Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa
File: ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa (raw, json)
Hash identifier: WTUxj+sidK096ykp4PAhTaXWq6bYZtjXmE5iUhcAutU=
Subject key identifier: 64:1B:F5:55:9E:F9:67:E7:9D:36:86:51:72:F6:23:91:BE:CD:A4:DF
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0194236A46605E38D52C57CC0A89B81D60C0
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 45.15.211.0/24 maxlen: 24
62.68.76.0/24 maxlen: 24
80.94.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:46:60:5e:38:d5:2c:57:cc:0a:89:b8:1d:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=641bf5559ef967e79d36865172f62391becda4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:58:37:34:70:5a:fe:a6:df:d6:c9:33:91:
4b:b2:93:e3:a9:b9:e9:7c:85:ee:aa:10:7a:1a:a7:
e5:7d:f6:aa:62:13:58:09:f1:3f:d2:fd:b8:33:d0:
30:f8:db:66:f1:0a:57:0d:54:94:4e:34:86:b0:98:
94:d8:9a:f6:7b:80:84:68:f2:40:c4:1f:48:a1:0b:
26:c6:17:b1:c3:96:c0:52:e0:04:eb:32:75:c9:50:
3f:a1:d5:15:08:18:fb:73:93:53:ee:f3:00:43:86:
2f:5f:e4:a8:86:2a:11:f5:fe:00:80:70:c2:8e:0b:
f6:43:71:43:9c:9e:20:53:86:86:bc:09:90:ed:05:
b5:65:23:8a:e7:61:a0:45:58:91:04:92:65:d2:13:
f8:d9:12:b6:91:04:e8:20:c8:77:20:3d:20:48:9a:
11:2d:6f:e1:d1:1f:e1:9b:4e:90:81:9e:79:45:a0:
3e:0b:96:d2:a3:c9:20:52:8f:be:d2:39:84:7d:9e:
33:0b:b1:6f:a6:b2:30:fb:13:76:10:97:ef:b8:9b:
b1:23:1d:88:92:c7:99:96:92:14:f7:89:58:46:e5:
0b:9d:a8:09:07:9f:eb:53:57:b7:dc:06:0b:42:20:
60:2c:b8:34:b9:e5:35:63:e2:ee:b2:05:21:2d:da:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1B:F5:55:9E:F9:67:E7:9D:36:86:51:72:F6:23:91:BE:CD:A4:DF
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.211.0/24
62.68.76.0/24
80.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e1:19:81:dc:34:18:57:71:8d:2f:2c:bd:9d:c4:0d:dc:f4:
93:12:f9:90:ec:fd:95:4f:f5:91:2c:26:df:e2:de:54:22:ae:
43:39:e7:c3:14:1b:34:03:75:3e:53:d7:69:a1:0f:82:2c:37:
70:b7:23:b2:3e:23:3a:2b:14:f9:c6:8c:0c:ae:c1:cc:d7:0a:
e7:78:81:54:90:37:95:39:15:9a:80:a0:9e:cc:f4:18:ba:9c:
5e:b8:a2:93:91:38:81:c6:49:19:e6:71:e1:29:70:99:b7:05:
74:59:07:08:db:dd:44:c0:f6:bf:e5:eb:fa:7a:d0:53:2b:19:
18:03:7f:2b:10:89:f5:d0:27:98:95:14:55:5f:a4:95:e1:78:
a9:ea:98:79:19:45:61:f3:f1:d4:88:a3:e3:f3:e7:d0:7b:68:
e6:11:07:97:09:b3:17:c4:c4:32:48:5c:c9:0d:59:d5:fc:a5:
e6:67:27:e0:23:8a:52:93:e0:b1:82:09:12:f2:15:39:1c:c6:
d0:67:46:a5:e1:c0:22:e1:e9:5a:d1:30:55:8b:ba:96:ea:19:
54:a7:1f:1f:56:6c:ee:eb:8e:cd:02:40:24:28:15:72:ae:a3:
8e:a7:45:26:dd:32:b5:68:9a:46:ea:d1:7a:7a:af:0e:ce:b9:
97:00:a3:65
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQjakZgXjjVLFfMCom4HWDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjUwMTAxMTk0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDFiZjU1NTllZjk2N2U3OWQzNjg2NTE3MmY2MjM5MWJlY2RhNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjxYNzRwWv6m39bJM5FLspPjqbnp
fIXuqhB6GqflffaqYhNYCfE/0v24M9Aw+Ntm8QpXDVSUTjSGsJiU2Jr2e4CEaPJA
xB9IoQsmxhexw5bAUuAE6zJ1yVA/odUVCBj7c5NT7vMAQ4YvX+SohioR9f4AgHDC
jgv2Q3FDnJ4gU4aGvAmQ7QW1ZSOK52GgRViRBJJl0hP42RK2kQToIMh3ID0gSJoR
LW/h0R/hm06QgZ55RaA+C5bSo8kgUo++0jmEfZ4zC7FvprIw+xN2EJfvuJuxIx2I
kseZlpIU94lYRuULnagJB5/rU1e33AYLQiBgLLg0ueU1Y+LusgUhLdpqywIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGQb9VWe+WfnnTaGUXL2I5G+zaTfMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvWkJ2MVZaNzVaLWVkTm9aUmN2WWprYjdOcE44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQ/TAwQA
PkRMAwQAUF5YMA0GCSqGSIb3DQEBCwUAA4IBAQAg4RmB3DQYV3GNLyy9ncQN3PST
EvmQ7P2VT/WRLCbf4t5UIq5DOefDFBs0A3U+U9dpoQ+CLDdwtyOyPiM6KxT5xowM
rsHM1wrneIFUkDeVORWagKCezPQYupxeuKKTkTiBxkkZ5nHhKXCZtwV0WQcI291E
wPa/5ev6etBTKxkYA38rEIn10CeYlRRVX6SV4Xip6ph5GUVh8/HUiKPj8+fQe2jm
EQeXCbMXxMQySFzJDVnV/KXmZyfgI4pSk+CxggkS8hU5HMbQZ0al4cAi4ela0TBV
i7qW6hlUpx8fVmzu647NAkAkKBVyrqOOp0Um3TK1aJpG6tF6eq8OzrmXAKNl
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:44 2025 by rpki-client