Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/ZFo6sZPHGWLll2bhQvu4BvWNBNs.roa
File: ZFo6sZPHGWLll2bhQvu4BvWNBNs.roa (raw, json)
Hash identifier: sB7uzv9n66KJSoVRJJtJqNrl26TdleSqn5KPpollaK8=
Subject key identifier: 64:5A:3A:B1:93:C7:19:62:E5:97:66:E1:42:FB:B8:06:F5:8D:04:DB
Certificate issuer: /CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Certificate serial: 0187285A255646EFF216E0632FFDAA22627C
Authority key identifier: C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/ZFo6sZPHGWLll2bhQvu4BvWNBNs.roa
Signing time: Tue 28 Mar 2023 13:13:29 +0000
ROA not before: Tue 28 Mar 2023 13:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202984
IP address blocks: 91.195.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:5a:25:56:46:ef:f2:16:e0:63:2f:fd:aa:22:62:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Validity
Not Before: Mar 28 13:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645a3ab193c71962e59766e142fbb806f58d04db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:b7:b1:8b:b3:24:0e:8a:e8:3c:41:50:fc:
a1:6d:bb:83:8f:6d:19:aa:25:38:10:72:0f:fc:bc:
47:e9:a6:21:b0:20:e8:b0:29:f8:af:10:d2:a1:f3:
65:ef:ab:eb:17:4d:0b:6e:2d:bb:0b:ca:0d:53:47:
5b:13:70:f9:fd:2b:be:bf:8c:b6:d8:b0:8a:25:79:
f1:7d:b7:ca:d9:4b:a1:ff:11:3c:d9:be:97:aa:ca:
51:f7:ed:46:53:b0:65:1b:61:c1:76:45:d1:df:02:
c8:3e:44:83:1f:48:f5:e3:f7:1e:d5:5b:a3:60:5f:
81:a1:cc:ab:4a:3d:d6:c5:b9:64:e6:95:f2:b7:b7:
e7:4a:80:34:6e:6a:f9:e8:a2:98:13:39:23:ac:92:
96:99:a9:6d:3b:df:a3:73:a3:52:63:bb:3b:79:6d:
85:ab:8b:40:ad:b3:d5:51:7a:19:b3:de:fd:e8:26:
c0:95:28:11:37:34:36:16:f3:48:8c:0a:ac:78:25:
2b:54:3a:d2:20:7b:a6:92:f8:4d:96:da:50:46:e4:
20:db:ce:f2:66:50:3c:20:5b:5f:fc:f3:7b:c4:08:
50:0e:93:4a:99:50:84:43:83:f2:42:31:9a:fc:94:
d2:4f:b1:fa:86:c1:7d:86:63:51:13:23:0d:9a:0b:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5A:3A:B1:93:C7:19:62:E5:97:66:E1:42:FB:B8:06:F5:8D:04:DB
X509v3 Authority Key Identifier:
keyid:C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/ZFo6sZPHGWLll2bhQvu4BvWNBNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/yUy0Im5tJMHg6WhXiKX51ZQxLMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.124.0/24
Signature Algorithm: sha256WithRSAEncryption
28:98:00:1c:63:29:de:76:f6:a5:6b:be:cc:da:c3:f0:88:15:
c1:e8:b8:70:e5:9b:37:39:30:36:3d:79:b8:7b:6f:e9:06:cf:
cd:a9:50:3e:7d:ae:52:ce:ea:60:df:00:31:dc:e3:fb:ff:f4:
f6:37:e7:29:11:1e:8a:13:6f:f0:74:ad:79:8e:4e:b7:66:92:
29:42:03:d6:1a:1a:fa:a0:13:6a:bc:5c:45:b7:d0:bd:f2:64:
3b:e6:76:72:37:6d:6a:80:8f:d0:f0:98:c5:b5:77:1d:ff:96:
a7:2f:b7:fb:07:1d:0c:ee:c8:26:11:59:91:9d:51:b0:9a:e9:
59:65:84:2c:2c:c1:15:ec:27:a1:33:97:f7:99:cf:00:90:5b:
1b:6f:a9:06:59:ba:97:45:3e:86:44:29:47:73:bc:8e:20:30:
84:5d:19:d4:40:19:c6:31:77:aa:9f:0d:d0:e4:b6:8e:17:6b:
5d:91:df:0e:24:d5:1c:7d:07:21:a5:31:a9:d8:33:59:19:cb:
0d:de:c2:7c:09:9b:04:01:c9:4b:e4:18:67:84:a3:a4:bc:50:
1d:77:61:1f:fb:0e:8a:d3:09:95:0b:22:0c:c2:6a:25:e2:08:
9a:85:c1:27:cc:36:f3:16:ab:01:67:92:5e:2b:12:b0:b6:76:
f6:9b:51:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcoWiVWRu/yFuBjL/2qImJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NGNiNDIyNmU2ZDI0YzFlMGU5Njg1Nzg4YTVmOWQ1OTQz
MTJjYzAwHhcNMjMwMzI4MTMxMzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDVhM2FiMTkzYzcxOTYyZTU5NzY2ZTE0MmZiYjgwNmY1OGQwNGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUW3sYuzJA6K6DxBUPyhbbuDj20Z
qiU4EHIP/LxH6aYhsCDosCn4rxDSofNl76vrF00Lbi27C8oNU0dbE3D5/Su+v4y2
2LCKJXnxfbfK2Uuh/xE82b6XqspR9+1GU7BlG2HBdkXR3wLIPkSDH0j14/ce1Vuj
YF+BocyrSj3Wxblk5pXyt7fnSoA0bmr56KKYEzkjrJKWmaltO9+jc6NSY7s7eW2F
q4tArbPVUXoZs9796CbAlSgRNzQ2FvNIjAqseCUrVDrSIHumkvhNltpQRuQg287y
ZlA8IFtf/PN7xAhQDpNKmVCEQ4PyQjGa/JTST7H6hsF9hmNREyMNmgskPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRaOrGTxxli5Zdm4UL7uAb1jQTbMB8GA1UdIwQY
MBaAFMlMtCJubSTB4OloV4il+dWUMSzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVV5MEltNXRKTUhnNldoWGlLWDUxWlF4TE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mYzE5ZWEtY2Y4MC00Y2UwLThlMWIt
MGE5NTVmYTdkN2IwLzEvWkZvNnNaUEhHV0xsbDJiaFF2dTRCdldOQk5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mYzE5ZWEtY2Y4MC00Y2UwLThlMWItMGE5NTVmYTdkN2Iw
LzEveVV5MEltNXRKTUhnNldoWGlLWDUxWlF4TE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8N8MA0G
CSqGSIb3DQEBCwUAA4IBAQAomAAcYynedvala77M2sPwiBXB6Lhw5Zs3OTA2PXm4
e2/pBs/NqVA+fa5Szupg3wAx3OP7//T2N+cpER6KE2/wdK15jk63ZpIpQgPWGhr6
oBNqvFxFt9C98mQ75nZyN21qgI/Q8JjFtXcd/5anL7f7Bx0M7sgmEVmRnVGwmulZ
ZYQsLMEV7CehM5f3mc8AkFsbb6kGWbqXRT6GRClHc7yOIDCEXRnUQBnGMXeqnw3Q
5LaOF2tdkd8OJNUcfQchpTGp2DNZGcsN3sJ8CZsEAclL5BhnhKOkvFAdd2Ef+w6K
0wmVCyIMwmol4giahcEnzDbzFqsBZ5JeKxKwtnb2m1Hj
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:43 2025 by rpki-client