Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zSzOU5vO0poMxhztH6JIqm3Pw_I.roa
File: zSzOU5vO0poMxhztH6JIqm3Pw_I.roa (raw, json)
Hash identifier: zBOm2z0NtCrYcyNijaIdHLvT7T5zHyo12BNQuFZg7uY=
Subject key identifier: CD:2C:CE:53:9B:CE:D2:9A:0C:C6:1C:ED:1F:A2:48:AA:6D:CF:C3:F2
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C353814024D999D7673D176ACF8B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zSzOU5vO0poMxhztH6JIqm3Pw_I.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49241
IP address blocks: 188.130.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c3:53:81:40:24:d9:99:d7:67:3d:17:6a:cf:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd2cce539bced29a0cc61ced1fa248aa6dcfc3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:0f:07:ce:70:bc:63:0f:f9:44:9e:0e:99:
c7:67:1e:06:35:10:53:50:c1:a8:b2:a8:9b:a7:0c:
19:b8:97:b4:ac:53:19:99:d6:81:83:87:4e:43:5b:
4f:41:37:9f:13:04:98:c8:2d:27:cf:f6:44:f0:8f:
d9:7f:63:dc:2a:97:ef:82:b4:ea:4e:99:70:90:68:
52:e3:26:bf:85:2f:f3:fc:0b:4d:28:54:cd:e4:e5:
15:5e:12:f0:3c:76:bd:2a:94:92:9d:ac:e6:70:22:
31:2b:48:d0:c3:f7:f2:85:ee:ae:f9:6d:4d:94:ca:
47:fc:4a:c3:e3:13:5f:48:66:51:7f:30:3a:28:81:
f7:87:3c:4b:ed:51:8b:d6:70:86:a0:91:3f:d2:be:
3f:9e:63:71:f9:1d:95:ad:c3:d4:5c:58:85:63:17:
65:77:d5:e8:f3:46:6a:9d:66:c5:d0:37:a8:41:e6:
d4:c1:bc:bc:37:f3:89:ad:32:ca:eb:b6:a5:06:81:
51:0c:15:0f:b4:d4:cd:36:4e:6c:5f:48:8c:16:a2:
de:c9:82:b0:06:ea:cd:1d:5b:85:29:52:8f:91:10:
eb:84:bf:3e:b6:7c:2c:42:7d:fb:41:0b:8b:29:1a:
03:c8:ee:63:f0:11:66:fc:06:58:97:bd:6c:e0:49:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:CE:53:9B:CE:D2:9A:0C:C6:1C:ED:1F:A2:48:AA:6D:CF:C3:F2
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zSzOU5vO0poMxhztH6JIqm3Pw_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.245.0/24
Signature Algorithm: sha256WithRSAEncryption
54:74:4a:14:6b:40:77:7c:03:0f:44:3a:e4:4e:a8:d7:54:89:
54:c2:44:8c:db:47:27:5d:e5:c4:45:4b:34:c5:c9:90:29:3b:
ba:63:5a:c0:c0:ad:e4:69:9d:83:53:63:35:38:66:84:0e:27:
4a:2c:a4:64:57:12:0a:9d:29:14:58:5d:7c:8a:13:55:bc:ef:
5c:6e:bd:c2:e0:e3:42:e0:d8:3a:7f:bc:fd:e2:9e:79:25:90:
b4:e7:22:62:c7:7d:10:0f:bd:d3:54:1b:7d:b2:d3:17:04:04:
7a:91:de:7b:33:79:ee:62:e8:2c:8d:01:da:b4:bb:4d:9b:f1:
6f:f6:9b:ad:39:27:cc:42:4b:6f:6d:ec:c2:fc:cc:2e:71:cd:
ba:33:98:cb:12:84:17:74:62:fd:e8:3b:6b:c4:17:36:30:ba:
32:a9:4f:bc:60:80:48:ce:54:3c:7d:ee:02:69:99:ee:b6:f5:
f1:37:17:63:65:c8:19:63:25:2a:3b:55:1d:05:43:6e:d3:47:
8b:23:de:67:70:84:1d:e5:22:12:da:1f:49:84:a6:6c:9e:91:
36:af:ac:6b:d5:74:ea:c8:ea:3f:77:8d:7b:3f:54:0b:01:cc:
4f:42:09:30:54:53:b5:41:d0:d8:05:7e:24:8c:76:bb:f1:1c:
3c:1d:d5:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR8NTgUAk2ZnXZz0Xas+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjUwMTAyMTM1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDJjY2U1MzliY2VkMjlhMGNjNjFjZWQxZmEyNDhhYTZkY2ZjM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOAPB85wvGMP+USeDpnHZx4GNRBT
UMGosqibpwwZuJe0rFMZmdaBg4dOQ1tPQTefEwSYyC0nz/ZE8I/Zf2PcKpfvgrTq
TplwkGhS4ya/hS/z/AtNKFTN5OUVXhLwPHa9KpSSnazmcCIxK0jQw/fyhe6u+W1N
lMpH/ErD4xNfSGZRfzA6KIH3hzxL7VGL1nCGoJE/0r4/nmNx+R2VrcPUXFiFYxdl
d9Xo80ZqnWbF0DeoQebUwby8N/OJrTLK67alBoFRDBUPtNTNNk5sX0iMFqLeyYKw
BurNHVuFKVKPkRDrhL8+tnwsQn37QQuLKRoDyO5j8BFm/AZYl71s4EluuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM0szlObztKaDMYc7R+iSKptz8PyMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvelN6T1U1dk8wcG9NeGh6dEg2SklxbTNQd19JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvIL1MA0G
CSqGSIb3DQEBCwUAA4IBAQBUdEoUa0B3fAMPRDrkTqjXVIlUwkSM20cnXeXERUs0
xcmQKTu6Y1rAwK3kaZ2DU2M1OGaEDidKLKRkVxIKnSkUWF18ihNVvO9cbr3C4ONC
4Ng6f7z94p55JZC05yJix30QD73TVBt9stMXBAR6kd57M3nuYugsjQHatLtNm/Fv
9putOSfMQktvbezC/Mwucc26M5jLEoQXdGL96DtrxBc2MLoyqU+8YIBIzlQ8fe4C
aZnutvXxNxdjZcgZYyUqO1UdBUNu00eLI95ncIQd5SIS2h9JhKZsnpE2r6xr1XTq
yOo/d417P1QLAcxPQgkwVFO1QdDYBX4kjHa78Rw8HdX2
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:27:19 2025 by rpki-client