Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zy2bxDTrFCyw6QY2mFEi4ISpzpo.roa
File: zy2bxDTrFCyw6QY2mFEi4ISpzpo.roa (raw, json)
Hash identifier: bsEJr4jYRTqiiRaZXZBCwk0QC2H5Gu5IzDNnFAEvYSo=
Subject key identifier: CF:2D:9B:C4:34:EB:14:2C:B0:E9:06:36:98:51:22:E0:84:A9:CE:9A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01850B2EC90F281C258F53A46680EA8D3CD2
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zy2bxDTrFCyw6QY2mFEi4ISpzpo.roa
Signing time: Tue 13 Dec 2022 11:11:33 +0000
ROA not before: Tue 13 Dec 2022 11:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 141.11.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:2e:c9:0f:28:1c:25:8f:53:a4:66:80:ea:8d:3c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Dec 13 11:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf2d9bc434eb142cb0e90636985122e084a9ce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:ac:fc:0f:43:40:d6:49:96:52:67:42:30:
2f:50:b0:ab:f1:5b:03:7d:4e:dd:d6:77:05:2c:04:
3d:91:fa:19:22:7e:d4:f6:92:86:bb:b5:34:ef:0e:
86:6c:3c:c8:a0:ef:42:f0:36:27:25:d1:00:c9:2d:
4f:00:4a:3d:5c:42:11:2f:ea:94:4e:7d:f3:4c:88:
c5:33:2c:e2:fd:51:1f:6c:72:0f:fb:fa:9a:ca:5a:
ec:36:fc:81:19:5e:bb:22:ca:99:7d:c0:9c:21:d6:
2d:d1:ef:d7:81:73:cd:e5:08:a8:75:f6:1a:0e:f4:
93:e3:7e:76:5e:08:18:ad:23:ca:f3:d2:c3:87:b0:
9a:73:fe:0b:57:df:f3:28:bf:56:50:38:a7:ea:22:
d5:c2:1b:d3:f3:0a:79:40:f0:8d:24:01:bc:c2:6f:
d9:aa:de:09:3a:5d:ee:02:d7:ca:48:c0:24:aa:21:
82:c2:ee:f2:21:a9:36:a1:37:85:24:51:76:a8:35:
29:1e:ec:90:e0:01:80:34:8c:22:ba:62:12:6f:1c:
5d:59:06:f9:73:ff:f9:f6:e4:dc:db:4d:57:ac:d3:
84:8d:74:c7:c4:db:11:23:c9:e6:c8:6f:ea:b5:d5:
e8:21:96:f1:81:98:e3:f2:36:1c:ee:5e:aa:5f:59:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2D:9B:C4:34:EB:14:2C:B0:E9:06:36:98:51:22:E0:84:A9:CE:9A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/zy2bxDTrFCyw6QY2mFEi4ISpzpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.109.0/24
Signature Algorithm: sha256WithRSAEncryption
10:15:e8:dc:e7:a5:bd:a3:c1:25:61:4d:e0:ca:0d:4d:d1:04:
a8:be:99:44:00:12:46:8f:38:83:c6:41:fb:68:e5:86:e0:b3:
79:4f:ce:19:1a:b1:80:81:43:54:f8:95:54:e1:2a:94:c5:99:
f6:b0:ec:c1:da:9d:9f:31:00:85:f2:e1:30:2c:bf:76:7a:f3:
bc:62:39:a6:65:32:5a:e5:83:1c:2a:b4:03:36:f3:ae:2a:09:
d6:f7:8a:fc:a1:f2:d1:cf:6a:b5:83:69:f4:9e:ce:1d:d4:84:
cd:3b:30:96:2d:2b:7c:3b:82:7d:3d:e3:72:d8:53:96:45:b1:
40:1b:78:19:12:82:39:1a:3d:50:4f:1f:6b:3b:55:79:82:2d:
aa:6e:91:75:33:ef:86:dd:d1:e8:b3:63:47:66:b1:68:05:e8:
2c:65:e4:ef:43:c2:e6:0c:12:b9:a9:d9:97:48:5c:40:7d:d1:
1a:0a:ed:eb:26:03:1d:77:ee:47:84:90:ba:37:9d:f2:b3:84:
91:ec:67:6d:89:36:c5:f3:fb:a7:e1:2b:db:fc:ea:6c:92:9d:
1c:fc:f5:0d:ba:77:5a:8b:e8:a5:5b:df:66:79:2c:48:c3:66:
66:fd:c6:9b:35:54:8e:76:68:a1:54:e0:e9:da:0f:32:83:f8:
f2:a4:6a:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYULLskPKBwlj1OkZoDqjTzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMjEzMTExMTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjJkOWJjNDM0ZWIxNDJjYjBlOTA2MzY5ODUxMjJlMDg0YTljZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg6s/A9DQNZJllJnQjAvULCr8VsD
fU7d1ncFLAQ9kfoZIn7U9pKGu7U07w6GbDzIoO9C8DYnJdEAyS1PAEo9XEIRL+qU
Tn3zTIjFMyzi/VEfbHIP+/qaylrsNvyBGV67IsqZfcCcIdYt0e/XgXPN5QiodfYa
DvST4352XggYrSPK89LDh7Cac/4LV9/zKL9WUDin6iLVwhvT8wp5QPCNJAG8wm/Z
qt4JOl3uAtfKSMAkqiGCwu7yIak2oTeFJFF2qDUpHuyQ4AGANIwiumISbxxdWQb5
c//59uTc201XrNOEjXTHxNsRI8nmyG/qtdXoIZbxgZjj8jYc7l6qX1nMVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8tm8Q06xQssOkGNphRIuCEqc6aMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvenkyYnhEVHJGQ3l3NlFZMm1GRWk0SVNwenBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQttMA0G
CSqGSIb3DQEBCwUAA4IBAQAQFejc56W9o8ElYU3gyg1N0QSovplEABJGjziDxkH7
aOWG4LN5T84ZGrGAgUNU+JVU4SqUxZn2sOzB2p2fMQCF8uEwLL92evO8YjmmZTJa
5YMcKrQDNvOuKgnW94r8ofLRz2q1g2n0ns4d1ITNOzCWLSt8O4J9PeNy2FOWRbFA
G3gZEoI5Gj1QTx9rO1V5gi2qbpF1M++G3dHos2NHZrFoBegsZeTvQ8LmDBK5qdmX
SFxAfdEaCu3rJgMdd+5HhJC6N53ys4SR7GdtiTbF8/un4Svb/Opskp0c/PUNunda
i+ilW99meSxIw2Zm/cabNVSOdmihVODp2g8yg/jypGrW
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:54 2025 by rpki-client