Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/ZYblDAaDwwmnrchNjFrf0zm4tO0.roa
File: ZYblDAaDwwmnrchNjFrf0zm4tO0.roa (raw, json)
Hash identifier: TUJh6mrSVIERTxbeRqv55tj1PiJ2BrobmYQdllbfBL8=
Subject key identifier: 65:86:E5:0C:06:83:C3:09:A7:AD:C8:4D:8C:5A:DF:D3:39:B8:B4:ED
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 019421439662BB9A66DF2A14FA4F7462429D
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/ZYblDAaDwwmnrchNjFrf0zm4tO0.roa
Signing time: Wed 01 Jan 2025 09:47:44 +0000
ROA not before: Wed 01 Jan 2025 09:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 188.92.28.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:96:62:bb:9a:66:df:2a:14:fa:4f:74:62:42:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Jan 1 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6586e50c0683c309a7adc84d8c5adfd339b8b4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:b1:5c:5b:ed:76:20:f2:1b:0d:ba:09:03:
62:37:10:40:85:23:63:a0:2d:d7:6b:7f:3e:93:3b:
23:0a:67:a4:db:95:c7:9f:a9:23:08:60:8d:bd:6a:
c6:e9:c8:2d:4b:68:3d:59:9b:c8:f4:57:73:00:b5:
9f:07:53:ed:2b:56:33:5e:6e:c5:ae:20:f1:48:e0:
0e:61:43:4f:85:09:19:ec:1c:b8:90:27:bc:ab:9c:
97:09:b7:b9:7f:a2:4e:e0:d0:f0:88:8e:41:c0:b6:
9c:81:24:67:65:da:04:e6:bb:e0:5a:dc:c4:cd:36:
4c:1b:a0:48:f1:1e:0c:a2:6e:4c:6e:09:e4:fa:d6:
49:93:99:ea:a8:b4:8c:71:c4:ab:cc:6e:38:5a:74:
b5:82:bc:bd:c5:42:19:af:8c:2e:9b:aa:0d:3a:bd:
23:8b:63:57:4f:b6:d5:4f:12:17:d1:a5:af:24:ce:
0e:24:7d:12:69:5e:6c:09:65:a3:b4:7e:d9:20:bf:
de:e0:0d:85:78:4a:37:6a:7a:57:d5:8f:d8:28:49:
c5:36:2e:8b:d2:f0:69:fb:82:75:95:44:b9:0f:54:
1a:3d:96:ee:4c:80:4c:65:98:0c:06:bb:4b:90:11:
f1:53:99:5e:e2:6b:ad:63:0e:12:d4:be:d9:1f:cf:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:E5:0C:06:83:C3:09:A7:AD:C8:4D:8C:5A:DF:D3:39:B8:B4:ED
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/ZYblDAaDwwmnrchNjFrf0zm4tO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.28.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2b:75:ad:74:03:fa:6b:b8:3b:b3:3d:f6:9e:00:80:2c:29:
52:04:f7:38:6e:c2:68:f4:9a:37:83:37:75:66:97:a2:e6:62:
b4:49:bb:15:e8:bb:a2:44:78:4e:f5:80:5e:0d:32:b8:64:ec:
af:f2:67:90:63:1e:0c:8b:6f:ab:4b:31:a9:07:0e:e9:72:f0:
91:d4:a6:91:d7:09:87:46:f8:cb:76:50:14:5a:e6:f6:9d:c3:
80:72:d7:af:fc:c1:4d:90:9b:e6:40:ae:65:5c:75:35:2b:2e:
da:85:5e:6b:bb:89:00:38:1e:91:c2:2a:09:ee:ed:93:25:5e:
7c:89:b4:66:24:d5:50:ba:f2:af:c2:f8:c8:a2:4c:12:68:24:
f5:41:22:c0:02:5b:cd:4f:81:9c:46:5f:2e:e6:4b:74:b8:a8:
10:ac:ea:b3:82:7a:94:bd:e1:e8:9a:f6:be:d1:78:86:c6:25:
02:fa:e8:b3:90:df:33:72:8b:d9:7e:ad:70:fd:20:2b:d7:72:
a3:7b:47:61:da:42:84:64:1d:65:40:a7:6f:f8:10:7f:f9:d9:
a8:55:b9:8f:28:29:82:eb:02:5a:50:a3:30:fe:5c:f1:8a:17:
fe:b3:0e:92:08:02:2b:d4:4c:27:8f:b1:24:a1:95:f0:0f:82:
e9:d8:74:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ5Ziu5pm3yoU+k90YkKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzA5NjBlZDlhMGRhMWM5YjdlMjQ1N2VhYmNiNjYwNDc4
ZDA4YWUwHhcNMjUwMTAxMDk0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTg2ZTUwYzA2ODNjMzA5YTdhZGM4NGQ4YzVhZGZkMzM5YjhiNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pWxXFvtdiDyGw26CQNiNxBAhSNj
oC3Xa38+kzsjCmek25XHn6kjCGCNvWrG6cgtS2g9WZvI9FdzALWfB1PtK1YzXm7F
riDxSOAOYUNPhQkZ7By4kCe8q5yXCbe5f6JO4NDwiI5BwLacgSRnZdoE5rvgWtzE
zTZMG6BI8R4Mom5Mbgnk+tZJk5nqqLSMccSrzG44WnS1gry9xUIZr4wum6oNOr0j
i2NXT7bVTxIX0aWvJM4OJH0SaV5sCWWjtH7ZIL/e4A2FeEo3anpX1Y/YKEnFNi6L
0vBp+4J1lUS5D1QaPZbuTIBMZZgMBrtLkBHxU5le4mutYw4S1L7ZH8/DgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGWG5QwGg8MJp63ITYxa39M5uLTtMB8GA1UdIwQY
MBaAFNBwlg7ZoNocm34kV+q8tmBHjQiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYt
NmVlZmRhMTEwOGFkLzEvWllibERBYUR3d21ucmNoTmpGcmYwem00dE8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYtNmVlZmRhMTEwOGFk
LzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvFwcMA0G
CSqGSIb3DQEBCwUAA4IBAQBgK3WtdAP6a7g7sz32ngCALClSBPc4bsJo9Jo3gzd1
Zpei5mK0SbsV6LuiRHhO9YBeDTK4ZOyv8meQYx4Mi2+rSzGpBw7pcvCR1KaR1wmH
RvjLdlAUWub2ncOActev/MFNkJvmQK5lXHU1Ky7ahV5ru4kAOB6RwioJ7u2TJV58
ibRmJNVQuvKvwvjIokwSaCT1QSLAAlvNT4GcRl8u5kt0uKgQrOqzgnqUveHomva+
0XiGxiUC+uizkN8zcovZfq1w/SAr13Kje0dh2kKEZB1lQKdv+BB/+dmoVbmPKCmC
6wJaUKMw/lzxihf+sw6SCAIr1Ewnj7EkoZXwD4Lp2HTY
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:16:48 2025 by rpki-client