Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/ZHtshAVSbLpIP6v49gVS0CpZjoA.roa
File: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (raw, json)
Hash identifier: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=
Subject key identifier: 64:7B:6C:84:05:52:6C:BA:48:3F:AB:F8:F6:05:52:D0:2A:59:8E:80
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019426D9E61CF3A911BBD344FD28D67D8313
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/ZHtshAVSbLpIP6v49gVS0CpZjoA.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47908
IP address blocks: 193.142.111.0/24 maxlen: 24
2001:67c:170::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e6:1c:f3:a9:11:bb:d3:44:fd:28:d6:7d:83:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=647b6c8405526cba483fabf8f60552d02a598e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:7a:03:2f:dc:ff:45:8d:e9:c0:57:a6:ab:
7a:95:7d:e7:78:69:f2:e6:64:91:7e:28:42:c3:61:
66:c2:9d:74:b6:4f:b5:80:26:d4:b7:eb:33:4b:92:
86:8c:23:b2:25:8a:97:39:39:89:37:45:fc:39:3b:
5e:41:7b:29:d3:ce:d8:30:37:4f:dc:17:d8:29:17:
17:6e:f9:53:8d:66:52:40:81:03:fc:ab:65:f7:db:
df:db:56:bc:4a:61:c8:e2:06:f5:30:29:26:80:f8:
ab:95:3e:0b:8d:ba:d2:ea:48:83:e6:5d:15:19:1c:
d6:01:cb:a2:e2:ef:11:1a:cb:6a:0c:ed:8f:f3:6f:
cd:7b:55:84:31:cb:49:88:64:1e:26:2b:99:93:d8:
08:3f:9a:49:f8:99:61:b8:b6:63:e8:98:e7:03:d3:
65:b1:6f:c8:88:44:a2:1c:63:42:2d:48:71:9c:64:
e3:50:73:f6:bb:c0:56:6c:4c:91:02:9e:10:97:07:
86:cb:b3:1d:0c:4f:70:e8:33:50:61:5e:6f:3f:ff:
93:f2:70:20:d7:c4:2a:0b:ae:42:68:17:df:73:8b:
ed:ec:f4:8f:5e:f5:fc:23:cf:99:c7:ac:77:72:4b:
06:a0:5b:8b:3d:6e:3c:e2:a8:43:f6:33:62:6d:c5:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:6C:84:05:52:6C:BA:48:3F:AB:F8:F6:05:52:D0:2A:59:8E:80
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/ZHtshAVSbLpIP6v49gVS0CpZjoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.111.0/24
IPv6:
2001:67c:170::/48
Signature Algorithm: sha256WithRSAEncryption
5a:b6:ae:ea:bf:3f:19:98:62:b2:9d:54:44:cc:19:5b:b9:f1:
2f:25:9a:3c:1d:64:41:7d:43:bd:46:be:79:4c:01:19:a2:a2:
ad:83:fd:b7:9a:cb:ad:57:9a:47:ee:b4:80:58:2d:c7:91:38:
b7:6f:84:b2:16:79:4e:3f:4e:4b:13:04:75:78:9a:e9:a8:33:
3f:b4:b0:6c:6d:8d:b2:70:a6:33:2f:77:70:a7:22:ca:f1:c7:
38:53:3d:3d:bf:d4:71:2f:52:c5:5a:bd:4f:f6:9b:a0:db:25:
3a:04:24:7a:06:de:ed:98:e9:97:eb:06:51:ac:0c:ec:6c:b3:
ca:29:c7:73:53:4e:3d:c8:d1:11:0f:b4:ad:46:e5:ac:7b:e6:
f5:66:32:67:f5:bb:c1:3d:f6:49:b2:44:35:42:e8:be:ad:64:
52:98:a2:a6:85:06:fe:b6:b6:cf:97:29:70:31:55:b0:2b:19:
d6:97:8c:ed:52:e9:04:52:cd:47:bb:c5:e7:db:ed:e8:f4:8c:
7e:80:d5:b6:33:be:db:7b:e4:54:38:17:35:d9:9a:de:84:a6:
19:7a:05:8f:bb:ad:f0:48:5f:d4:2e:c8:96:75:ad:5f:10:31:
bc:e4:15:ac:99:f5:af:0d:17:0c:f7:1e:56:39:66:8b:14:e8:
3e:28:de:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQm2eYc86kRu9NE/SjWfYMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGQyMzZkODA0ZDVhYTlhMmNhYjM5Y2Y1MTAyMmFjMDVl
MGIxODMwHhcNMjUwMTAyMTE1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDdiNmM4NDA1NTI2Y2JhNDgzZmFiZjhmNjA1NTJkMDJhNTk4ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEN6Ay/c/0WN6cBXpqt6lX3neGny
5mSRfihCw2Fmwp10tk+1gCbUt+szS5KGjCOyJYqXOTmJN0X8OTteQXsp087YMDdP
3BfYKRcXbvlTjWZSQIED/Ktl99vf21a8SmHI4gb1MCkmgPirlT4LjbrS6kiD5l0V
GRzWAcui4u8RGstqDO2P82/Ne1WEMctJiGQeJiuZk9gIP5pJ+JlhuLZj6JjnA9Nl
sW/IiESiHGNCLUhxnGTjUHP2u8BWbEyRAp4QlweGy7MdDE9w6DNQYV5vP/+T8nAg
18QqC65CaBffc4vt7PSPXvX8I8+Zx6x3cksGoFuLPW484qhD9jNibcVKiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGR7bIQFUmy6SD+r+PYFUtAqWY6AMB8GA1UdIwQY
MBaAFH3dI22ATVqposqznPUQIqwF4LGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2Mt
ODU1ZTYwNzJlZjM2LzEvWkh0c2hBVlNiTHBJUDZ2NDlnVlMwQ3Baam9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2MtODU1ZTYwNzJlZjM2
LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwY5vMA8E
AgACMAkDBwAgAQZ8AXAwDQYJKoZIhvcNAQELBQADggEBAFq2ruq/PxmYYrKdVETM
GVu58S8lmjwdZEF9Q71GvnlMARmioq2D/beay61XmkfutIBYLceROLdvhLIWeU4/
TksTBHV4mumoMz+0sGxtjbJwpjMvd3CnIsrxxzhTPT2/1HEvUsVavU/2m6DbJToE
JHoG3u2Y6ZfrBlGsDOxss8opx3NTTj3I0REPtK1G5ax75vVmMmf1u8E99kmyRDVC
6L6tZFKYoqaFBv62ts+XKXAxVbArGdaXjO1S6QRSzUe7xefb7ej0jH6A1bYzvtt7
5FQ4FzXZmt6Ephl6BY+7rfBIX9QuyJZ1rV8QMbzkFayZ9a8NFwz3HlY5ZosU6D4o
3pU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:45 2025 by rpki-client