Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa
File: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (raw, json)
Hash identifier: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=
Subject key identifier: 66:A3:21:D3:D5:CB:FC:EB:8B:D0:80:AA:F9:37:EF:19:D8:F8:A6:63
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 019425FDB35FF3D57EF9F5E8E637DD8F340D
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202687
IP address blocks: 185.84.240.0/24 maxlen: 24
2a03:4bc0:1015::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b3:5f:f3:d5:7e:f9:f5:e8:e6:37:dd:8f:34:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66a321d3d5cbfceb8bd080aaf937ef19d8f8a663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:09:bf:da:bf:d0:e3:6d:a8:38:4c:f1:4a:
69:26:83:e4:80:25:0a:5e:d9:f7:8c:ce:76:d8:97:
ce:9d:7d:ca:25:c6:ef:26:03:de:c9:44:bc:70:bc:
04:e9:d8:73:2e:ac:b9:de:73:79:2a:7e:a2:93:67:
54:32:5d:1c:c0:6c:91:f3:b0:9c:db:37:34:fb:5f:
a2:94:71:d6:4d:ae:88:bb:51:79:53:26:e2:15:b3:
09:ca:e8:34:fb:31:93:ba:98:03:c2:e3:ad:46:dc:
05:e3:8e:aa:04:51:ef:6b:19:97:a9:1d:1b:36:84:
c6:22:3e:26:40:a4:fd:90:04:b3:84:ae:55:ce:ae:
4c:36:a8:88:ce:f5:7a:b8:26:14:a1:0d:06:6f:94:
e9:e7:7c:5e:eb:57:cf:d6:c6:eb:8e:6e:d0:6b:c0:
52:7c:74:2c:2e:8b:6e:0e:8a:0b:00:41:7b:13:02:
08:97:2c:c8:ed:26:54:ea:48:54:6e:e3:fa:a8:c1:
07:a3:cf:7a:4f:f1:e4:89:93:42:c5:75:ee:a3:75:
0a:42:7e:6b:40:f4:33:cd:e0:c5:1b:6c:8b:d1:c0:
9f:aa:f7:3e:67:ff:33:ff:fa:62:7c:99:6e:ce:82:
37:79:c3:7e:31:f8:6d:30:c0:54:5d:d8:35:b3:fd:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A3:21:D3:D5:CB:FC:EB:8B:D0:80:AA:F9:37:EF:19:D8:F8:A6:63
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.240.0/24
IPv6:
2a03:4bc0:1015::/48
Signature Algorithm: sha256WithRSAEncryption
70:40:1a:2a:cc:75:00:4a:a8:a2:e4:8d:2e:66:fa:b4:24:b6:
4e:c0:95:85:4c:e9:cc:c8:98:fc:c8:2d:7f:b7:fe:3c:3e:41:
e5:b8:74:81:d5:81:57:65:f6:5f:80:3d:b7:7f:ba:e5:c4:b8:
24:e9:a7:4e:5a:94:38:a0:b5:a7:f6:0c:3a:07:b4:d3:07:ad:
8d:0e:74:e5:5a:7c:4f:9d:22:12:18:79:60:1e:c7:8b:d6:6b:
c5:9d:85:5a:3c:fd:e5:d0:84:02:c7:b7:84:d8:31:69:48:72:
8e:a1:7a:df:ce:55:00:b4:25:22:f3:df:a0:ac:6f:da:76:89:
91:92:2a:25:f8:0c:91:7a:fa:14:0e:29:92:16:f0:52:94:15:
6a:2b:64:25:3e:8c:b1:62:4f:b1:27:e1:79:14:fd:a9:98:4f:
c4:1a:cd:37:78:fc:f4:70:b1:77:cb:6a:3a:46:18:c2:33:9c:
dd:ac:40:75:be:32:58:a1:26:fb:a8:04:63:b1:66:47:57:aa:
24:81:c6:95:71:15:28:8c:f6:c7:4e:aa:7b:1b:35:58:90:cb:
16:59:f8:83:d7:d8:21:3b:f1:e9:1f:e8:9b:da:2b:7c:89:f1:
47:4a:57:29:cb:5c:13:19:89:51:60:d5:60:00:e5:95:ed:4f:
4e:55:15:2e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQl/bNf89V++fXo5jfdjzQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NDA3NGFhODQ0OTgzMGRhOWIyMGIzYWZiMDY4MmQzYzAz
MmY5ZmUwHhcNMjUwMTAyMDc0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmEzMjFkM2Q1Y2JmY2ViOGJkMDgwYWFmOTM3ZWYxOWQ4ZjhhNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y4Jv9q/0ONtqDhM8UppJoPkgCUK
Xtn3jM522JfOnX3KJcbvJgPeyUS8cLwE6dhzLqy53nN5Kn6ik2dUMl0cwGyR87Cc
2zc0+1+ilHHWTa6Iu1F5UybiFbMJyug0+zGTupgDwuOtRtwF446qBFHvaxmXqR0b
NoTGIj4mQKT9kASzhK5Vzq5MNqiIzvV6uCYUoQ0Gb5Tp53xe61fP1sbrjm7Qa8BS
fHQsLotuDooLAEF7EwIIlyzI7SZU6khUbuP6qMEHo896T/HkiZNCxXXuo3UKQn5r
QPQzzeDFG2yL0cCfqvc+Z/8z//pifJluzoI3ecN+MfhtMMBUXdg1s/1SMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGajIdPVy/zri9CAqvk37xnY+KZjMB8GA1UdIwQY
MBaAFLZAdKqESYMNqbILOvsGgtPAMvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEt
MzUxNzFhZWRkMzEzLzEvWnFNaDA5WExfT3VMMElDcS1UZnZHZGo0cG1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEtMzUxNzFhZWRkMzEz
LzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuVTwMA8E
AgACMAkDBwAqA0vAEBUwDQYJKoZIhvcNAQELBQADggEBAHBAGirMdQBKqKLkjS5m
+rQktk7AlYVM6czImPzILX+3/jw+QeW4dIHVgVdl9l+APbd/uuXEuCTpp05alDig
taf2DDoHtNMHrY0OdOVafE+dIhIYeWAex4vWa8WdhVo8/eXQhALHt4TYMWlIco6h
et/OVQC0JSLz36Csb9p2iZGSKiX4DJF6+hQOKZIW8FKUFWorZCU+jLFiT7En4XkU
/amYT8QazTd4/PRwsXfLajpGGMIznN2sQHW+MlihJvuoBGOxZkdXqiSBxpVxFSiM
9sdOqnsbNViQyxZZ+IPX2CE78ekf6JvaK3yJ8UdKVynLXBMZiVFg1WAA5ZXtT05V
FS4=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:52 2025 by rpki-client