Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZZ_kwMzUy3V0s2OhOyfLBGQLzUY.roa
File: ZZ_kwMzUy3V0s2OhOyfLBGQLzUY.roa (raw, json)
Hash identifier: STg3g4dZ+ju3jZF3l7NOhs5GxyS3qThHPwZVoPEzAT0=
Subject key identifier: 65:9F:E4:C0:CC:D4:CB:75:74:B3:63:A1:3B:27:CB:04:64:0B:CD:46
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1880D40B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZZ_kwMzUy3V0s2OhOyfLBGQLzUY.roa
Signing time: Thu 21 Apr 2022 12:16:48 +0000
ROA not before: Thu 21 Apr 2022 12:16:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200897
IP address blocks: 2a05:dfc7:3300::/43 maxlen: 48
2a05:dfc7:3000::/43 maxlen: 48
2a05:dfc7:2900::/43 maxlen: 48
2a05:dfc7:1000::/43 maxlen: 48
2a05:dfc7:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411096075 (0x1880d40b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Apr 21 12:16:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=659fe4c0ccd4cb7574b363a13b27cb04640bcd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:5a:5c:b8:e7:fa:82:12:2d:7f:ab:d9:ee:
9c:84:17:dd:b7:30:30:b5:e1:59:8a:61:16:3b:7a:
e3:98:3d:9e:b3:78:5f:04:f4:e2:53:62:40:94:a7:
c7:20:5c:83:ad:b0:c6:d1:b6:f0:ff:2e:4a:c3:62:
17:93:e0:0f:b1:22:5f:fd:f7:6f:de:9b:90:71:d1:
85:f0:b2:ae:92:eb:1b:e4:8c:11:6e:dc:68:95:b4:
e5:72:b6:60:3a:b2:27:ef:ba:1a:02:35:dc:81:47:
ad:5a:59:d5:9d:37:db:5b:0d:53:64:9b:97:96:42:
0f:4c:01:ca:f5:6e:06:be:1d:f8:a7:89:a4:96:61:
21:eb:9e:af:92:90:bc:f9:1d:1e:b2:39:72:97:8d:
99:99:dd:95:12:11:9c:64:73:cf:e9:cc:2f:53:50:
fe:33:be:07:6d:15:28:48:bc:5b:7c:27:44:8e:77:
13:e4:5c:a5:80:fc:39:7d:ec:97:e0:f2:55:e8:a9:
d4:77:87:24:4f:12:13:d3:87:c4:bf:52:2e:bb:5f:
34:6d:f2:da:43:6c:83:a9:b3:2d:b0:46:b4:00:ed:
e1:13:c2:67:e6:e8:7d:52:45:66:2c:c6:a8:61:69:
31:eb:54:13:a4:fe:01:08:84:aa:b0:55:52:bc:70:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9F:E4:C0:CC:D4:CB:75:74:B3:63:A1:3B:27:CB:04:64:0B:CD:46
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZZ_kwMzUy3V0s2OhOyfLBGQLzUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:8::/48
2a05:dfc7:1000::/43
2a05:dfc7:2900::/43
2a05:dfc7:3000::/43
2a05:dfc7:3300::/43
Signature Algorithm: sha256WithRSAEncryption
14:33:59:64:0c:c4:b3:3c:2c:ba:55:58:5e:cf:84:6f:12:a6:
d3:d6:35:19:61:e3:0e:94:79:10:85:f0:9a:90:4e:9f:28:c0:
2e:f2:f8:90:49:96:25:d4:2f:41:0e:8c:56:62:fd:87:a4:98:
c5:78:96:ac:68:ce:f0:e1:34:a8:65:2f:3b:ab:08:7b:a7:59:
76:85:8d:2d:87:59:4b:17:df:00:d9:f0:f8:b8:5a:49:63:d8:
17:60:16:55:87:a6:3e:2c:3c:9b:f3:4e:4a:ed:49:b8:be:d5:
b8:27:5b:f0:3d:fc:43:b2:13:88:f7:7c:be:c2:5f:78:0a:d0:
5f:ee:35:63:ff:13:dd:cb:94:b9:93:db:9f:32:6a:f8:c5:46:
bd:f3:97:8e:1e:94:98:17:33:30:d3:d1:ab:c8:a9:dc:a7:6c:
d5:d9:d7:47:be:de:67:0e:89:bc:71:cb:c3:f8:99:b0:f2:27:
5c:70:60:ea:ae:99:08:3f:a8:7e:33:7f:fa:05:48:ec:e9:fc:
30:c9:f5:9d:13:85:b5:e0:53:2b:76:82:bb:23:f8:b2:6c:2d:
ee:cf:48:5e:97:6a:00:b8:4d:82:79:f5:5c:54:61:aa:55:f8:
eb:6b:02:54:bc:50:39:e8:ca:5f:4a:6a:f2:52:47:d8:37:c8:
ab:97:a2:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEGIDUCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDQy
MTEyMTY0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjU5ZmU0YzBjY2Q0
Y2I3NTc0YjM2M2ExM2IyN2NiMDQ2NDBiY2Q0NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL9oWly45/qCEi1/q9nunIQX3bcwMLXhWYphFjt645g9nrN4
XwT04lNiQJSnxyBcg62wxtG28P8uSsNiF5PgD7EiX/33b96bkHHRhfCyrpLrG+SM
EW7caJW05XK2YDqyJ++6GgI13IFHrVpZ1Z0321sNU2Sbl5ZCD0wByvVuBr4d+KeJ
pJZhIeuer5KQvPkdHrI5cpeNmZndlRIRnGRzz+nML1NQ/jO+B20VKEi8W3wnRI53
E+RcpYD8OX3sl+DyVeip1HeHJE8SE9OHxL9SLrtfNG3y2kNsg6mzLbBGtADt4RPC
Z+bofVJFZizGqGFpMetUE6T+AQiEqrBVUrxw2BcCAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBRln+TAzNTLdXSzY6E7J8sEZAvNRjAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L1paX2t3TXpVeTNWMHMyT2hPeWZMQkdRTHpVWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwMwQCAAIwLQMHACoF38cACAMHBSoF38cQAAMHBSoF
38cpAAMHBSoF38cwAAMHBSoF38czADANBgkqhkiG9w0BAQsFAAOCAQEAFDNZZAzE
szwsulVYXs+EbxKm09Y1GWHjDpR5EIXwmpBOnyjALvL4kEmWJdQvQQ6MVmL9h6SY
xXiWrGjO8OE0qGUvO6sIe6dZdoWNLYdZSxffANnw+LhaSWPYF2AWVYemPiw8m/NO
Su1JuL7VuCdb8D38Q7ITiPd8vsJfeArQX+41Y/8T3cuUuZPbnzJq+MVGvfOXjh6U
mBczMNPRq8ip3Kds1dnXR77eZw6JvHHLw/iZsPInXHBg6q6ZCD+ofjN/+gVI7On8
MMn1nROFteBTK3aCuyP4smwt7s9IXpdqALhNgnn1XFRhqlX462sCVLxQOejKX0pq
8lJH2DfIq5eipg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:12 2025 by rpki-client