Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/0ZX3ENnNxY1WcLA5S6kX4QDvXUk.roa
File: 0ZX3ENnNxY1WcLA5S6kX4QDvXUk.roa (raw, json)
Hash identifier: StrHFvIPoE3Q8UVj1Qby03ZdaPQqScqKzUuH4xBRroU=
Subject key identifier: D1:95:F7:10:D9:CD:C5:8D:56:70:B0:39:4B:A9:17:E1:00:EF:5D:49
Certificate issuer: /CN=50fcce98deef739ea053b5e4e87049533473bf1c
Certificate serial: BEC3CD
Authority key identifier: 50:FC:CE:98:DE:EF:73:9E:A0:53:B5:E4:E8:70:49:53:34:73:BF:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPzOmN7vc56gU7Xk6HBJUzRzvxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/0ZX3ENnNxY1WcLA5S6kX4QDvXUk.roa
Signing time: Sat 01 Jan 2022 09:55:47 +0000
ROA not before: Sat 01 Jan 2022 09:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.229.96.0/22 maxlen: 22
185.229.44.0/22 maxlen: 22
185.229.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12501965 (0xbec3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50fcce98deef739ea053b5e4e87049533473bf1c
Validity
Not Before: Jan 1 09:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d195f710d9cdc58d5670b0394ba917e100ef5d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:c7:47:de:c6:d7:3e:3d:ae:2e:e5:a7:87:
16:2a:4c:e7:90:f1:3a:29:7b:88:e0:97:6b:3b:1d:
38:29:29:74:b3:6d:c0:96:64:62:77:b8:cb:f7:8e:
b5:85:1b:63:7d:d2:48:fe:b5:65:19:8b:db:76:b7:
06:f8:e2:61:72:53:c7:25:c7:6d:9b:2a:5e:94:0e:
42:a7:c2:d2:a4:07:99:43:6d:38:75:3c:5f:82:cd:
5d:0d:59:7b:b8:6d:4b:81:8e:e7:44:7c:5e:68:98:
e4:30:18:d8:1f:b6:82:fa:68:d0:82:a0:e2:5d:64:
d2:96:83:2a:f7:b0:bb:c7:d0:26:a0:fb:d0:95:63:
23:41:f1:ea:9d:ea:de:7f:51:ee:99:38:a8:8f:6f:
02:35:9e:fd:a7:95:46:a7:ec:1c:ec:c4:42:35:58:
98:87:fe:03:40:05:83:54:30:80:0d:e3:0f:08:e9:
1d:a8:8f:97:8e:57:14:ca:f5:96:b5:6a:02:5c:9c:
86:ea:3e:47:af:8b:5e:ea:a5:c3:df:aa:87:8d:51:
09:67:31:50:b9:0c:5b:08:7c:d6:9d:34:92:68:c5:
73:ec:f3:74:14:86:3a:67:72:2c:7d:5e:61:35:bb:
14:c1:a4:71:6f:b9:8d:25:8e:5b:84:4c:be:89:5f:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:95:F7:10:D9:CD:C5:8D:56:70:B0:39:4B:A9:17:E1:00:EF:5D:49
X509v3 Authority Key Identifier:
keyid:50:FC:CE:98:DE:EF:73:9E:A0:53:B5:E4:E8:70:49:53:34:73:BF:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPzOmN7vc56gU7Xk6HBJUzRzvxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/0ZX3ENnNxY1WcLA5S6kX4QDvXUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d6fed8-532d-4910-8d2a-5828cdbc2d88/1/UPzOmN7vc56gU7Xk6HBJUzRzvxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.44.0/22
185.229.96.0/22
Signature Algorithm: sha256WithRSAEncryption
34:d0:e1:75:6e:10:29:85:6d:e8:c4:1e:57:b9:aa:5c:ff:9c:
eb:9e:2a:8c:e7:9a:2a:49:04:9a:f2:26:e3:75:a3:07:13:ee:
b3:9d:85:b5:47:76:05:83:ef:ae:29:00:07:da:33:91:b5:99:
6c:7b:0c:55:5f:84:ab:2a:d5:04:a6:a0:05:05:d3:85:b6:23:
da:d2:c1:09:7d:f7:e1:bc:d9:f6:6f:65:35:a6:f2:e2:db:dc:
45:57:2b:cf:8c:d9:7f:88:26:c5:39:43:56:01:72:db:4a:a3:
8a:5b:9f:e9:a1:81:a0:de:46:5b:eb:10:e3:0e:4f:be:16:3f:
92:31:59:b7:b3:8f:f3:91:b1:2e:58:c6:f6:21:71:d8:e1:9e:
40:50:0d:05:90:fc:16:05:0f:3c:56:85:c7:8d:c9:1a:d4:29:
fd:a7:08:4d:b5:64:b0:43:8b:ee:9c:84:e3:88:20:e8:d1:7c:
5d:ff:59:7d:f0:b6:08:3b:63:21:6f:c7:1e:4b:db:9d:cb:57:
8d:28:f8:c7:74:56:c5:0f:c9:3f:1d:3e:b7:ac:eb:ab:e7:fc:
6f:36:41:96:8e:7c:80:b9:71:86:86:f6:55:52:1c:62:e2:e8:
ae:d3:9a:94:94:d4:cb:74:57:9b:75:56:ac:a7:56:0b:38:40:
4b:82:bf:97
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAL7DzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGZjY2U5OGRlZWY3MzllYTA1M2I1ZTRlODcwNDk1MzM0NzNiZjFjMB4XDTIyMDEw
MTA5NTU0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDE5NWY3MTBkOWNk
YzU4ZDU2NzBiMDM5NGJhOTE3ZTEwMGVmNWQ0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzGx0fextc+Pa4u5aeHFipM55DxOil7iOCXazsdOCkpdLNt
wJZkYne4y/eOtYUbY33SSP61ZRmL23a3BvjiYXJTxyXHbZsqXpQOQqfC0qQHmUNt
OHU8X4LNXQ1Ze7htS4GO50R8XmiY5DAY2B+2gvpo0IKg4l1k0paDKvewu8fQJqD7
0JVjI0Hx6p3q3n9R7pk4qI9vAjWe/aeVRqfsHOzEQjVYmIf+A0AFg1QwgA3jDwjp
HaiPl45XFMr1lrVqAlychuo+R6+LXuqlw9+qh41RCWcxULkMWwh81p00kmjFc+zz
dBSGOmdyLH1eYTW7FMGkcW+5jSWOW4RMvolfYZMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTRlfcQ2c3FjVZwsDlLqRfhAO9dSTAfBgNVHSMEGDAWgBRQ/M6Y3u9znqBT
teTocElTNHO/HDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VQek9tTjd2YzU2Z1U3WGs2SEJKVXpSenZ4dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvZDZmZWQ4LTUzMmQtNDkxMC04ZDJhLTU4MjhjZGJjMmQ4OC8x
LzBaWDNFTm5OeFkxV2NMQTVTNmtYNFFEdlhVay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
ZDZmZWQ4LTUzMmQtNDkxMC04ZDJhLTU4MjhjZGJjMmQ4OC8xL1VQek9tTjd2YzU2
Z1U3WGs2SEJKVXpSenZ4dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArnlLAMEArnlYDANBgkqhkiG9w0B
AQsFAAOCAQEANNDhdW4QKYVt6MQeV7mqXP+c654qjOeaKkkEmvIm43WjBxPus52F
tUd2BYPvrikAB9ozkbWZbHsMVV+EqyrVBKagBQXThbYj2tLBCX334bzZ9m9lNaby
4tvcRVcrz4zZf4gmxTlDVgFy20qjiluf6aGBoN5GW+sQ4w5PvhY/kjFZt7OP85Gx
LljG9iFx2OGeQFANBZD8FgUPPFaFx43JGtQp/acITbVksEOL7pyE44gg6NF8Xf9Z
ffC2CDtjIW/HHkvbnctXjSj4x3RWxQ/JPx0+t6zrq+f8bzZBlo58gLlxhob2VVIc
YuLortOalJTUy3RXm3VWrKdWCzhAS4K/lw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:42:27 2025 by rpki-client