Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/zPFc5xzrxxMWf2K11uBlgIiWqTo.roa
File: zPFc5xzrxxMWf2K11uBlgIiWqTo.roa (raw, json)
Hash identifier: 3x/T35aDdfP5Wrtlu3UJYc2NEgecLDM5KH+dyoNyYx0=
Subject key identifier: CC:F1:5C:E7:1C:EB:C7:13:16:7F:62:B5:D6:E0:65:80:88:96:A9:3A
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 0194475FF75CD0EF25A2EDEFF46926841327
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/zPFc5xzrxxMWf2K11uBlgIiWqTo.roa
Signing time: Wed 08 Jan 2025 19:24:19 +0000
ROA not before: Wed 08 Jan 2025 19:24:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 185.193.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:5f:f7:5c:d0:ef:25:a2:ed:ef:f4:69:26:84:13:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 8 19:24:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccf15ce71cebc713167f62b5d6e065808896a93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:5c:1d:dd:37:86:7b:39:a7:b6:88:f4:5a:
d4:e7:69:d1:c1:2b:47:1f:1e:0a:1d:0d:8b:ce:26:
2a:6e:de:dc:78:e1:3e:36:47:e6:48:96:b8:f9:e6:
27:29:7f:d7:7f:ce:bb:f4:d8:8b:e9:31:e9:9f:9b:
b7:56:5d:ba:e6:5e:cf:b2:d9:a3:e6:bb:b0:f0:52:
01:ca:16:5b:42:d0:ca:23:cb:07:d1:da:cb:6f:3c:
af:7c:71:95:dd:38:a2:81:68:3e:77:f3:a9:88:05:
fa:e9:09:a6:a5:b2:c6:10:43:8f:8c:bd:3b:07:64:
a1:80:82:af:a4:ab:53:97:ca:46:8c:de:d4:eb:bd:
b7:e6:cd:7f:87:2d:73:a6:45:b3:25:86:92:4d:20:
33:fa:81:15:ba:70:2d:44:1d:65:23:e9:c5:19:90:
ec:7b:5c:8a:92:f6:3a:b0:e4:32:90:93:bd:29:df:
fe:84:14:0c:e6:a7:9e:ff:88:2a:d0:da:38:cd:02:
a0:dc:ae:64:f7:d5:b9:be:84:e2:47:e1:19:97:1b:
a6:da:ad:3b:f5:f9:dc:6a:62:7b:83:e6:f8:e2:28:
a7:42:d4:a1:84:5b:5c:6d:32:84:22:bc:50:1e:a2:
30:90:8b:8d:4c:b8:c8:c5:7a:a7:8d:52:fe:79:fa:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F1:5C:E7:1C:EB:C7:13:16:7F:62:B5:D6:E0:65:80:88:96:A9:3A
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/zPFc5xzrxxMWf2K11uBlgIiWqTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.166.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c1:01:cf:24:6a:c2:8f:98:75:0f:6b:a2:a3:6b:00:1c:df:
e8:af:cd:79:b4:5f:29:7c:af:6e:9b:e1:9a:6c:99:cd:67:bb:
40:f5:ec:07:e7:e9:87:a2:eb:70:b5:2c:ce:93:ed:a8:c5:dd:
16:17:19:4e:19:32:fe:f7:cd:9e:47:63:22:e4:34:6a:07:ca:
18:74:6b:9f:7d:27:12:ea:b2:9d:b8:d5:2a:d1:a6:cb:2e:31:
a5:e2:8c:dd:3c:3d:ad:fe:fb:85:b5:4b:34:9d:17:c3:55:02:
98:c6:5d:b9:ae:a4:a1:3a:eb:c7:e7:21:04:e4:9d:fa:59:3e:
ef:b6:cc:2b:9f:6c:8f:37:f2:a9:a5:01:4c:55:ef:7f:86:12:
e6:80:af:b7:00:d7:b1:93:fc:e0:73:74:ad:14:fd:43:01:fd:
2f:7a:32:1a:c3:76:6a:d3:f0:5b:4f:f9:4c:d7:d9:33:55:a3:
e5:9c:1c:37:f8:7a:58:07:08:80:7c:3c:38:c6:0b:4b:74:80:
2b:da:1b:41:12:ec:01:5a:21:a0:d0:ec:6c:b7:64:c0:96:63:
3b:fc:17:f4:d8:bb:dd:7a:f0:e2:f9:1a:49:32:63:b1:bf:ff:
ae:20:c1:8e:64:f3:bf:cc:ca:3e:fb:ce:08:1b:20:0d:ae:c7:
66:e6:a3:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRHX/dc0O8lou3v9GkmhBMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm
MzcxYWIwHhcNMjUwMTA4MTkyNDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2YxNWNlNzFjZWJjNzEzMTY3ZjYyYjVkNmUwNjU4MDg4OTZhOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQNcHd03hns5p7aI9FrU52nRwStH
Hx4KHQ2LziYqbt7ceOE+NkfmSJa4+eYnKX/Xf8679NiL6THpn5u3Vl265l7Pstmj
5ruw8FIByhZbQtDKI8sH0drLbzyvfHGV3TiigWg+d/OpiAX66QmmpbLGEEOPjL07
B2ShgIKvpKtTl8pGjN7U67235s1/hy1zpkWzJYaSTSAz+oEVunAtRB1lI+nFGZDs
e1yKkvY6sOQykJO9Kd/+hBQM5qee/4gq0No4zQKg3K5k99W5voTiR+EZlxum2q07
9fncamJ7g+b44iinQtShhFtcbTKEIrxQHqIwkIuNTLjIxXqnjVL+efrLnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMzxXOcc68cTFn9itdbgZYCIlqk6MB8GA1UdIwQY
MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt
YjkyMTFlMWZjMWFjLzEvelBGYzV4enJ4eE1XZjJLMTF1QmxnSWlXcVRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj
LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucGmMA0G
CSqGSIb3DQEBCwUAA4IBAQAnwQHPJGrCj5h1D2uio2sAHN/or815tF8pfK9um+Ga
bJnNZ7tA9ewH5+mHoutwtSzOk+2oxd0WFxlOGTL+982eR2Mi5DRqB8oYdGuffScS
6rKduNUq0abLLjGl4ozdPD2t/vuFtUs0nRfDVQKYxl25rqShOuvH5yEE5J36WT7v
tswrn2yPN/KppQFMVe9/hhLmgK+3ANexk/zgc3StFP1DAf0vejIaw3Zq0/BbT/lM
19kzVaPlnBw3+HpYBwiAfDw4xgtLdIAr2htBEuwBWiGg0Oxst2TAlmM7/Bf02Lvd
evDi+RpJMmOxv/+uIMGOZPO/zMo++84IGyANrsdm5qPv
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:19:54 2025 by rpki-client