Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/ZFYqKvxguHm4smQvy9awnquW2qU.roa
File: ZFYqKvxguHm4smQvy9awnquW2qU.roa (raw, json)
Hash identifier: 8vWdx+ga/HPoDaDg67DCWpBBfssC0K3uCo1oOh4juXg=
Subject key identifier: 64:56:2A:2A:FC:60:B8:79:B8:B2:64:2F:CB:D6:B0:9E:AB:96:DA:A5
Certificate issuer: /CN=2719d410107675eed8b62ccad435336f819e0a6d
Certificate serial: 01941FFA5CAFDBD8C236F801FF8C581DD16E
Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/ZFYqKvxguHm4smQvy9awnquW2qU.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.214.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5c:af:db:d8:c2:36:f8:01:ff:8c:58:1d:d1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64562a2afc60b879b8b2642fcbd6b09eab96daa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:28:e5:6b:64:91:2f:65:de:ac:a4:c8:1e:
15:4d:86:7e:b8:d0:60:16:81:a6:f2:9e:aa:41:9d:
c9:f7:c7:33:1e:d4:02:34:83:93:61:7a:05:73:09:
f0:91:bd:34:7c:4a:d9:04:a9:03:1c:19:14:62:0f:
7f:0c:55:c8:63:58:d7:9c:d5:b1:2d:db:63:b5:12:
91:aa:78:d8:a4:53:7e:e4:42:ed:9f:07:82:7b:a1:
91:11:de:8d:36:e5:9e:93:80:98:61:9d:b6:7f:3e:
53:b1:1b:dd:44:ed:43:2a:62:36:60:48:65:99:11:
26:02:d4:24:bd:19:c3:cc:28:9d:20:dd:07:fe:57:
80:9f:b0:76:b0:3d:9a:ab:f6:06:5c:3e:43:00:00:
74:90:74:01:4c:c7:c2:fb:43:bb:57:52:0a:58:d8:
b7:09:fd:80:85:a6:e9:a3:c6:cb:64:41:34:c4:ff:
7f:7a:f6:48:d3:d6:f4:67:63:40:af:a1:5d:46:48:
ba:d9:22:bc:45:8c:d6:98:dc:50:d9:aa:00:36:02:
a1:d9:1c:9f:92:0e:47:8a:92:b1:7f:3d:fc:1b:1b:
30:2b:7c:52:b7:ec:78:00:3b:eb:2c:f9:e9:b7:19:
55:54:23:91:37:33:2a:5a:fa:d1:c9:7d:3e:4b:88:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:56:2A:2A:FC:60:B8:79:B8:B2:64:2F:CB:D6:B0:9E:AB:96:DA:A5
X509v3 Authority Key Identifier:
keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/ZFYqKvxguHm4smQvy9awnquW2qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.212.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:6d:99:f6:f2:bf:24:3e:06:79:b5:fa:c8:07:ad:de:9d:83:
1c:6d:6d:66:54:6b:2b:b9:c6:9d:61:c8:d8:b7:1a:d4:a8:8a:
a6:61:89:22:1e:8f:3e:11:28:51:91:ac:b0:98:cd:0a:24:91:
52:b1:8d:a7:3a:7a:4a:87:0e:41:15:ca:fc:d0:2e:93:d9:bd:
d0:07:68:5e:56:fe:44:f6:73:9f:41:8c:7a:0f:4d:00:cf:36:
07:50:ea:a4:61:02:eb:c9:3c:54:e0:4c:51:7f:54:5a:1e:50:
ef:1f:37:ee:d5:62:33:03:46:c7:53:18:2a:09:83:ce:12:01:
a8:d6:d0:6b:d5:eb:1a:53:65:4d:a3:90:47:b1:f3:aa:a8:e4:
cd:8e:92:ce:1c:64:8b:ce:61:39:06:3e:b2:68:2f:3d:c7:bc:
75:13:94:21:d5:b5:c4:da:85:be:0a:ca:de:d0:65:b6:cd:a4:
5a:e1:1d:c5:1b:41:3f:92:8f:00:7d:d1:0c:49:19:04:ac:2c:
a7:56:27:c4:2c:fd:da:7f:d5:83:2f:96:81:e7:a4:f2:b9:83:
06:f9:df:6a:06:53:30:48:d1:bc:f5:b2:d1:f7:15:2d:3a:e5:
05:73:44:0d:57:ad:18:38:49:e5:94:c2:68:a3:4e:9f:e2:aa:
93:de:77:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+lyv29jCNvgB/4xYHdFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTlkNDEwMTA3Njc1ZWVkOGI2MmNjYWQ0MzUzMzZmODE5
ZTBhNmQwHhcNMjUwMTAxMDM0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDU2MmEyYWZjNjBiODc5YjhiMjY0MmZjYmQ2YjA5ZWFiOTZkYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYso5WtkkS9l3qykyB4VTYZ+uNBg
FoGm8p6qQZ3J98czHtQCNIOTYXoFcwnwkb00fErZBKkDHBkUYg9/DFXIY1jXnNWx
LdtjtRKRqnjYpFN+5ELtnweCe6GREd6NNuWek4CYYZ22fz5TsRvdRO1DKmI2YEhl
mREmAtQkvRnDzCidIN0H/leAn7B2sD2aq/YGXD5DAAB0kHQBTMfC+0O7V1IKWNi3
Cf2Ahabpo8bLZEE0xP9/evZI09b0Z2NAr6FdRki62SK8RYzWmNxQ2aoANgKh2Ryf
kg5HipKxfz38GxswK3xSt+x4ADvrLPnptxlVVCORNzMqWvrRyX0+S4jPswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRWKir8YLh5uLJkL8vWsJ6rltqlMB8GA1UdIwQY
MBaAFCcZ1BAQdnXu2LYsytQ1M2+BngptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MTVlZjItMDZlOS00NTVkLThiNzEt
NzcxODUxMmYwZGVmLzEvWkZZcUt2eGd1SG00c21Rdnk5YXducXVXMnFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83MTVlZjItMDZlOS00NTVkLThiNzEtNzcxODUxMmYwZGVm
LzEvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudbUMA0G
CSqGSIb3DQEBCwUAA4IBAQA7bZn28r8kPgZ5tfrIB63enYMcbW1mVGsrucadYcjY
txrUqIqmYYkiHo8+EShRkaywmM0KJJFSsY2nOnpKhw5BFcr80C6T2b3QB2heVv5E
9nOfQYx6D00AzzYHUOqkYQLryTxU4ExRf1RaHlDvHzfu1WIzA0bHUxgqCYPOEgGo
1tBr1esaU2VNo5BHsfOqqOTNjpLOHGSLzmE5Bj6yaC89x7x1E5Qh1bXE2oW+Csre
0GW2zaRa4R3FG0E/ko8AfdEMSRkErCynVifELP3af9WDL5aB56TyuYMG+d9qBlMw
SNG89bLR9xUtOuUFc0QNV60YOEnllMJoo06f4qqT3nek
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:57:27 2025 by rpki-client