Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/pzn8QR5Hvtk4AFME0CHsFzYT_6I.roa
File: pzn8QR5Hvtk4AFME0CHsFzYT_6I.roa (raw, json)
Hash identifier: rPIdP8YQzsZ8fDNvmduPYTaroWK0veSsSxXOQSRixos=
Subject key identifier: A7:39:FC:41:1E:47:BE:D9:38:00:53:04:D0:21:EC:17:36:13:FF:A2
Certificate issuer: /CN=8b2895beaada6d2f957c7ed430ff846b7ebcdb1b
Certificate serial: 018248AAB67525B62D3A4BE7162FB7572237
Authority key identifier: 8B:28:95:BE:AA:DA:6D:2F:95:7C:7E:D4:30:FF:84:6B:7E:BC:DB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyiVvqrabS-VfH7UMP-Ea3682xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/pzn8QR5Hvtk4AFME0CHsFzYT_6I.roa
Signing time: Fri 29 Jul 2022 06:35:23 +0000
ROA not before: Fri 29 Jul 2022 06:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43180
IP address blocks: 91.213.175.0/24 maxlen: 24
91.237.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:aa:b6:75:25:b6:2d:3a:4b:e7:16:2f:b7:57:22:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2895beaada6d2f957c7ed430ff846b7ebcdb1b
Validity
Not Before: Jul 29 06:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a739fc411e47bed938005304d021ec173613ffa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:81:7e:b7:e0:ce:c8:90:04:b1:3d:fc:9f:
e7:32:f7:14:0a:5f:83:1e:25:5d:81:96:86:75:34:
f6:df:89:19:e0:07:9e:34:f8:73:52:4b:13:f7:0d:
ff:87:77:40:26:df:6a:87:84:31:59:5f:a4:c9:db:
55:41:64:0b:e1:39:43:60:3c:bb:aa:63:6f:bb:c7:
b4:7c:bb:5f:98:c6:90:06:e9:1f:dd:6f:1a:d7:d5:
74:13:68:c8:72:c2:ea:b8:d9:a0:94:d7:44:74:cc:
ff:6c:46:4c:0d:4c:ab:8e:7b:63:fc:85:80:e4:32:
f6:9b:a1:b5:ad:ea:33:b6:73:84:85:a1:8d:36:51:
06:28:c2:5d:2e:0a:65:73:64:28:fc:6a:02:2f:34:
fd:bf:07:4c:2e:94:19:d2:d7:de:0a:68:e0:76:1a:
ba:77:e2:8c:59:c5:eb:e1:5a:92:72:25:0b:95:40:
3f:ee:8f:7d:dd:92:10:b1:86:48:b1:23:fe:32:4e:
57:cf:d3:d6:f5:1e:33:71:1e:fe:d2:5a:82:51:2a:
0f:00:ea:07:4e:24:5d:2c:4e:4f:56:3d:11:c6:bf:
19:ce:26:71:80:70:e6:4e:dc:dd:0a:1d:23:52:2b:
b3:fa:07:81:21:00:f5:ec:6d:f6:7e:fc:1d:81:6c:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:39:FC:41:1E:47:BE:D9:38:00:53:04:D0:21:EC:17:36:13:FF:A2
X509v3 Authority Key Identifier:
keyid:8B:28:95:BE:AA:DA:6D:2F:95:7C:7E:D4:30:FF:84:6B:7E:BC:DB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyiVvqrabS-VfH7UMP-Ea3682xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/pzn8QR5Hvtk4AFME0CHsFzYT_6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/iyiVvqrabS-VfH7UMP-Ea3682xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.175.0/24
91.237.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0f:fd:f8:98:b0:d4:ed:56:36:48:0e:88:d1:07:fa:c8:63:
c3:61:fb:7d:c1:6a:0a:8b:53:c2:84:fc:7f:50:3b:d7:f8:0f:
86:8d:00:f3:3a:64:59:20:ab:bd:5a:32:49:6c:39:87:ae:64:
40:52:56:08:a4:a2:71:9b:bd:8b:37:58:0e:8e:91:0a:0e:6d:
6b:e4:db:22:94:a5:a1:80:68:67:c9:96:3e:c5:14:82:63:01:
21:13:e0:2a:a7:e7:ab:69:a3:b4:ba:b1:7c:38:d3:1c:e9:64:
2b:45:c9:58:51:e8:5a:5d:99:ac:91:0f:5b:20:2c:9f:60:3d:
17:12:b0:27:00:0b:4b:e8:41:11:d9:bb:7d:e7:bc:46:19:c0:
55:0c:8c:d5:8c:15:6c:6d:fa:7f:83:ea:26:f4:0a:21:ff:fa:
78:74:c0:8d:3b:59:93:e0:44:c7:28:35:cc:8e:14:48:74:b8:
2f:ad:c8:04:e9:1c:0e:29:78:bc:c9:b2:0d:08:57:6a:f9:72:
5e:3b:e4:b8:e3:e8:6c:c8:5b:4c:32:a5:d5:58:34:5c:63:a0:
3f:d5:8e:ed:53:cc:46:ff:0a:48:17:ec:fb:ae:04:30:4a:66:
8e:6a:ab:a7:06:ff:12:ed:20:28:76:90:97:11:65:b4:56:d8:
a2:63:fe:92
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYJIqrZ1JbYtOkvnFi+3VyI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMjg5NWJlYWFkYTZkMmY5NTdjN2VkNDMwZmY4NDZiN2Vi
Y2RiMWIwHhcNMjIwNzI5MDYzNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzM5ZmM0MTFlNDdiZWQ5MzgwMDUzMDRkMDIxZWMxNzM2MTNmZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz6BfrfgzsiQBLE9/J/nMvcUCl+D
HiVdgZaGdTT234kZ4AeeNPhzUksT9w3/h3dAJt9qh4QxWV+kydtVQWQL4TlDYDy7
qmNvu8e0fLtfmMaQBukf3W8a19V0E2jIcsLquNmglNdEdMz/bEZMDUyrjntj/IWA
5DL2m6G1reoztnOEhaGNNlEGKMJdLgplc2Qo/GoCLzT9vwdMLpQZ0tfeCmjgdhq6
d+KMWcXr4VqSciULlUA/7o993ZIQsYZIsSP+Mk5Xz9PW9R4zcR7+0lqCUSoPAOoH
TiRdLE5PVj0Rxr8ZziZxgHDmTtzdCh0jUiuz+geBIQD17G32fvwdgWy0UwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKc5/EEeR77ZOABTBNAh7Bc2E/+iMB8GA1UdIwQY
MBaAFIsolb6q2m0vlXx+1DD/hGt+vNsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXlpVnZxcmFiUy1WZkg3VU1QLUVhMzY4MnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kZTgyZGEtYjA4Ni00MmVhLThjNDMt
NWU0OTk0NjhjYzJmLzEvcHpuOFFSNUh2dGs0QUZNRTBDSHNGellUXzZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kZTgyZGEtYjA4Ni00MmVhLThjNDMtNWU0OTk0NjhjYzJm
LzEvaXlpVnZxcmFiUy1WZkg3VU1QLUVhMzY4MnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9WvAwQA
W+36MA0GCSqGSIb3DQEBCwUAA4IBAQAqD/34mLDU7VY2SA6I0Qf6yGPDYft9wWoK
i1PChPx/UDvX+A+GjQDzOmRZIKu9WjJJbDmHrmRAUlYIpKJxm72LN1gOjpEKDm1r
5NsilKWhgGhnyZY+xRSCYwEhE+Aqp+eraaO0urF8ONMc6WQrRclYUehaXZmskQ9b
ICyfYD0XErAnAAtL6EER2bt957xGGcBVDIzVjBVsbfp/g+om9Aoh//p4dMCNO1mT
4ETHKDXMjhRIdLgvrcgE6RwOKXi8ybINCFdq+XJeO+S44+hsyFtMMqXVWDRcY6A/
1Y7tU8xG/wpIF+z7rgQwSmaOaqunBv8S7SAodpCXEWW0VtiiY/6S
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:34:27 2025 by rpki-client