Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/zJ5HuW0E0TGZZfgljgAF5D7k8ls.roa
File: zJ5HuW0E0TGZZfgljgAF5D7k8ls.roa (raw, json)
Hash identifier: ZwZyb8FoTIdz5pWVI4AGbo+vTemCHakNFz3grFFiTCQ=
Subject key identifier: CC:9E:47:B9:6D:04:D1:31:99:65:F8:25:8E:00:05:E4:3E:E4:F2:5B
Certificate issuer: /CN=494f19145bf8432fe8f30fc2452f3e3002722c67
Certificate serial: A487
Authority key identifier: 49:4F:19:14:5B:F8:43:2F:E8:F3:0F:C2:45:2F:3E:30:02:72:2C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU8ZFFv4Qy_o8w_CRS8-MAJyLGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/zJ5HuW0E0TGZZfgljgAF5D7k8ls.roa
Signing time: Wed 08 Jun 2022 14:21:02 +0000
ROA not before: Wed 08 Jun 2022 14:21:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 91.218.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42119 (0xa487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494f19145bf8432fe8f30fc2452f3e3002722c67
Validity
Not Before: Jun 8 14:21:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc9e47b96d04d1319965f8258e0005e43ee4f25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:02:9b:63:e9:2c:5b:05:54:85:b2:cd:56:
ee:63:b7:e9:8d:e6:46:f5:ac:ea:2a:b6:14:c9:a9:
9e:b9:51:b6:44:56:8e:b9:14:87:32:4f:e6:8f:2e:
d3:8c:84:ca:17:19:17:40:af:57:b3:66:f4:99:bb:
d2:8c:9d:3e:83:c9:d3:7d:85:cd:8b:19:e3:e8:d8:
23:d3:44:fe:39:cd:4a:42:75:64:c8:8b:2c:e9:7d:
50:83:75:08:f6:eb:01:4d:c7:8a:00:56:b1:0c:b0:
38:42:2e:68:cc:5c:73:e3:39:f3:a8:82:76:6a:67:
42:95:ce:c0:71:16:3c:4c:d4:36:46:a1:53:d4:24:
a4:d5:a6:86:3f:4f:74:7b:9a:c2:40:8b:97:2c:17:
3d:d6:a6:58:47:03:2d:bd:5a:9f:80:25:70:40:0a:
cf:cc:0f:1e:8c:25:bb:1e:9d:f0:24:e8:04:2f:07:
5f:29:9e:ca:a4:55:a8:f7:83:e0:36:30:e6:69:49:
13:51:de:d0:2b:86:56:2c:fe:5f:b1:ca:15:4b:64:
37:e4:64:69:5f:e8:c6:5d:2a:5f:a7:05:81:d6:80:
02:f7:c0:c7:7d:51:39:85:9d:ed:4f:a1:f0:fb:73:
ce:16:0c:03:3b:4e:9c:5e:35:5a:8d:02:64:21:75:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9E:47:B9:6D:04:D1:31:99:65:F8:25:8E:00:05:E4:3E:E4:F2:5B
X509v3 Authority Key Identifier:
keyid:49:4F:19:14:5B:F8:43:2F:E8:F3:0F:C2:45:2F:3E:30:02:72:2C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU8ZFFv4Qy_o8w_CRS8-MAJyLGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/zJ5HuW0E0TGZZfgljgAF5D7k8ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cf1d6c-5f1e-443d-89c4-ea2786334732/1/SU8ZFFv4Qy_o8w_CRS8-MAJyLGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5d:89:fa:f7:a5:92:9a:b2:f7:2c:67:7b:6a:b1:a1:b4:b1:
35:de:45:fd:03:15:52:73:f3:59:3d:44:74:71:d2:c2:cb:e1:
60:af:50:87:15:4e:08:6a:e2:a7:6b:0b:62:d5:d2:9b:6f:50:
50:10:16:b6:26:36:2a:f8:e5:7b:93:ce:46:71:f5:06:1e:fc:
8b:15:54:77:ad:55:03:83:b6:29:fc:77:8c:ef:f7:63:60:da:
9d:f2:45:56:1e:9c:79:91:8d:0b:a3:3f:ac:81:f7:51:2d:d0:
e8:89:e8:4f:e2:34:a6:83:39:68:7c:c8:41:44:f1:0e:35:ce:
66:40:c1:eb:88:b7:70:97:c9:25:cc:dc:8a:73:de:91:c5:ca:
d0:f7:49:f5:48:2d:58:a8:84:d7:80:9c:f2:08:09:04:fa:46:
97:3b:2e:7a:54:8a:93:ec:f1:af:54:af:c0:61:2c:21:d6:c0:
24:9f:ca:3a:3e:b8:b3:43:cf:51:c0:02:01:af:1b:32:5e:ec:
75:f1:f7:f7:a9:6e:cc:2e:d0:0e:52:63:60:a0:7e:33:38:cc:
19:c4:82:ce:ae:26:1d:5d:b0:25:c9:fd:4f:12:58:5b:8d:5d:
17:98:d6:47:92:4f:52:17:15:9d:ac:6b:15:c7:55:4a:dd:87:
47:85:16:15
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAKSHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
NGYxOTE0NWJmODQzMmZlOGYzMGZjMjQ1MmYzZTMwMDI3MjJjNjcwHhcNMjIwNjA4
MTQyMTAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjYzllNDdiOTZkMDRk
MTMxOTk2NWY4MjU4ZTAwMDVlNDNlZTRmMjViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwqMCm2PpLFsFVIWyzVbuY7fpjeZG9azqKrYUyameuVG2RFaO
uRSHMk/mjy7TjITKFxkXQK9Xs2b0mbvSjJ0+g8nTfYXNixnj6Ngj00T+Oc1KQnVk
yIss6X1Qg3UI9usBTceKAFaxDLA4Qi5ozFxz4znzqIJ2amdClc7AcRY8TNQ2RqFT
1CSk1aaGP090e5rCQIuXLBc91qZYRwMtvVqfgCVwQArPzA8ejCW7Hp3wJOgELwdf
KZ7KpFWo94PgNjDmaUkTUd7QK4ZWLP5fscoVS2Q35GRpX+jGXSpfpwWB1oAC98DH
fVE5hZ3tT6Hw+3POFgwDO06cXjVajQJkIXVbfwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMyeR7ltBNExmWX4JY4ABeQ+5PJbMB8GA1UdIwQYMBaAFElPGRRb+EMv6PMP
wkUvPjACcixnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
U1U4WkZGdjRReV9vOHdfQ1JTOC1NQUp5TEdjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81ZC9jZjFkNmMtNWYxZS00NDNkLTg5YzQtZWEyNzg2MzM0NzMyLzEv
eko1SHVXMEUwVEdaWmZnbGpnQUY1RDdrOGxzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9j
ZjFkNmMtNWYxZS00NDNkLTg5YzQtZWEyNzg2MzM0NzMyLzEvU1U4WkZGdjRReV9v
OHdfQ1JTOC1NQUp5TEdjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9qLMA0GCSqGSIb3DQEBCwUAA4IB
AQCWXYn696WSmrL3LGd7arGhtLE13kX9AxVSc/NZPUR0cdLCy+Fgr1CHFU4IauKn
awti1dKbb1BQEBa2JjYq+OV7k85GcfUGHvyLFVR3rVUDg7Yp/HeM7/djYNqd8kVW
Hpx5kY0Loz+sgfdRLdDoiehP4jSmgzlofMhBRPEONc5mQMHriLdwl8klzNyKc96R
xcrQ90n1SC1YqITXgJzyCAkE+kaXOy56VIqT7PGvVK/AYSwh1sAkn8o6PrizQ89R
wAIBrxsyXux18ff3qW7MLtAOUmNgoH4zOMwZxILOriYdXbAlyf1PElhbjV0XmNZH
kk9SFxWdrGsVx1VK3YdHhRYV
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:57 2025 by rpki-client