Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/a3d3f5-80f0-4106-9a82-57655bb1dbec/1/nz8HDFB0jKzzVLYlO5oFWyCESq4.roa
File: nz8HDFB0jKzzVLYlO5oFWyCESq4.roa (raw, json)
Hash identifier: YVeCsqtRM2gO3fQ79ZUuNJWEoZHgHyRgukrilQh+qKg=
Subject key identifier: 9F:3F:07:0C:50:74:8C:AC:F3:54:B6:25:3B:9A:05:5B:20:84:4A:AE
Certificate issuer: /CN=8066cbc5f71f2c0ac7ab725481dc423199f0d50e
Certificate serial: 090E756C
Authority key identifier: 80:66:CB:C5:F7:1F:2C:0A:C7:AB:72:54:81:DC:42:31:99:F0:D5:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGbLxfcfLArHq3JUgdxCMZnw1Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/a3d3f5-80f0-4106-9a82-57655bb1dbec/1/nz8HDFB0jKzzVLYlO5oFWyCESq4.roa
Signing time: Sat 01 Jan 2022 15:04:03 +0000
ROA not before: Sat 01 Jan 2022 15:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12843
IP address blocks: 195.234.216.0/24 maxlen: 24
195.234.217.0/24 maxlen: 24
195.234.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151942508 (0x90e756c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8066cbc5f71f2c0ac7ab725481dc423199f0d50e
Validity
Not Before: Jan 1 15:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f3f070c50748cacf354b6253b9a055b20844aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:91:06:6c:4f:66:d1:a3:f5:ff:c6:37:87:
30:19:6a:72:1f:d9:7b:40:3f:12:8f:8d:54:60:1a:
f2:32:20:ac:e4:ee:75:9e:3a:34:24:1f:bd:14:98:
33:cf:69:8e:7c:70:d8:ae:6d:16:77:6b:19:c8:e1:
c2:9a:90:66:21:c5:52:d3:c8:e8:bc:3d:b6:fe:ed:
41:0e:12:d9:d0:16:eb:ea:3d:95:29:ed:b9:99:d0:
0c:0c:ca:99:eb:6b:7d:bf:29:0d:e4:20:79:0f:f0:
81:1b:9c:1d:f7:f5:19:d6:6f:a7:86:87:83:a1:5c:
c9:17:34:28:4c:93:cf:33:f0:9a:4e:0d:2e:62:9e:
9e:a8:11:93:f1:cb:f8:43:36:30:8c:33:5c:e5:45:
ee:13:e1:f9:16:3d:4e:5b:95:96:ff:1b:5d:39:92:
34:5b:a4:dc:1c:bc:28:7d:b3:63:b3:8d:fc:d0:8f:
18:b2:0f:43:9a:c1:8e:2b:f8:88:3a:51:63:42:dc:
3d:a8:6c:ea:2d:52:10:80:eb:4d:e3:e3:35:cf:72:
77:9e:a2:94:ec:2d:a5:2f:05:20:ee:fd:f5:3d:8a:
e5:e8:a7:55:29:2b:57:2e:9b:19:50:1d:48:bd:e6:
92:3e:a5:a0:fe:72:bb:43:c0:21:da:c5:e8:12:9b:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3F:07:0C:50:74:8C:AC:F3:54:B6:25:3B:9A:05:5B:20:84:4A:AE
X509v3 Authority Key Identifier:
keyid:80:66:CB:C5:F7:1F:2C:0A:C7:AB:72:54:81:DC:42:31:99:F0:D5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGbLxfcfLArHq3JUgdxCMZnw1Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a3d3f5-80f0-4106-9a82-57655bb1dbec/1/nz8HDFB0jKzzVLYlO5oFWyCESq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a3d3f5-80f0-4106-9a82-57655bb1dbec/1/gGbLxfcfLArHq3JUgdxCMZnw1Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.216.0-195.234.218.255
Signature Algorithm: sha256WithRSAEncryption
07:31:91:b6:fa:96:60:cc:25:e0:68:44:97:af:2a:e0:07:8b:
8f:68:1f:53:d2:36:93:f5:6b:13:a1:1a:bc:8f:b6:18:56:19:
f0:74:2f:e9:46:b8:95:fd:fa:60:5c:73:83:12:c1:b4:36:6c:
38:ab:f3:bf:d9:01:0c:ac:ab:d9:38:25:2a:2a:87:d6:cd:fc:
c5:bc:17:6d:f8:89:39:e9:f8:02:6a:d4:e6:0f:42:f4:fc:6d:
a4:7f:e9:ff:bc:98:8d:4b:2d:15:d6:e6:69:6b:4c:d6:90:19:
d9:7c:ae:2f:6d:80:27:36:c6:1f:b5:9a:1f:83:cb:e2:89:2a:
36:57:d0:27:e9:06:fb:2b:21:de:8d:7f:fa:61:d9:7e:be:cb:
d5:0f:42:f3:48:a5:4e:12:d4:d0:d5:d3:44:fe:3a:b8:90:0b:
2a:d5:64:5e:0a:4c:ba:84:b4:5a:73:38:86:ba:a9:82:53:31:
ad:eb:ff:6a:2c:55:66:23:ec:67:c1:9c:44:a0:68:77:ff:f8:
b4:9c:a8:00:2d:a0:45:fc:af:eb:a0:43:9f:e6:8b:90:78:e2:
53:a6:ab:6d:ab:30:10:9a:bb:30:af:14:c2:04:0e:3e:e4:75:
17:bd:ca:b3:06:8c:b1:fd:05:14:74:d8:fe:39:e9:6f:c6:22:
b4:1d:4d:34
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIECQ51bDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MDY2Y2JjNWY3MWYyYzBhYzdhYjcyNTQ4MWRjNDIzMTk5ZjBkNTBlMB4XDTIyMDEw
MTE1MDQwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWYzZjA3MGM1MDc0
OGNhY2YzNTRiNjI1M2I5YTA1NWIyMDg0NGFhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKx7kQZsT2bRo/X/xjeHMBlqch/Ze0A/Eo+NVGAa8jIgrOTu
dZ46NCQfvRSYM89pjnxw2K5tFndrGcjhwpqQZiHFUtPI6Lw9tv7tQQ4S2dAW6+o9
lSntuZnQDAzKmetrfb8pDeQgeQ/wgRucHff1GdZvp4aHg6FcyRc0KEyTzzPwmk4N
LmKenqgRk/HL+EM2MIwzXOVF7hPh+RY9TluVlv8bXTmSNFuk3By8KH2zY7ON/NCP
GLIPQ5rBjiv4iDpRY0LcPahs6i1SEIDrTePjNc9yd56ilOwtpS8FIO799T2K5ein
VSkrVy6bGVAdSL3mkj6loP5yu0PAIdrF6BKboQ8CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBSfPwcMUHSMrPNUtiU7mgVbIIRKrjAfBgNVHSMEGDAWgBSAZsvF9x8sCser
clSB3EIxmfDVDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dHYkx4ZmNmTEFySHEzSlVnZHhDTVpudzFRNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvYTNkM2Y1LTgwZjAtNDEwNi05YTgyLTU3NjU1YmIxZGJlYy8x
L256OEhERkIwakt6elZMWWxPNW9GV3lDRVNxNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
YTNkM2Y1LTgwZjAtNDEwNi05YTgyLTU3NjU1YmIxZGJlYy8xL2dHYkx4ZmNmTEFy
SHEzSlVnZHhDTVpudzFRNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQDw+rYAwQAw+raMA0GCSqGSIb3
DQEBCwUAA4IBAQAHMZG2+pZgzCXgaESXryrgB4uPaB9T0jaT9WsToRq8j7YYVhnw
dC/pRriV/fpgXHODEsG0Nmw4q/O/2QEMrKvZOCUqKofWzfzFvBdt+Ik56fgCatTm
D0L0/G2kf+n/vJiNSy0V1uZpa0zWkBnZfK4vbYAnNsYftZofg8viiSo2V9An6Qb7
KyHejX/6Ydl+vsvVD0LzSKVOEtTQ1dNE/jq4kAsq1WReCky6hLRacziGuqmCUzGt
6/9qLFVmI+xnwZxEoGh3//i0nKgALaBF/K/roEOf5ouQeOJTpqttqzAQmrswrxTC
BA4+5HUXvcqzBoyx/QUUdNj+OelvxiK0HU00
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:35 2025 by rpki-client