Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/ZxFfcRXMBduRzV79WIQtmaUxn64.roa
File: ZxFfcRXMBduRzV79WIQtmaUxn64.roa (raw, json)
Hash identifier: VdR4A0ds2kkh0+qBqOk4AdpVe4g9KV6y061vAE2sOgY=
Subject key identifier: 67:11:5F:71:15:CC:05:DB:91:CD:5E:FD:58:84:2D:99:A5:31:9F:AE
Certificate issuer: /CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Certificate serial: 0185718C42F673B3FCB9923FF6215F8D1773
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/ZxFfcRXMBduRzV79WIQtmaUxn64.roa
Signing time: Mon 02 Jan 2023 08:14:55 +0000
ROA not before: Mon 02 Jan 2023 08:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 185.138.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:42:f6:73:b3:fc:b9:92:3f:f6:21:5f:8d:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Validity
Not Before: Jan 2 08:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67115f7115cc05db91cd5efd58842d99a5319fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:d8:eb:45:0d:cb:cc:ea:28:98:9c:28:84:
26:4a:e7:8b:9d:26:f0:67:a1:9e:e7:d6:6b:bd:2b:
df:7f:b7:85:4e:a4:fe:cc:4c:a8:c3:27:58:a5:a2:
4e:48:7b:7d:73:b6:b1:8a:ef:e9:a1:ba:75:6c:c6:
55:66:41:97:ac:d7:8c:40:38:3e:44:1d:61:a4:cb:
d8:e3:b4:5e:2f:10:dc:12:ab:5d:70:54:45:c2:68:
d5:20:5e:cd:39:ed:71:a1:5c:fd:f9:f2:b1:57:22:
0b:8f:f6:6b:f8:3a:03:d8:88:e6:72:26:ec:00:77:
e3:cc:ac:3f:c0:f3:66:6f:58:71:0a:17:93:90:0d:
f0:e6:ac:55:c3:1b:d9:8e:22:ca:2c:3a:62:ec:84:
57:bf:06:41:53:d6:68:f6:ba:36:ea:22:bd:77:14:
69:d7:f8:16:a7:20:27:a7:09:04:47:b9:38:f2:3f:
87:32:dc:0c:dd:90:71:03:8e:4d:fa:35:9b:3c:c4:
40:60:49:42:ec:77:27:a6:55:8f:8d:b9:28:0a:03:
d0:db:bd:33:2c:f8:10:6c:c5:ed:08:e1:09:7a:a7:
04:bd:9b:49:85:a6:58:5b:d1:4f:45:c3:ce:3b:5b:
1f:d5:97:b1:33:ab:e5:33:47:37:1b:3d:84:c8:9a:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:5F:71:15:CC:05:DB:91:CD:5E:FD:58:84:2D:99:A5:31:9F:AE
X509v3 Authority Key Identifier:
keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/ZxFfcRXMBduRzV79WIQtmaUxn64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.233.0/24
Signature Algorithm: sha256WithRSAEncryption
ef:03:75:8d:d8:8d:7e:94:5c:6f:35:02:20:8f:e9:64:19:0e:
d8:13:94:34:d7:b8:3d:23:69:e1:ff:61:52:91:b6:4b:fb:05:
42:b7:8b:55:e6:d5:9d:c4:6a:a7:25:40:af:61:d7:96:e8:b3:
57:07:4c:3d:10:50:f9:1b:1d:69:83:5a:9e:d9:79:80:70:3a:
91:ec:32:f6:f5:72:fc:19:40:8c:02:f8:c8:bc:7e:4c:13:64:
13:0b:0d:64:44:1c:c2:3b:49:53:73:bf:5e:ec:6a:00:5b:3f:
cc:54:6c:c3:33:50:f7:14:f2:72:97:f6:54:63:37:71:e5:94:
ef:d6:2d:03:5c:d6:f0:cc:5b:7d:61:f7:39:19:98:0d:8b:96:
10:69:e0:b7:4a:40:58:c1:9c:50:24:8a:9a:c8:1b:8e:09:ba:
d1:6c:28:96:09:96:1a:41:6c:e1:d1:86:1a:52:74:2a:1b:ab:
32:b4:72:af:60:57:74:d7:d5:b1:5e:b8:ce:b5:09:9b:0f:14:
ae:f4:e2:93:40:ef:ec:6d:c2:b6:df:d4:63:9b:41:2b:98:6f:
47:b4:d1:e3:43:56:b7:96:5b:18:ea:ba:54:c3:19:7a:7d:cb:
c8:03:ed:2b:dd:55:63:cd:10:d2:e8:b9:46:a1:19:03:6d:d7:
97:1a:27:d3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVxjEL2c7P8uZI/9iFfjRdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNTg1NjZkMTU2ZTk5N2EzNGIxNmZjOWMwN2MyMDdiN2U3
M2ZiNTMwHhcNMjMwMTAyMDgxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzExNWY3MTE1Y2MwNWRiOTFjZDVlZmQ1ODg0MmQ5OWE1MzE5ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4DY60UNy8zqKJicKIQmSueLnSbw
Z6Ge59ZrvSvff7eFTqT+zEyowydYpaJOSHt9c7axiu/pobp1bMZVZkGXrNeMQDg+
RB1hpMvY47ReLxDcEqtdcFRFwmjVIF7NOe1xoVz9+fKxVyILj/Zr+DoD2Ijmcibs
AHfjzKw/wPNmb1hxCheTkA3w5qxVwxvZjiLKLDpi7IRXvwZBU9Zo9ro26iK9dxRp
1/gWpyAnpwkER7k48j+HMtwM3ZBxA45N+jWbPMRAYElC7HcnplWPjbkoCgPQ270z
LPgQbMXtCOEJeqcEvZtJhaZYW9FPRcPOO1sf1ZexM6vlM0c3Gz2EyJpzwwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGcRX3EVzAXbkc1e/ViELZmlMZ+uMB8GA1UdIwQY
MBaAFPtYVm0Vbpl6NLFvycB8IHt+c/tTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0xaFdiUlZ1bVhvMHNXX0p3SHdnZTM1ei0xTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvY2U1YzRhLWY1NzItNGI2Zi1hM2E1
LTgwZTFiZTY2YmIwZS8xL1p4RmZjUlhNQmR1UnpWNzlXSVF0bWFVeG42NC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNmIvY2U1YzRhLWY1NzItNGI2Zi1hM2E1LTgwZTFiZTY2YmIw
ZS8xLzEtMWhXYlJWdW1YbzBzV19Kd0h3Z2UzNXotMU0uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5iukw
DQYJKoZIhvcNAQELBQADggEBAO8DdY3YjX6UXG81AiCP6WQZDtgTlDTXuD0jaeH/
YVKRtkv7BUK3i1Xm1Z3EaqclQK9h15bos1cHTD0QUPkbHWmDWp7ZeYBwOpHsMvb1
cvwZQIwC+Mi8fkwTZBMLDWREHMI7SVNzv17sagBbP8xUbMMzUPcU8nKX9lRjN3Hl
lO/WLQNc1vDMW31h9zkZmA2LlhBp4LdKQFjBnFAkiprIG44JutFsKJYJlhpBbOHR
hhpSdCobqzK0cq9gV3TX1bFeuM61CZsPFK704pNA7+xtwrbf1GObQSuYb0e00eND
VreWWxjqulTDGXp9y8gD7SvdVWPNENLouUahGQNt15caJ9M=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:16 2025 by rpki-client