Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/nZhB4rMsC9R3uYgJo6qgDqgulSY.roa
File: nZhB4rMsC9R3uYgJo6qgDqgulSY.roa (raw, json)
Hash identifier: KvUyXXY5PGObRYG9SinOJ3WdU2F/ne3IuKgtpiY6Kik=
Subject key identifier: 9D:98:41:E2:B3:2C:0B:D4:77:B9:88:09:A3:AA:A0:0E:A8:2E:95:26
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAAB995A73B34B66C1FF9203522CEA
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/nZhB4rMsC9R3uYgJo6qgDqgulSY.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207288
IP address blocks: 141.101.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ab:99:5a:73:b3:4b:66:c1:ff:92:03:52:2c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d9841e2b32c0bd477b98809a3aaa00ea82e9526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9d:7d:c9:de:e5:3c:3e:71:a1:07:a3:db:0d:
b1:41:20:a3:76:36:57:2c:4a:04:cc:96:01:c1:d2:
c3:03:3a:88:24:4c:e2:d4:2c:7c:52:77:fd:f2:30:
5a:6c:19:11:19:88:0c:34:5f:0d:14:c2:51:ea:d8:
9e:1c:25:de:ff:85:5b:f2:76:4c:cd:5c:b8:d9:09:
b8:40:16:7f:5b:09:33:f4:eb:25:6b:27:da:2d:28:
69:7a:2d:2a:4b:dc:00:39:0a:13:b1:34:76:94:52:
f6:e0:e1:d6:a2:7a:d4:31:1d:21:82:ff:cd:91:fe:
e4:00:ea:3a:09:8f:82:e8:0b:43:7b:ee:a4:66:09:
f1:13:53:bf:c6:da:22:cf:83:e7:66:07:d0:05:6b:
1d:c7:96:09:e8:0e:6a:bf:84:19:5b:bf:05:ce:21:
b3:07:6b:44:df:60:ed:85:27:f1:8d:f5:35:bf:d3:
aa:b6:35:10:21:1a:90:11:22:2f:2e:40:e4:f7:04:
63:b1:22:72:a0:a5:51:b0:a2:42:0b:82:4d:07:d2:
cf:ce:94:09:79:f1:ca:6f:c4:1e:55:c1:6a:c0:8b:
00:0b:05:be:22:66:5b:e7:07:33:cf:2e:15:e9:be:
86:1e:e8:bc:b9:e3:9a:03:ca:63:87:e4:5a:d8:1d:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:98:41:E2:B3:2C:0B:D4:77:B9:88:09:A3:AA:A0:0E:A8:2E:95:26
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/nZhB4rMsC9R3uYgJo6qgDqgulSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3f:11:57:56:fb:5f:4a:18:27:7e:21:0d:da:ae:b0:f1:a4:
77:0d:b4:b8:8f:2f:3a:6c:dc:78:75:9b:ce:62:4a:49:27:2c:
c7:3c:db:30:e3:89:8d:16:51:c5:bf:35:ad:2d:be:61:8b:cf:
0f:93:aa:bb:51:27:e7:59:1c:32:77:2f:36:e2:63:01:f0:50:
ac:c0:95:58:c0:a2:bf:99:0d:9f:aa:d9:f8:f2:6e:a9:e1:f8:
26:7e:47:41:96:a8:02:9a:bb:29:e0:4a:4b:41:19:24:9c:c9:
39:65:d1:9a:40:dc:e6:9e:bc:ff:81:f1:71:b5:04:73:70:f5:
6a:43:b8:3d:c0:05:ab:7b:7f:1c:33:d0:83:ad:a9:7f:ca:5a:
db:d3:c2:bd:78:8f:c5:fe:be:e8:4e:1f:e1:76:b7:61:e3:bb:
77:45:ff:ee:ae:a8:f0:80:96:70:0e:fa:39:58:0a:ec:46:df:
96:bb:5c:ce:03:44:88:28:b4:e6:93:e5:b2:6e:c9:a6:58:e2:
07:f5:a5:ba:d7:f6:82:1c:54:62:66:dd:2c:f5:2e:7d:77:22:
99:d7:09:c8:7c:3f:5a:c8:ab:37:60:99:8e:aa:35:24:d8:1c:
57:e4:f3:d3:40:ac:b5:54:ce:2b:58:19:00:26:5b:85:53:bc:
a2:fd:41:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+quZWnOzS2bB/5IDUizqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwMTAxMDM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDk4NDFlMmIzMmMwYmQ0NzdiOTg4MDlhM2FhYTAwZWE4MmU5NTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J19yd7lPD5xoQej2w2xQSCjdjZX
LEoEzJYBwdLDAzqIJEzi1Cx8Unf98jBabBkRGYgMNF8NFMJR6tieHCXe/4Vb8nZM
zVy42Qm4QBZ/Wwkz9OslayfaLShpei0qS9wAOQoTsTR2lFL24OHWonrUMR0hgv/N
kf7kAOo6CY+C6AtDe+6kZgnxE1O/xtoiz4PnZgfQBWsdx5YJ6A5qv4QZW78FziGz
B2tE32DthSfxjfU1v9OqtjUQIRqQESIvLkDk9wRjsSJyoKVRsKJCC4JNB9LPzpQJ
efHKb8QeVcFqwIsACwW+ImZb5wczzy4V6b6GHui8ueOaA8pjh+Ra2B346wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2YQeKzLAvUd7mICaOqoA6oLpUmMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvblpoQjRyTXNDOVIzdVlnSm82cWdEcWd1bFNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWXfMA0G
CSqGSIb3DQEBCwUAA4IBAQA+PxFXVvtfShgnfiEN2q6w8aR3DbS4jy86bNx4dZvO
YkpJJyzHPNsw44mNFlHFvzWtLb5hi88Pk6q7USfnWRwydy824mMB8FCswJVYwKK/
mQ2fqtn48m6p4fgmfkdBlqgCmrsp4EpLQRkknMk5ZdGaQNzmnrz/gfFxtQRzcPVq
Q7g9wAWre38cM9CDral/ylrb08K9eI/F/r7oTh/hdrdh47t3Rf/urqjwgJZwDvo5
WArsRt+Wu1zOA0SIKLTmk+WybsmmWOIH9aW61/aCHFRiZt0s9S59dyKZ1wnIfD9a
yKs3YJmOqjUk2BxX5PPTQKy1VM4rWBkAJluFU7yi/UH+
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:41:11 2025 by rpki-client