Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/zNKzyUtBSKWgxxiSh9MTJn74DeY.roa
File: zNKzyUtBSKWgxxiSh9MTJn74DeY.roa (raw, json)
Hash identifier: /UJUAUav0pFlCCK/yUCSBnJv03vETAaUv1250vbKXUM=
Subject key identifier: CC:D2:B3:C9:4B:41:48:A5:A0:C7:18:92:87:D3:13:26:7E:F8:0D:E6
Certificate issuer: /CN=1ab4988a0181decbdce10adfef34527b3addc478
Certificate serial: 02B41B4D
Authority key identifier: 1A:B4:98:8A:01:81:DE:CB:DC:E1:0A:DF:EF:34:52:7B:3A:DD:C4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrSYigGB3svc4Qrf7zRSezrdxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/zNKzyUtBSKWgxxiSh9MTJn74DeY.roa
Signing time: Sat 01 Jan 2022 07:56:20 +0000
ROA not before: Sat 01 Jan 2022 07:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51223
IP address blocks: 212.119.50.0/23 maxlen: 23
212.119.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45357901 (0x2b41b4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab4988a0181decbdce10adfef34527b3addc478
Validity
Not Before: Jan 1 07:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccd2b3c94b4148a5a0c7189287d313267ef80de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:8f:62:c1:bb:b6:09:0b:b8:c9:cc:2a:b4:
87:b2:9f:da:cb:d0:58:d9:c1:f3:4e:86:9e:16:67:
2d:1d:e2:0b:f0:95:27:15:87:d7:f6:ca:2b:3d:16:
6a:46:60:3c:a5:06:62:76:d2:c1:f6:79:c8:d6:51:
87:8a:11:a6:c3:c8:a9:a9:79:c3:d0:2b:1a:f2:75:
8c:a4:a8:e3:dd:a1:b8:02:93:5d:15:b0:e2:16:11:
5d:72:c8:6d:b4:3d:1a:75:bd:b0:6e:eb:58:d1:89:
89:bf:ab:66:91:52:63:5c:73:5c:f8:ab:a1:b6:41:
36:d2:47:00:a3:3c:0e:dc:bc:26:ec:59:35:43:95:
8e:7f:63:42:97:b8:20:d0:4a:5f:6e:a6:1b:ee:68:
ce:c5:81:5d:f3:33:cf:4a:78:a6:a1:34:fb:50:04:
31:c1:2d:27:73:79:20:05:28:f5:05:f1:d9:aa:3a:
28:7c:6f:59:11:0f:d6:ef:10:f0:33:f5:f6:16:b7:
30:8f:29:99:67:85:13:7e:e8:0f:5f:4f:95:53:a0:
c4:4c:6d:43:5e:b0:a3:aa:89:d6:0c:33:a8:b8:ae:
69:2c:60:6c:f6:36:97:d0:39:ea:b9:33:6b:75:3f:
be:06:36:22:00:5f:38:b3:3c:f0:ff:62:b5:05:fb:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D2:B3:C9:4B:41:48:A5:A0:C7:18:92:87:D3:13:26:7E:F8:0D:E6
X509v3 Authority Key Identifier:
keyid:1A:B4:98:8A:01:81:DE:CB:DC:E1:0A:DF:EF:34:52:7B:3A:DD:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrSYigGB3svc4Qrf7zRSezrdxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/zNKzyUtBSKWgxxiSh9MTJn74DeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/GrSYigGB3svc4Qrf7zRSezrdxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.48.0/22
Signature Algorithm: sha256WithRSAEncryption
02:c5:a1:8f:c2:fb:1c:68:35:be:11:de:d8:1e:06:51:0a:3f:
f7:ab:2c:3c:06:4a:c4:ad:40:cb:46:fe:6f:9f:6a:30:75:bd:
66:f9:76:da:73:3b:9e:3d:7a:1f:4f:52:e9:95:dc:44:af:37:
ac:41:65:6e:3a:f6:4a:5e:d1:12:8a:73:9b:a7:c1:62:ae:a4:
6f:8d:81:25:f5:0e:84:5c:52:84:7a:8b:21:6a:49:d3:79:f3:
4f:e3:50:8a:bc:f1:f9:de:5b:07:36:9c:c0:cc:47:99:22:fd:
0a:c8:df:e8:65:9f:65:bb:f5:c4:b8:cd:8a:ab:8d:9e:67:76:
55:8c:5e:48:57:4a:a7:74:1a:f2:e1:2f:c4:17:bf:dc:ec:33:
68:45:11:0c:17:31:1f:41:7b:c2:04:20:6c:9a:b3:e6:8f:8a:
4d:29:53:2c:17:93:1d:48:1a:54:3f:5d:b7:14:76:e2:5b:07:
22:57:69:b4:ea:51:3f:68:a5:eb:be:7a:ba:fa:e4:0a:38:77:
e9:23:46:ec:2f:41:d9:f3:46:0a:cb:7b:73:85:b1:76:28:87:
37:ad:b3:e2:52:30:e0:66:d2:a6:45:98:15:1a:a3:c2:7f:da:
6c:06:18:6a:ba:ef:dc:79:5a:e8:43:7f:19:e4:7b:d2:0e:b8:
59:25:10:47
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEArQbTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YWI0OTg4YTAxODFkZWNiZGNlMTBhZGZlZjM0NTI3YjNhZGRjNDc4MB4XDTIyMDEw
MTA3NTYyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2NkMmIzYzk0YjQx
NDhhNWEwYzcxODkyODdkMzEzMjY3ZWY4MGRlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYhj2LBu7YJC7jJzCq0h7Kf2svQWNnB806GnhZnLR3iC/CV
JxWH1/bKKz0WakZgPKUGYnbSwfZ5yNZRh4oRpsPIqal5w9ArGvJ1jKSo492huAKT
XRWw4hYRXXLIbbQ9GnW9sG7rWNGJib+rZpFSY1xzXPirobZBNtJHAKM8Dty8JuxZ
NUOVjn9jQpe4INBKX26mG+5ozsWBXfMzz0p4pqE0+1AEMcEtJ3N5IAUo9QXx2ao6
KHxvWREP1u8Q8DP19ha3MI8pmWeFE37oD19PlVOgxExtQ16wo6qJ1gwzqLiuaSxg
bPY2l9A56rkza3U/vgY2IgBfOLM88P9itQX7loUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTM0rPJS0FIpaDHGJKH0xMmfvgN5jAfBgNVHSMEGDAWgBQatJiKAYHey9zh
Ct/vNFJ7Ot3EeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dyU1lpZ0dCM3N2YzRRcmY3elJTZXpyZHhIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvNmNlMjUwLTE1MGYtNGY1OC1iN2Y3LWRmMTI1MDg0MGFhMS8x
L3pOS3p5VXRCU0tXZ3h4aVNoOU1USm43NERlWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
NmNlMjUwLTE1MGYtNGY1OC1iN2Y3LWRmMTI1MDg0MGFhMS8xL0dyU1lpZ0dCM3N2
YzRRcmY3elJTZXpyZHhIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtR3MDANBgkqhkiG9w0BAQsFAAOC
AQEAAsWhj8L7HGg1vhHe2B4GUQo/96ssPAZKxK1Ay0b+b59qMHW9Zvl22nM7nj16
H09S6ZXcRK83rEFlbjr2Sl7REopzm6fBYq6kb42BJfUOhFxShHqLIWpJ03nzT+NQ
irzx+d5bBzacwMxHmSL9Csjf6GWfZbv1xLjNiquNnmd2VYxeSFdKp3Qa8uEvxBe/
3OwzaEURDBcxH0F7wgQgbJqz5o+KTSlTLBeTHUgaVD9dtxR24lsHIldptOpRP2il
6756uvrkCjh36SNG7C9B2fNGCst7c4WxdiiHN62z4lIw4GbSpkWYFRqjwn/abAYY
arrv3Hla6EN/GeR70g64WSUQRw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:16 2025 by rpki-client