Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/ZqqIYy5zTr4chw5GW7uuYuSkqvg.roa
File: ZqqIYy5zTr4chw5GW7uuYuSkqvg.roa (raw, json)
Hash identifier: iZv96XY/XkfoBA9SIo1EiF6wjVTX9TKPGTTH8nBy94g=
Subject key identifier: 66:AA:88:63:2E:73:4E:BE:1C:87:0E:46:5B:BB:AE:62:E4:A4:AA:F8
Certificate issuer: /CN=f68c28e95b54be5c052bb35b41ddf1efb1370363
Certificate serial: 01856D5D197345153663D85426C20E2D7BF1
Authority key identifier: F6:8C:28:E9:5B:54:BE:5C:05:2B:B3:5B:41:DD:F1:EF:B1:37:03:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9owo6VtUvlwFK7NbQd3x77E3A2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/ZqqIYy5zTr4chw5GW7uuYuSkqvg.roa
Signing time: Sun 01 Jan 2023 12:44:55 +0000
ROA not before: Sun 01 Jan 2023 12:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 31.222.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:19:73:45:15:36:63:d8:54:26:c2:0e:2d:7b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68c28e95b54be5c052bb35b41ddf1efb1370363
Validity
Not Before: Jan 1 12:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66aa88632e734ebe1c870e465bbbae62e4a4aaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:28:a8:d6:cb:8d:b3:ef:6f:44:67:22:e2:
d8:1b:b8:80:8b:7c:d5:a7:e2:7c:96:9d:24:5c:28:
2e:fc:4d:d7:df:ee:4b:07:c8:ae:da:da:5c:8d:06:
01:bb:75:30:f6:7c:a3:5f:b8:4c:70:d8:63:83:30:
08:25:cd:71:b8:37:8f:58:f5:5a:c4:e9:b2:fa:d8:
8b:cf:06:50:d0:ff:e7:4e:ad:c7:4e:bc:7e:7b:a6:
47:53:52:10:0f:e6:4a:63:16:5e:df:d1:fd:69:65:
19:53:15:55:84:21:d2:b2:21:ac:15:bf:39:fd:ec:
d3:4d:71:df:61:70:e5:29:97:54:4a:be:30:ee:19:
8e:c6:c1:d6:41:3b:3c:d6:8c:ae:59:86:4b:13:15:
94:06:73:96:1d:6f:6d:03:7f:7c:0a:4f:84:04:d7:
a5:9a:80:99:f7:00:60:16:e1:b4:c4:d3:65:5a:7b:
01:70:c3:1f:ec:0a:45:7a:37:36:e2:b8:d4:c6:c0:
2d:52:57:e7:1f:b2:e4:4c:a1:f4:b9:28:ef:a7:a1:
38:78:8e:58:38:e6:8b:f3:8c:37:04:bc:1f:58:be:
82:71:c7:39:0c:14:4b:a2:5a:86:1f:b7:d5:18:32:
23:09:c4:9e:62:50:b8:b0:9c:68:a1:0f:14:32:12:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AA:88:63:2E:73:4E:BE:1C:87:0E:46:5B:BB:AE:62:E4:A4:AA:F8
X509v3 Authority Key Identifier:
keyid:F6:8C:28:E9:5B:54:BE:5C:05:2B:B3:5B:41:DD:F1:EF:B1:37:03:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9owo6VtUvlwFK7NbQd3x77E3A2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/ZqqIYy5zTr4chw5GW7uuYuSkqvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/9owo6VtUvlwFK7NbQd3x77E3A2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b4:ee:49:79:1b:f3:d4:25:c4:0a:9d:97:0f:cc:26:57:53:
97:13:42:db:44:92:93:43:88:01:98:53:c0:7e:c2:78:f7:d9:
7c:3d:e6:f5:58:a6:df:21:03:98:d6:87:d6:e9:e0:13:7e:37:
49:00:a7:00:55:24:ec:98:e4:c7:c0:95:84:68:2a:4e:5a:53:
f6:31:d5:d8:4b:c1:e0:d3:26:b1:ad:61:ed:63:bc:af:a8:6d:
af:6a:a3:b2:51:a6:b5:af:b7:ee:6c:5a:fa:21:6f:95:cf:b7:
e8:be:f0:a2:7b:75:2b:b3:9b:55:f1:cc:61:63:e8:62:df:23:
89:b7:e5:e9:ca:75:03:93:78:79:48:7e:41:a9:f9:e8:8d:6e:
d0:12:0c:b7:10:71:3d:73:5f:ab:06:73:c1:fa:f9:c4:dd:23:
71:c3:46:f7:c1:c3:a7:1e:76:77:47:ce:9d:97:91:dd:50:ac:
ae:88:5f:6a:7c:14:ed:67:be:9b:d5:ba:74:53:34:65:0a:d0:
3a:04:f3:dc:da:36:b4:0e:83:cf:4d:10:93:c9:3b:e3:4a:9e:
56:bd:ae:df:35:95:63:43:3a:e9:ad:c0:fa:b0:79:dd:6f:1e:
a6:b2:45:06:c7:1d:61:c5:7b:fa:80:d7:91:60:b5:cf:ac:a0:
08:ae:5d:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXRlzRRU2Y9hUJsIOLXvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OGMyOGU5NWI1NGJlNWMwNTJiYjM1YjQxZGRmMWVmYjEz
NzAzNjMwHhcNMjMwMTAxMTI0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmFhODg2MzJlNzM0ZWJlMWM4NzBlNDY1YmJiYWU2MmU0YTRhYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlwoqNbLjbPvb0RnIuLYG7iAi3zV
p+J8lp0kXCgu/E3X3+5LB8iu2tpcjQYBu3Uw9nyjX7hMcNhjgzAIJc1xuDePWPVa
xOmy+tiLzwZQ0P/nTq3HTrx+e6ZHU1IQD+ZKYxZe39H9aWUZUxVVhCHSsiGsFb85
/ezTTXHfYXDlKZdUSr4w7hmOxsHWQTs81oyuWYZLExWUBnOWHW9tA398Ck+EBNel
moCZ9wBgFuG0xNNlWnsBcMMf7ApFejc24rjUxsAtUlfnH7LkTKH0uSjvp6E4eI5Y
OOaL84w3BLwfWL6Cccc5DBRLolqGH7fVGDIjCcSeYlC4sJxooQ8UMhKrRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGaqiGMuc06+HIcORlu7rmLkpKr4MB8GA1UdIwQY
MBaAFPaMKOlbVL5cBSuzW0Hd8e+xNwNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW93bzZWdFV2bHdGSzdOYlFkM3g3N0UzQTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9jNmNkY2MtNWQzYS00MTI2LTg1OWEt
YjFkOGNkMDZmYzE3LzEvWnFxSVl5NXpUcjRjaHc1R1c3dXVZdVNrcXZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9jNmNkY2MtNWQzYS00MTI2LTg1OWEtYjFkOGNkMDZmYzE3
LzEvOW93bzZWdFV2bHdGSzdOYlFkM3g3N0UzQTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH974MA0G
CSqGSIb3DQEBCwUAA4IBAQA+tO5JeRvz1CXECp2XD8wmV1OXE0LbRJKTQ4gBmFPA
fsJ499l8Peb1WKbfIQOY1ofW6eATfjdJAKcAVSTsmOTHwJWEaCpOWlP2MdXYS8Hg
0yaxrWHtY7yvqG2vaqOyUaa1r7fubFr6IW+Vz7fovvCie3Urs5tV8cxhY+hi3yOJ
t+XpynUDk3h5SH5BqfnojW7QEgy3EHE9c1+rBnPB+vnE3SNxw0b3wcOnHnZ3R86d
l5HdUKyuiF9qfBTtZ76b1bp0UzRlCtA6BPPc2ja0DoPPTRCTyTvjSp5Wva7fNZVj
QzrprcD6sHndbx6mskUGxx1hxXv6gNeRYLXPrKAIrl3w
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:23 2025 by rpki-client