Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZFzG2Urgwcii60PFRNZJQmyT55Y.roa
File: ZFzG2Urgwcii60PFRNZJQmyT55Y.roa (raw, json)
Hash identifier: T4M5s/DWglLYO7Z4Yo9jCDb8SkEn/Y8+68oe74EWKQs=
Subject key identifier: 64:5C:C6:D9:4A:E0:C1:C8:A2:EB:43:C5:44:D6:49:42:6C:93:E7:96
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 0194266BD4A18F83C9186F459BCC3CA3C7BC
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZFzG2Urgwcii60PFRNZJQmyT55Y.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.233.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d4:a1:8f:83:c9:18:6f:45:9b:cc:3c:a3:c7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=645cc6d94ae0c1c8a2eb43c544d649426c93e796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:2c:21:3e:42:89:59:b8:6b:1a:07:d3:03:
e4:ea:a5:4b:f3:c3:08:ab:27:a6:5e:bf:75:52:0f:
5d:65:0d:26:05:46:b3:f0:66:fc:46:b8:3d:72:e1:
fd:3c:9b:40:11:a8:1a:29:e4:b6:2d:70:d7:ab:5b:
bc:07:2a:34:41:99:90:c0:a6:07:2d:c1:74:59:fd:
05:d3:d3:3a:c3:fb:5c:cf:51:ce:bd:38:d0:4c:24:
fb:6c:97:bb:46:04:28:75:81:c3:cf:db:1e:fd:ff:
23:14:91:c5:32:88:f6:be:f6:c6:91:37:d3:6d:64:
5a:5e:fd:cc:a3:11:10:51:1c:1e:24:2e:32:16:09:
6b:54:37:14:ce:19:3f:cb:b3:17:6b:61:34:62:ed:
27:cb:86:64:de:6a:88:02:fa:7d:f4:39:3d:2d:1f:
cc:45:16:c2:48:30:9b:87:96:38:9d:1a:ec:52:84:
83:c3:05:6c:6c:85:13:b2:70:3d:0d:68:0d:63:24:
a4:e3:2d:55:a2:ea:58:5c:01:eb:33:2a:9b:37:69:
43:ba:8b:62:a6:f7:85:7f:7c:81:d8:06:61:51:c3:
92:22:31:3d:96:16:38:31:d6:7f:b8:5d:a0:65:7f:
90:74:b9:e7:73:77:cd:34:0d:5d:ae:43:dc:60:89:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5C:C6:D9:4A:E0:C1:C8:A2:EB:43:C5:44:D6:49:42:6C:93:E7:96
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZFzG2Urgwcii60PFRNZJQmyT55Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.235.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bb:49:85:0a:d2:cf:76:2e:f9:d7:08:c5:2a:53:3f:fe:e1:
fc:f5:c1:9b:e7:97:7c:c1:a8:95:92:eb:dc:4e:41:e1:17:c0:
b1:b1:f8:0d:b8:58:b3:93:e5:0b:69:a7:9a:9b:1f:8f:eb:21:
fc:6c:4f:3f:e3:4e:9c:2c:16:b0:ca:01:28:39:98:0c:53:23:
b1:7f:12:75:50:7d:9c:7f:14:15:b2:bd:2a:fa:a9:12:87:33:
bf:3e:71:6e:d7:ab:7a:81:93:e7:29:60:b1:77:4e:a5:ab:80:
6b:ba:c6:34:b4:d2:e9:fe:f0:e1:bd:8a:4f:31:eb:4f:08:b4:
e3:c4:be:a9:e3:25:2f:fb:31:3f:12:0a:58:0b:73:8b:01:a5:
cd:88:c4:fc:be:6b:1b:b2:a9:c5:41:0f:4d:6f:47:c7:67:a4:
b3:be:64:3a:a9:6a:f3:39:a9:ca:63:45:1a:9b:ef:8b:35:e5:
59:aa:fd:e1:1d:11:60:47:5d:3b:fb:a1:60:3e:96:cf:64:00:
da:39:39:e1:bb:32:91:a1:9c:32:0a:09:23:c8:82:3b:4d:eb:
bb:0c:aa:d9:33:cc:b8:78:4c:ec:9c:7b:05:b6:e4:22:a7:f4:
55:24:00:43:ed:1a:8a:50:94:8b:e4:98:20:cf:2f:1d:2f:e8:
ec:38:e2:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma9Shj4PJGG9Fm8w8o8e8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MzVhODI5NWEzMGQ3ZGZjYWMyYTU3MGI4ZGVjYjI1YzQ2
NTIxNDAwHhcNMjUwMTAyMDk0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDVjYzZkOTRhZTBjMWM4YTJlYjQzYzU0NGQ2NDk0MjZjOTNlNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CksIT5CiVm4axoH0wPk6qVL88MI
qyemXr91Ug9dZQ0mBUaz8Gb8Rrg9cuH9PJtAEagaKeS2LXDXq1u8Byo0QZmQwKYH
LcF0Wf0F09M6w/tcz1HOvTjQTCT7bJe7RgQodYHDz9se/f8jFJHFMoj2vvbGkTfT
bWRaXv3MoxEQURweJC4yFglrVDcUzhk/y7MXa2E0Yu0ny4Zk3mqIAvp99Dk9LR/M
RRbCSDCbh5Y4nRrsUoSDwwVsbIUTsnA9DWgNYySk4y1VoupYXAHrMyqbN2lDuoti
pveFf3yB2AZhUcOSIjE9lhY4MdZ/uF2gZX+QdLnnc3fNNA1drkPcYImlzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRcxtlK4MHIoutDxUTWSUJsk+eWMB8GA1UdIwQY
MBaAFGc1qClaMNffysKlcLjeyyXEZSFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMt
MThlMThkNjU5ZDhmLzEvWkZ6RzJVcmd3Y2lpNjBQRlJOWkpRbXlUNTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMtMThlMThkNjU5ZDhm
LzEvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuenrMA0G
CSqGSIb3DQEBCwUAA4IBAQAgu0mFCtLPdi751wjFKlM//uH89cGb55d8waiVkuvc
TkHhF8CxsfgNuFizk+ULaaeamx+P6yH8bE8/406cLBawygEoOZgMUyOxfxJ1UH2c
fxQVsr0q+qkShzO/PnFu16t6gZPnKWCxd06lq4BrusY0tNLp/vDhvYpPMetPCLTj
xL6p4yUv+zE/EgpYC3OLAaXNiMT8vmsbsqnFQQ9Nb0fHZ6SzvmQ6qWrzOanKY0Ua
m++LNeVZqv3hHRFgR107+6FgPpbPZADaOTnhuzKRoZwyCgkjyII7Teu7DKrZM8y4
eEzsnHsFtuQip/RVJABD7RqKUJSL5Jggzy8dL+jsOOLo
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:29 2025 by rpki-client