Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/ZNGwiXDZSUhci0rwSfUBPEmOSnY.roa
File: ZNGwiXDZSUhci0rwSfUBPEmOSnY.roa (raw, json)
Hash identifier: nsX3XRxSkPOnb+OjX+Pp4VPEwA4Tp7HVDYav82cincQ=
Subject key identifier: 64:D1:B0:89:70:D9:49:48:5C:8B:4A:F0:49:F5:01:3C:49:8E:4A:76
Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial: 0194252210468EFB4328A6598649E073A769
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/ZNGwiXDZSUhci0rwSfUBPEmOSnY.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202468
IP address blocks: 185.204.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:10:46:8e:fb:43:28:a6:59:86:49:e0:73:a7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64d1b08970d949485c8b4af049f5013c498e4a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:49:3d:09:19:ef:76:71:a9:41:3d:a8:13:
ad:5e:4b:4d:c6:f2:0f:f2:03:6a:90:a4:bd:90:b5:
27:50:fd:b3:d0:8d:64:2d:45:ad:47:25:63:51:95:
66:94:76:08:11:6b:41:15:8c:1b:1d:1f:9b:f1:63:
78:24:59:45:52:9d:18:a5:79:4a:18:76:42:b9:35:
4f:9e:53:5f:cc:10:3a:57:8c:37:9f:71:b6:06:46:
53:97:c7:a1:73:27:9c:4a:6e:23:ac:81:e8:af:e8:
1c:dc:2b:bf:c5:62:ec:83:e2:60:6d:e1:03:8e:16:
89:5e:34:0c:6c:16:55:ab:c7:cf:b3:fb:fa:d5:38:
59:48:07:2b:ae:39:8a:39:7d:c4:93:28:2b:64:79:
25:c6:63:30:ff:f0:3e:bb:f4:0c:6d:69:19:4b:1a:
1e:b8:bc:25:dd:15:df:95:1f:2d:3e:80:08:f1:de:
dc:8d:66:79:39:9b:b4:1c:84:e4:f4:85:d7:c0:3d:
59:7e:ed:8d:d9:ab:f5:ca:80:07:67:10:ef:ec:b2:
34:1c:42:60:34:e7:d1:f5:56:ab:7d:f6:be:19:7a:
af:20:5b:37:da:35:62:9e:4f:17:13:2a:02:77:18:
72:c2:3b:fa:23:41:84:24:a3:df:fe:34:b8:77:ee:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:B0:89:70:D9:49:48:5C:8B:4A:F0:49:F5:01:3C:49:8E:4A:76
X509v3 Authority Key Identifier:
keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/ZNGwiXDZSUhci0rwSfUBPEmOSnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.168.0/22
Signature Algorithm: sha256WithRSAEncryption
12:07:48:7e:11:ee:3a:2e:c1:56:71:d6:e7:2a:34:42:bd:66:
b8:88:3b:b4:c2:a0:b6:0f:96:cd:4a:ca:fd:07:98:8a:bb:ba:
6e:ca:2e:47:ce:45:5d:e9:ce:9e:27:7d:54:e7:e8:10:ae:40:
51:75:5d:80:8b:03:d1:cc:29:fc:e5:2b:96:6e:21:c7:3f:58:
f8:2d:b3:d0:22:00:fa:0b:5b:f2:d4:b4:ed:b9:68:ac:f6:fc:
48:43:63:74:58:94:aa:b7:b8:5f:d2:c1:74:0c:af:0b:00:3c:
f5:12:2b:b9:85:09:f2:e7:2d:4b:8b:51:94:9b:39:b8:dc:c6:
06:76:cb:8d:25:a7:3e:37:31:73:9d:dd:79:d2:16:c5:2f:1d:
69:3b:a8:d7:f7:62:1b:e6:53:78:7b:90:4a:49:75:63:b4:bc:
31:6c:12:63:32:54:26:a4:9e:27:83:ad:aa:56:df:7f:e0:31:
c1:12:69:61:d8:e4:5a:af:ef:e1:fa:27:32:96:c3:7c:7b:73:
23:45:af:df:99:c9:9b:ab:66:73:56:32:a3:a3:3a:fb:93:fd:
35:58:3a:cf:ad:89:8e:46:5c:52:70:02:78:37:a5:ca:51:d7:
4d:db:46:1c:b5:12:28:19:13:fc:79:c8:74:fe:6b:4d:7a:66:
7a:18:4b:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIhBGjvtDKKZZhkngc6dpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDU2NWY5OWZmNWUwZmZiNWJkZjk5OTVlZDdhODA4ZDQx
NDA2ZTUwHhcNMjUwMTAyMDM0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGQxYjA4OTcwZDk0OTQ4NWM4YjRhZjA0OWY1MDEzYzQ5OGU0YTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYNJPQkZ73ZxqUE9qBOtXktNxvIP
8gNqkKS9kLUnUP2z0I1kLUWtRyVjUZVmlHYIEWtBFYwbHR+b8WN4JFlFUp0YpXlK
GHZCuTVPnlNfzBA6V4w3n3G2BkZTl8ehcyecSm4jrIHor+gc3Cu/xWLsg+JgbeED
jhaJXjQMbBZVq8fPs/v61ThZSAcrrjmKOX3EkygrZHklxmMw//A+u/QMbWkZSxoe
uLwl3RXflR8tPoAI8d7cjWZ5OZu0HITk9IXXwD1Zfu2N2av1yoAHZxDv7LI0HEJg
NOfR9Varffa+GXqvIFs32jVink8XEyoCdxhywjv6I0GEJKPf/jS4d+4NLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGTRsIlw2UlIXItK8En1ATxJjkp2MB8GA1UdIwQY
MBaAFHnVZfmf9eD/tb35mV7XqAjUFAblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRWbC1aXzE0UC0xdmZtWlh0ZW9DTlFVQnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lZTVjZDctYjMwZS00NjZiLWFhYWQt
NmMzYjg3NDQzZTA2LzEvWk5Hd2lYRFpTVWhjaTByd1NmVUJQRW1PU25ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lZTVjZDctYjMwZS00NjZiLWFhYWQtNmMzYjg3NDQzZTA2
LzEvZWRWbC1aXzE0UC0xdmZtWlh0ZW9DTlFVQnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucyoMA0G
CSqGSIb3DQEBCwUAA4IBAQASB0h+Ee46LsFWcdbnKjRCvWa4iDu0wqC2D5bNSsr9
B5iKu7puyi5HzkVd6c6eJ31U5+gQrkBRdV2AiwPRzCn85SuWbiHHP1j4LbPQIgD6
C1vy1LTtuWis9vxIQ2N0WJSqt7hf0sF0DK8LADz1Eiu5hQny5y1Li1GUmzm43MYG
dsuNJac+NzFznd150hbFLx1pO6jX92Ib5lN4e5BKSXVjtLwxbBJjMlQmpJ4ng62q
Vt9/4DHBEmlh2ORar+/h+icylsN8e3MjRa/fmcmbq2ZzVjKjozr7k/01WDrPrYmO
RlxScAJ4N6XKUddN20YctRIoGRP8ech0/mtNemZ6GEss
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:59 2025 by rpki-client