Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa
File: ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa (raw, json)
Hash identifier: WEK6Mlk9pLflVadH6HQ/a95uE6G+8NUpMYALAx2797k=
Subject key identifier: 64:7F:A2:FF:F3:A3:E1:22:30:B4:03:87:45:15:6F:D2:EF:09:F1:E2
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 01941FFA16FBB0E5E2DC9FCBE9F8164B407B
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57498
IP address blocks: 194.187.30.0/23 maxlen: 23
194.187.30.0/24 maxlen: 24
194.187.31.0/24 maxlen: 24
2001:678:b8c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:16:fb:b0:e5:e2:dc:9f:cb:e9:f8:16:4b:40:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=647fa2fff3a3e12230b4038745156fd2ef09f1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:12:2e:3f:20:61:02:3d:96:e6:20:58:a6:c6:
fa:34:66:db:fd:8b:67:53:cc:a0:33:48:42:d6:41:
fa:2f:72:ec:26:4e:3a:8d:b4:f4:69:e6:f9:26:8f:
5f:f7:b9:36:1d:65:ad:5f:65:44:a9:5a:68:31:2f:
6a:91:5d:0d:e0:c0:03:7c:71:52:3d:50:a6:9f:27:
ee:e7:40:f7:be:ba:a0:a3:10:3d:c1:40:d5:c8:13:
30:72:09:99:46:7f:4f:3d:42:24:d2:e0:03:f8:88:
94:a2:58:8d:d9:8e:b3:ac:6c:d4:c8:4f:86:98:cf:
ec:dc:f9:e6:7c:1f:21:03:fa:10:2f:95:de:61:72:
15:ae:50:8c:f1:bb:1a:e7:d3:54:c2:e2:de:98:e8:
2b:5d:dd:c7:9e:50:2d:80:3f:eb:ab:e6:83:63:fc:
04:8b:0e:a7:4f:8e:99:15:70:e7:df:ed:a5:b3:c7:
7f:07:d7:a4:3e:0b:bc:56:96:c0:59:34:be:9b:0b:
fd:fc:67:65:dc:67:5b:65:8a:ae:7d:60:ff:74:de:
63:26:48:33:85:80:1d:ea:9b:df:d3:08:f5:9c:4d:
37:6e:d4:88:d0:e2:0c:c3:0f:53:8a:6c:d0:f1:cc:
3b:96:f6:7e:2a:d5:80:af:a2:d3:e5:52:f7:1e:fb:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:A2:FF:F3:A3:E1:22:30:B4:03:87:45:15:6F:D2:EF:09:F1:E2
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.30.0/23
IPv6:
2001:678:b8c::/48
Signature Algorithm: sha256WithRSAEncryption
5d:80:7d:ab:4d:c5:b3:74:f9:36:74:e0:5a:84:51:a8:ab:23:
4c:d2:85:0e:9e:f0:e3:8b:86:b7:d9:f6:2d:40:e7:8a:be:e8:
ca:ee:68:56:f4:07:e3:f5:2f:b3:84:d7:2f:7c:a0:28:0e:91:
59:a6:8e:92:66:61:ae:e2:d3:33:66:03:0c:b3:57:a4:16:1c:
c1:25:09:9e:cc:30:ad:bc:31:2a:0c:c9:9f:a2:69:fe:2d:d2:
93:f9:aa:52:a6:58:f7:09:04:c7:f7:ba:6e:61:40:40:f5:d3:
3b:fd:f1:c4:25:30:b4:27:66:3e:87:14:d0:d9:6c:49:0c:64:
6d:4e:90:e6:47:4d:4f:ad:9e:e8:cd:a1:83:2c:85:b5:6f:4f:
a2:3b:ac:89:05:9c:f3:b8:57:2e:cd:02:8d:24:58:90:ca:8a:
26:49:21:fc:ee:35:80:2a:16:74:4f:9c:d0:b9:85:99:06:ca:
dd:52:a9:21:26:bd:3c:cf:c3:ff:f5:6a:c1:fa:49:d0:21:9d:
31:82:ec:08:11:b1:89:86:d9:8e:da:81:3e:3f:3c:f2:41:ee:
05:dd:f0:2f:13:e7:a1:59:73:c3:3f:88:4a:f8:98:3f:12:a0:
ac:73:f1:d9:64:9b:f2:f3:08:cb:ff:ee:04:6d:5d:37:2f:9e:
f7:dd:17:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQf+hb7sOXi3J/L6fgWS0B7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MjFjOGZmMDQzN2Y3ZWRkODI5MTY2ZmRlMDM0NDZmODYx
MDlkODAwHhcNMjUwMTAxMDM0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDdmYTJmZmYzYTNlMTIyMzBiNDAzODc0NTE1NmZkMmVmMDlmMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxIuPyBhAj2W5iBYpsb6NGbb/Ytn
U8ygM0hC1kH6L3LsJk46jbT0aeb5Jo9f97k2HWWtX2VEqVpoMS9qkV0N4MADfHFS
PVCmnyfu50D3vrqgoxA9wUDVyBMwcgmZRn9PPUIk0uAD+IiUoliN2Y6zrGzUyE+G
mM/s3PnmfB8hA/oQL5XeYXIVrlCM8bsa59NUwuLemOgrXd3HnlAtgD/rq+aDY/wE
iw6nT46ZFXDn3+2ls8d/B9ekPgu8VpbAWTS+mwv9/Gdl3GdbZYqufWD/dN5jJkgz
hYAd6pvf0wj1nE03btSI0OIMww9TimzQ8cw7lvZ+KtWAr6LT5VL3HvvguQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGR/ov/zo+EiMLQDh0UVb9LvCfHiMB8GA1UdIwQY
MBaAFGghyP8EN/ft2CkWb94DRG+GEJ2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMt
MjVhZTkyOTNmNmI0LzEvWkgtaV9fT2o0U0l3dEFPSFJSVnYwdThKOGVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMtMjVhZTkyOTNmNmI0
LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwrseMA8E
AgACMAkDBwAgAQZ4C4wwDQYJKoZIhvcNAQELBQADggEBAF2AfatNxbN0+TZ04FqE
UairI0zShQ6e8OOLhrfZ9i1A54q+6MruaFb0B+P1L7OE1y98oCgOkVmmjpJmYa7i
0zNmAwyzV6QWHMElCZ7MMK28MSoMyZ+iaf4t0pP5qlKmWPcJBMf3um5hQED10zv9
8cQlMLQnZj6HFNDZbEkMZG1OkOZHTU+tnujNoYMshbVvT6I7rIkFnPO4Vy7NAo0k
WJDKiiZJIfzuNYAqFnRPnNC5hZkGyt1SqSEmvTzPw//1asH6SdAhnTGC7AgRsYmG
2Y7agT4/PPJB7gXd8C8T56FZc8M/iEr4mD8SoKxz8dlkm/LzCMv/7gRtXTcvnvfd
F60=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:03 2025 by rpki-client