Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/zwrUXQr0XhHXKmOksLE8QfDw3Ic.roa
File: zwrUXQr0XhHXKmOksLE8QfDw3Ic.roa (raw, json)
Hash identifier: 92EKELU/1q1ooUWhpZ675BTElpySJPcMJ22BC1mnCnI=
Subject key identifier: CF:0A:D4:5D:0A:F4:5E:11:D7:2A:63:A4:B0:B1:3C:41:F0:F0:DC:87
Certificate issuer: /CN=ed613a33ba72e21789a14931d116242e01e0f536
Certificate serial: 0182FDAA738940215B8AAC07D601E034A81A
Authority key identifier: ED:61:3A:33:BA:72:E2:17:89:A1:49:31:D1:16:24:2E:01:E0:F5:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WE6M7py4heJoUkx0RYkLgHg9TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/zwrUXQr0XhHXKmOksLE8QfDw3Ic.roa
Signing time: Fri 02 Sep 2022 10:06:22 +0000
ROA not before: Fri 02 Sep 2022 10:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59631
IP address blocks: 176.121.64.0/24 maxlen: 24
176.121.64.0/22 maxlen: 22
176.121.64.0/21 maxlen: 21
176.121.69.0/24 maxlen: 24
176.121.68.0/24 maxlen: 24
176.121.67.0/24 maxlen: 24
176.121.66.0/24 maxlen: 24
176.121.65.0/24 maxlen: 24
176.121.71.0/24 maxlen: 24
176.121.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:aa:73:89:40:21:5b:8a:ac:07:d6:01:e0:34:a8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed613a33ba72e21789a14931d116242e01e0f536
Validity
Not Before: Sep 2 10:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf0ad45d0af45e11d72a63a4b0b13c41f0f0dc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:54:8d:61:30:00:7a:ad:c7:a5:f6:44:2b:
91:4d:25:c1:62:76:6b:50:a3:34:1b:ec:f5:ea:26:
b5:2b:bd:23:f9:c5:9e:05:74:d5:e1:44:30:f7:c1:
29:f2:61:45:3a:01:73:60:50:51:aa:55:01:2d:db:
30:40:c0:8f:d8:95:b7:bc:5a:de:61:de:3e:c7:27:
a8:97:ce:7b:23:18:b0:20:08:c2:71:9a:dc:bb:c4:
0f:37:71:3b:c0:92:0c:b3:07:3e:d4:ae:b7:4d:5e:
3c:ce:b3:97:a6:aa:04:9d:a0:b6:d8:12:12:e3:ec:
97:0e:d8:63:36:41:28:47:27:89:bb:53:e0:ec:8e:
90:6c:d5:46:6c:3f:66:a1:46:ec:ca:09:48:5a:24:
7a:0d:28:e2:5e:1e:49:6c:7a:64:f6:ae:fe:37:8e:
ec:00:e0:a3:67:a5:d9:ba:1b:c5:3b:54:9d:16:bc:
24:5d:92:85:41:14:03:3c:62:a0:33:db:82:8d:9c:
76:9e:e0:ba:cf:52:96:0b:25:08:42:0b:04:69:e1:
88:ca:1e:4d:2b:2f:b6:96:f3:3f:7c:63:a2:3d:0a:
aa:7f:80:60:32:3f:60:ce:83:d7:9a:3d:b0:ae:c0:
d2:73:ae:4a:a9:32:cc:0d:e4:a2:72:a2:8a:c6:a8:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0A:D4:5D:0A:F4:5E:11:D7:2A:63:A4:B0:B1:3C:41:F0:F0:DC:87
X509v3 Authority Key Identifier:
keyid:ED:61:3A:33:BA:72:E2:17:89:A1:49:31:D1:16:24:2E:01:E0:F5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WE6M7py4heJoUkx0RYkLgHg9TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/zwrUXQr0XhHXKmOksLE8QfDw3Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/345608-0ff2-495a-8a0d-e100cf25ffac/1/7WE6M7py4heJoUkx0RYkLgHg9TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.64.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:f6:c0:f9:c7:dd:50:80:28:6f:19:04:00:d2:15:0d:f5:3e:
32:c7:03:e7:c6:cf:1c:2c:ea:f9:40:6e:fd:68:46:31:c9:c3:
63:a1:de:52:99:14:e0:d9:bf:23:d6:35:ac:bd:a3:e0:11:b1:
f3:a9:f0:c2:bd:cc:49:fb:aa:65:64:d5:15:a3:86:a8:d9:b6:
e3:23:53:8f:da:62:a7:cf:c2:9e:27:73:ab:f7:89:da:95:ab:
60:54:0b:12:c5:b1:1f:d0:94:46:eb:87:d4:a1:07:c6:50:e1:
58:34:f0:27:7e:23:c4:9c:99:33:fb:6e:36:c8:ef:48:4f:27:
f0:21:ac:8d:df:32:6a:d2:c1:52:83:63:d7:9b:c6:ef:14:24:
b7:86:71:77:7c:8d:85:6e:20:d0:ec:a9:48:c4:e3:37:3b:a8:
a1:3c:a2:b6:80:4f:5f:04:80:cf:cf:9c:d3:bd:a3:5c:84:fb:
b4:dd:f8:0d:29:fa:e7:78:cb:18:d9:cf:7f:c3:db:64:d4:f4:
e3:2b:b4:0a:38:5b:5b:b3:f9:f8:1d:33:e8:b0:7d:0e:14:55:
4a:c7:24:20:6e:cf:91:f8:b3:99:b5:34:e5:2f:b1:7c:14:4b:
18:78:09:b4:82:d1:81:92:24:ba:7c:5b:52:ac:d0:da:cd:7a:
e6:17:da:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL9qnOJQCFbiqwH1gHgNKgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjEzYTMzYmE3MmUyMTc4OWExNDkzMWQxMTYyNDJlMDFl
MGY1MzYwHhcNMjIwOTAyMTAwNjIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjBhZDQ1ZDBhZjQ1ZTExZDcyYTYzYTRiMGIxM2M0MWYwZjBkYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinRUjWEwAHqtx6X2RCuRTSXBYnZr
UKM0G+z16ia1K70j+cWeBXTV4UQw98Ep8mFFOgFzYFBRqlUBLdswQMCP2JW3vFre
Yd4+xyeol857IxiwIAjCcZrcu8QPN3E7wJIMswc+1K63TV48zrOXpqoEnaC22BIS
4+yXDthjNkEoRyeJu1Pg7I6QbNVGbD9moUbsyglIWiR6DSjiXh5JbHpk9q7+N47s
AOCjZ6XZuhvFO1SdFrwkXZKFQRQDPGKgM9uCjZx2nuC6z1KWCyUIQgsEaeGIyh5N
Ky+2lvM/fGOiPQqqf4BgMj9gzoPXmj2wrsDSc65KqTLMDeSicqKKxqh78QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8K1F0K9F4R1ypjpLCxPEHw8NyHMB8GA1UdIwQY
MBaAFO1hOjO6cuIXiaFJMdEWJC4B4PU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dFNk03cHk0aGVKb1VreDBSWWtMZ0hnOVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNDU2MDgtMGZmMi00OTVhLThhMGQt
ZTEwMGNmMjVmZmFjLzEvendyVVhRcjBYaEhYS21Pa3NMRThRZkR3M0ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNDU2MDgtMGZmMi00OTVhLThhMGQtZTEwMGNmMjVmZmFj
LzEvN1dFNk03cHk0aGVKb1VreDBSWWtMZ0hnOVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHlAMA0G
CSqGSIb3DQEBCwUAA4IBAQCd9sD5x91QgChvGQQA0hUN9T4yxwPnxs8cLOr5QG79
aEYxycNjod5SmRTg2b8j1jWsvaPgEbHzqfDCvcxJ+6plZNUVo4ao2bbjI1OP2mKn
z8KeJ3Or94nalatgVAsSxbEf0JRG64fUoQfGUOFYNPAnfiPEnJkz+242yO9ITyfw
IayN3zJq0sFSg2PXm8bvFCS3hnF3fI2FbiDQ7KlIxOM3O6ihPKK2gE9fBIDPz5zT
vaNchPu03fgNKfrneMsY2c9/w9tk1PTjK7QKOFtbs/n4HTPosH0OFFVKxyQgbs+R
+LOZtTTlL7F8FEsYeAm0gtGBkiS6fFtSrNDazXrmF9qd
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:24 2025 by rpki-client