Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/zO3KEbvjD2gonxGkHAHSZayEQdk.roa
File: zO3KEbvjD2gonxGkHAHSZayEQdk.roa (raw, json)
Hash identifier: 0kkCQlIqn/H/RYX6yU4Bu1Q9AnntMD+LZLTKI9zqnuU=
Subject key identifier: CC:ED:CA:11:BB:E3:0F:68:28:9F:11:A4:1C:01:D2:65:AC:84:41:D9
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019145A62FEE104A317E14BA8943AE565806
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/zO3KEbvjD2gonxGkHAHSZayEQdk.roa
Signing time: Mon 12 Aug 2024 08:13:24 +0000
ROA not before: Mon 12 Aug 2024 08:13:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214378
IP address blocks: 95.169.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:a6:2f:ee:10:4a:31:7e:14:ba:89:43:ae:56:58:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Aug 12 08:13:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccedca11bbe30f68289f11a41c01d265ac8441d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:ab:f9:c5:7a:4d:7c:9e:32:60:98:c2:0b:
a8:c5:b7:06:ca:56:ba:ae:0f:b1:c6:b7:69:de:d8:
e7:4c:ad:24:30:03:b9:32:3e:26:66:c0:48:16:70:
7f:db:25:9d:7a:b3:11:ae:9b:3c:95:94:64:84:24:
c1:fa:d5:66:59:0c:81:d1:2a:f0:64:5d:de:ed:de:
36:e7:1c:2b:b7:0c:81:37:cf:1c:73:6c:b3:ec:38:
88:0c:bb:64:eb:bc:24:98:21:b6:98:c8:61:89:bd:
67:14:6c:8c:f1:a5:99:89:a6:c1:80:d9:ec:f5:78:
fa:6d:18:c8:95:8f:8d:67:17:c9:66:ba:76:65:08:
83:5b:95:25:5e:8b:c2:bd:45:27:93:f1:9b:5e:5e:
41:c9:07:c9:63:7c:f5:eb:ed:63:83:b2:c5:00:bf:
59:66:45:c1:2a:de:7d:db:de:8c:63:81:52:01:cb:
15:60:ed:5e:17:b1:30:e5:9f:1a:f5:a3:6b:f7:20:
83:99:1a:1c:90:57:a4:26:3c:75:bb:5c:39:e4:5a:
7f:f4:22:07:d6:bc:21:77:51:f2:f5:40:15:ed:b4:
4c:65:c1:8e:fc:ef:86:c2:6f:31:b4:dc:00:9e:44:
4f:ec:35:a3:04:54:01:36:72:d1:7a:ac:05:8d:13:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:CA:11:BB:E3:0F:68:28:9F:11:A4:1C:01:D2:65:AC:84:41:D9
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/zO3KEbvjD2gonxGkHAHSZayEQdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.209.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5b:17:11:14:17:fb:3b:41:83:39:20:ba:f9:86:b9:b1:de:
1c:20:c9:ac:c2:7f:bf:21:1a:ec:3c:01:e8:e9:cd:02:44:03:
c0:e2:ec:8d:d7:7f:46:0a:09:0f:3a:99:7b:7c:6f:9d:74:9a:
22:34:3d:30:1a:c2:94:78:05:f4:26:39:15:a3:cc:db:c6:ea:
71:ea:9e:c9:c6:48:93:ba:ca:5b:c5:b3:4b:49:70:d7:3e:7f:
9b:e2:4e:4f:80:39:72:7d:f4:c1:fc:ec:92:0e:1a:dd:af:85:
00:af:3d:e7:f6:af:11:ef:ff:14:00:27:a0:1d:42:39:02:3a:
72:be:a6:17:e0:d9:9a:68:b3:22:04:50:bf:32:1b:ca:d5:c8:
fd:f1:ed:93:ea:d2:88:49:9d:46:63:fa:f2:71:91:b3:b1:b4:
e1:6e:25:69:cf:0b:81:e8:eb:b0:a7:da:53:cd:67:a6:e0:ce:
e8:1e:d0:b1:4c:e3:07:44:9c:ed:69:40:29:86:6b:e8:c9:d6:
15:88:31:19:eb:78:3c:47:d5:d1:3e:8b:9f:64:9b:8e:d4:e5:
5f:0c:06:65:9e:bd:ed:0a:25:94:bc:c8:20:6c:e5:7f:9f:ad:
e4:0f:0f:21:ab:d7:2a:19:f4:9e:6f:70:b7:bf:58:26:12:53:
65:02:d5:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFFpi/uEEoxfhS6iUOuVlgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl
NjdiOTcwHhcNMjQwODEyMDgxMzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2VkY2ExMWJiZTMwZjY4Mjg5ZjExYTQxYzAxZDI2NWFjODQ0MWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2ur+cV6TXyeMmCYwguoxbcGyla6
rg+xxrdp3tjnTK0kMAO5Mj4mZsBIFnB/2yWderMRrps8lZRkhCTB+tVmWQyB0Srw
ZF3e7d425xwrtwyBN88cc2yz7DiIDLtk67wkmCG2mMhhib1nFGyM8aWZiabBgNns
9Xj6bRjIlY+NZxfJZrp2ZQiDW5UlXovCvUUnk/GbXl5ByQfJY3z16+1jg7LFAL9Z
ZkXBKt59296MY4FSAcsVYO1eF7Ew5Z8a9aNr9yCDmRockFekJjx1u1w55Fp/9CIH
1rwhd1Hy9UAV7bRMZcGO/O+Gwm8xtNwAnkRP7DWjBFQBNnLReqwFjRMXowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMztyhG74w9oKJ8RpBwB0mWshEHZMB8GA1UdIwQY
MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt
ZmJlMWEwZDBhYTk4LzEvek8zS0VidmpEMmdvbnhHa0hBSFNaYXlFUWRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4
LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6nRMA0G
CSqGSIb3DQEBCwUAA4IBAQAHWxcRFBf7O0GDOSC6+Ya5sd4cIMmswn+/IRrsPAHo
6c0CRAPA4uyN139GCgkPOpl7fG+ddJoiND0wGsKUeAX0JjkVo8zbxupx6p7JxkiT
uspbxbNLSXDXPn+b4k5PgDlyffTB/OySDhrdr4UArz3n9q8R7/8UACegHUI5Ajpy
vqYX4NmaaLMiBFC/MhvK1cj98e2T6tKISZ1GY/rycZGzsbThbiVpzwuB6Ouwp9pT
zWem4M7oHtCxTOMHRJztaUAphmvoydYViDEZ63g8R9XRPoufZJuO1OVfDAZlnr3t
CiWUvMggbOV/n63kDw8hq9cqGfSeb3C3v1gmElNlAtXx
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:38:51 2025 by rpki-client