:69:28:91:
65:ae:ac:3d:85:1b:e5:ec:43:7e:a8:50:0c:f6:60:bb:01:c0:
24:96:04:c7:53:48:06:55:42:c3:6c:32:44:2c:10:c3:15:0e:
38:54:3d:79:7a:9e:9d:27:a6:25:53:b6:45:a3:a3:15:4f:64:
a9:b4:56:d2:30:da:7d:d7:f1:17:f7:bf:b8:5b:94:82:0d:e4:
c0:41:65:2b:2b:0b:17:b3:20:c3:18:5b:f0:8b:74:c4:7e:bd:
14:b7:c9:e3:13:b1:62:55:1c:c4:0a:80:b9:b8:07:8a:2a:35:
77:5c:5a:a7:7a:6a:31:23:5a:78:97:82:08:7f:bc:72:14:b3:
b0:68:d9:36:81:69:71:29:8e:b7:74:3a:05:81:89:8c:ea:56:
16:04:57:dc:8b:1c:ef:19:a6:99:ee:f9:0e:2e:72:43:fd:53:
5f:98:ea:cc:ee:7d:18:4c:05:d4:59:c3:92:c4:f9:ad:88:aa:
9a:d7:a1:98:c9:ee:e0:7c:0a:ff:b1:79:3e:3a:9d:a8:a4:e2:
15:57:50:50
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECG+gkDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjRhMTkwZTBiN2Q3MTIwMjZhYmZiZTdlMzY5NWUxMjk5ZTBjMDc0MB4XDTIyMDEw
MTA3MDMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2U0NjZkOGM4OGM0
OTJhMGRjMWVkZDE2YjA5ZjI4N2Q4NjRlYmNhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANUk4wORsfUQD3WoHR/XPx2lZlz28WxmerltOCWeZ6Z+Entd
FlNfbdeEvVPouwwVVMCC6eI4aZSZHRPsp5RyHTpXpyZkqPvrATGc8SG+Y11nm+bj
0qWjxvyKMkGj3ua6bOgXCzZVB5W1i5otYSsyCcjCyZtM8Be5sk9+KKb7woicw1SI
a/BW+nhQGoyO3mBeJJHyQFL89Crbdr8y0r2RJ6pLOuJflCvCG/I6FtCkqGPx529S
oaZNsS6Etb9HbskElCVJuMYO/B9iEZ5GqwRFgZfK1tzdV5/zCegvQ1hAWAAvsNsG
94eOpm6UXP5mKEaJLhQCNAAyNaG9TienPM/OxJUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTORm2MiMSSoNwe3Rawnyh9hk68ozAfBgNVHSMEGDAWgBQmShkOC31xICar
++fjaV4SmeDAdDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0prb1pEZ3Q5Y1NBbXFfdm40MmxlRXBuZ3dIUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvMjQzNGY4LTc0ZjEtNGI4OS1hMjc1LTFhNTE1NjE1NzhjZi8x
L3prWnRqSWpFa3FEY0h0MFdzSjhvZllaT3ZLTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
MjQzNGY4LTc0ZjEtNGI4OS1hMjc1LTFhNTE1NjE1NzhjZi8xL0prb1pEZ3Q5Y1NB
bXFfdm40MmxlRXBuZ3dIUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiWU/DANBgkqhkiG9w0BAQsFAAOC
AQEANJDT5MFBiZxkfRUm/3zZ42grvIvFU8LauAAMqEcjUaMaVHPtjrxH8SY+NeWZ
4l9KFmzpaSiRZa6sPYUb5exDfqhQDPZguwHAJJYEx1NIBlVCw2wyRCwQwxUOOFQ9
eXqenSemJVO2RaOjFU9kqbRW0jDafdfxF/e/uFuUgg3kwEFlKysLF7Mgwxhb8It0
xH69FLfJ4xOxYlUcxAqAubgHiio1d1xap3pqMSNaeJeCCH+8chSzsGjZNoFpcSmO
t3Q6BYGJjOpWFgRX3Isc7xmmme75Di5yQ/1TX5jqzO59GEwF1FnDksT5rYiqmteh
mMnu4HwK/7F5PjqdqKTiFVdQUA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:28:03 2025 by rpki-client