Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/ZIWXo67jPvL3hLYa3gap-960Rno.roa
File: ZIWXo67jPvL3hLYa3gap-960Rno.roa (raw, json)
Hash identifier: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=
Subject key identifier: 64:85:97:A3:AE:E3:3E:F2:F7:84:B6:1A:DE:06:A9:FB:DE:B4:46:7A
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 01942746D6D94FEDB780F994E8F8CCCE14A8
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/ZIWXo67jPvL3hLYa3gap-960Rno.roa
Signing time: Thu 02 Jan 2025 13:49:01 +0000
ROA not before: Thu 02 Jan 2025 13:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31726
IP address blocks: 185.102.28.0/22 maxlen: 22
2a06:2240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:d6:d9:4f:ed:b7:80:f9:94:e8:f8:cc:ce:14:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Jan 2 13:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=648597a3aee33ef2f784b61ade06a9fbdeb4467a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:6e:14:e9:8f:7d:93:96:6c:bc:70:54:2d:
68:72:a8:0d:39:f8:9a:f6:7c:d2:0a:93:79:c5:ed:
cd:e2:25:7b:a8:19:40:15:ed:e8:b4:e7:c1:69:46:
eb:7b:fa:46:09:a8:6e:e3:d7:12:55:86:84:cf:a6:
92:47:d3:c8:ae:93:a1:31:a2:7e:5a:30:49:fc:3b:
3a:84:e4:c4:ab:3c:b5:03:f7:11:8b:64:e2:9f:3c:
8c:63:19:f7:18:2a:64:e0:2f:c8:90:cd:55:b1:91:
4d:8d:be:18:ce:c9:d3:7f:ac:2b:45:79:fe:6d:72:
2b:13:b0:33:62:b8:53:02:78:e4:ea:da:ec:fe:aa:
10:7f:5a:7c:37:2f:ba:37:9a:ef:86:51:77:2c:64:
86:db:1d:3d:f2:d6:fd:e3:9c:33:ec:91:dc:f2:d4:
9e:9f:d7:e7:f1:f2:c1:34:84:f4:50:d2:ed:00:be:
4f:d9:fc:66:cf:5a:d0:48:95:74:6f:b7:75:f4:2e:
23:d0:13:d9:34:10:0e:c9:fd:cb:e7:01:1a:6b:cd:
6c:76:90:18:9c:7f:26:74:54:04:42:5d:8a:c8:dc:
e4:b1:9c:3f:ec:ee:ba:6b:73:f7:0c:97:20:36:c1:
78:7f:d3:94:65:3d:3e:05:be:c3:e2:ec:2b:49:16:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:85:97:A3:AE:E3:3E:F2:F7:84:B6:1A:DE:06:A9:FB:DE:B4:46:7A
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/ZIWXo67jPvL3hLYa3gap-960Rno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.28.0/22
IPv6:
2a06:2240::/29
Signature Algorithm: sha256WithRSAEncryption
70:9e:aa:0a:2c:c4:3e:eb:2b:1c:8a:ee:b3:cf:18:a9:79:8c:
9e:25:50:9b:0b:af:bf:13:ca:dd:d2:ae:cf:93:f2:ed:9b:47:
6a:27:f4:b0:69:b1:39:ae:e0:5d:cc:5c:3b:7c:47:df:7b:85:
f1:bd:39:46:f4:55:95:61:8e:b6:9c:44:8a:f8:04:8d:14:82:
c7:a0:d3:73:3f:86:8d:de:f7:b5:18:97:42:bb:ed:b0:56:f7:
3b:48:00:5c:81:98:5e:26:c5:c9:15:60:5e:43:7c:aa:a4:59:
d8:5a:cf:f2:e9:63:22:b5:99:1b:77:3f:12:a3:99:44:5d:77:
64:64:0c:83:88:eb:b4:1e:65:b8:4d:21:b6:58:5a:5f:c9:c1:
40:a0:cc:40:39:fa:cc:fc:4d:45:bb:8b:84:e8:94:ab:d3:9a:
c4:40:cb:5a:93:ed:e3:66:5c:9f:fc:b4:ea:a7:c5:54:ae:f1:
4c:ca:0a:a8:ef:3a:a7:86:89:25:8b:69:b5:be:45:f3:19:d5:
d6:be:61:d3:f5:1e:6a:fd:2b:9f:3d:4f:a4:ae:5a:02:53:06:
83:8c:3f:b2:7e:03:ef:17:c2:96:71:80:fb:03:d5:2d:b9:8c:
28:44:69:5b:ea:bf:52:23:e5:b6:25:92:09:ee:54:22:ae:8e:
fc:7d:5c:30
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQnRtbZT+23gPmU6PjMzhSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj
YjRjOGQwHhcNMjUwMTAyMTM0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDg1OTdhM2FlZTMzZWYyZjc4NGI2MWFkZTA2YTlmYmRlYjQ0NjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpVuFOmPfZOWbLxwVC1ocqgNOfia
9nzSCpN5xe3N4iV7qBlAFe3otOfBaUbre/pGCahu49cSVYaEz6aSR9PIrpOhMaJ+
WjBJ/Ds6hOTEqzy1A/cRi2TinzyMYxn3GCpk4C/IkM1VsZFNjb4YzsnTf6wrRXn+
bXIrE7AzYrhTAnjk6trs/qoQf1p8Ny+6N5rvhlF3LGSG2x098tb945wz7JHc8tSe
n9fn8fLBNIT0UNLtAL5P2fxmz1rQSJV0b7d19C4j0BPZNBAOyf3L5wEaa81sdpAY
nH8mdFQEQl2KyNzksZw/7O66a3P3DJcgNsF4f9OUZT0+Bb7D4uwrSRZwkQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGSFl6Ou4z7y94S2Gt4GqfvetEZ6MB8GA1UdIwQY
MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvWklXWG82N2pQdkwzaExZYTNnYXAtOTYwUm5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWYcMA0E
AgACMAcDBQMqBiJAMA0GCSqGSIb3DQEBCwUAA4IBAQBwnqoKLMQ+6ysciu6zzxip
eYyeJVCbC6+/E8rd0q7Pk/Ltm0dqJ/SwabE5ruBdzFw7fEffe4XxvTlG9FWVYY62
nESK+ASNFILHoNNzP4aN3ve1GJdCu+2wVvc7SABcgZheJsXJFWBeQ3yqpFnYWs/y
6WMitZkbdz8So5lEXXdkZAyDiOu0HmW4TSG2WFpfycFAoMxAOfrM/E1Fu4uE6JSr
05rEQMtak+3jZlyf/LTqp8VUrvFMygqo7zqnhokli2m1vkXzGdXWvmHT9R5q/Suf
PU+krloCUwaDjD+yfgPvF8KWcYD7A9UtuYwoRGlb6r9SI+W2JZIJ7lQiro78fVww
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:31 2025 by rpki-client