Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/K1Zw33lxptd4i8paO-hDG6aoPbo.roa
File: K1Zw33lxptd4i8paO-hDG6aoPbo.roa (raw, json)
Hash identifier: tcKIzDSldQsgC3ylNAbNm1q9BooSdU53dtyBLHdOrgo=
Subject key identifier: 2B:56:70:DF:79:71:A6:D7:78:8B:CA:5A:3B:E8:43:1B:A6:A8:3D:BA
Certificate issuer: /CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Certificate serial: 01ED27DC
Authority key identifier: 46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/K1Zw33lxptd4i8paO-hDG6aoPbo.roa
Signing time: Wed 13 Apr 2022 10:36:30 +0000
ROA not before: Wed 13 Apr 2022 10:36:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 94.124.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32319452 (0x1ed27dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Validity
Not Before: Apr 13 10:36:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b5670df7971a6d7788bca5a3be8431ba6a83dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:c0:aa:dd:cf:ec:48:c2:54:19:27:27:05:
eb:25:f5:dc:a7:c1:9d:d5:55:b8:1f:7d:fb:66:2c:
8d:2c:c2:07:bf:83:31:47:4c:7f:f8:80:e8:4b:af:
22:30:45:f1:f7:11:2c:a7:1c:c2:bf:ab:6b:f9:78:
9f:d5:2f:1a:ed:41:f1:94:54:cc:8d:cb:d0:83:a5:
af:1e:e7:e1:88:6e:95:22:c6:a3:f9:ed:b9:12:ba:
06:ec:2f:ce:8b:3e:4d:d9:f3:39:c5:aa:ba:f2:38:
11:91:ca:86:93:0a:99:da:56:5e:71:c5:05:14:24:
93:a3:d1:99:ab:9c:c4:50:8d:b1:7d:4c:b3:f8:2a:
27:a6:d6:df:6c:f3:52:60:a3:ec:71:2f:f7:33:ab:
80:51:0a:f0:fc:44:60:dd:14:86:b8:21:d1:29:b7:
04:1c:94:03:03:05:a0:b5:10:d7:2e:8b:07:9f:dc:
4d:db:49:29:4b:5b:b9:86:ab:da:86:78:71:6c:a2:
23:12:66:71:7e:1b:6f:53:67:48:5f:3b:a1:9b:f4:
78:6b:a2:85:0e:5c:78:60:7c:89:94:22:e0:f8:0e:
3e:f7:80:41:ea:e6:52:85:ea:ed:3f:ba:d7:a8:d4:
e8:85:16:99:4f:31:af:ab:0f:c8:ae:14:89:69:c5:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:70:DF:79:71:A6:D7:78:8B:CA:5A:3B:E8:43:1B:A6:A8:3D:BA
X509v3 Authority Key Identifier:
keyid:46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/K1Zw33lxptd4i8paO-hDG6aoPbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/Rt0l2fFcInyjX4ouKw0aiaktjWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.72.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a9:4a:b3:20:ca:09:73:af:0d:83:e0:a9:07:6b:c7:52:35:
24:b0:b1:23:d4:f0:cf:b6:7f:59:93:06:1f:8d:07:de:03:77:
af:f5:2a:6a:d7:61:f5:37:c8:f2:f1:a3:62:90:86:ac:f0:9f:
27:01:21:7f:d7:3a:51:ca:e9:b2:9b:b1:cb:34:b1:4e:fd:18:
56:9e:78:aa:a3:dd:c3:c5:9c:3c:e6:c5:a4:8a:7f:25:9d:a4:
9c:9a:63:7f:a6:ec:83:54:ba:cb:7d:d4:61:c2:68:14:33:01:
c6:6a:95:cc:1b:eb:29:79:87:48:4d:d3:d4:e2:bd:19:d1:4b:
60:82:2c:ac:06:33:e4:72:53:a2:50:f3:42:a9:3c:b8:8e:78:
ac:be:4d:2b:c3:f2:1b:a3:8c:bc:0e:8e:64:79:39:df:31:8c:
5e:c0:01:b5:4b:02:f7:5e:26:39:1a:aa:e3:7f:a8:78:10:5a:
27:25:fb:47:b6:6a:3a:ad:83:94:9d:c8:28:1f:1c:9f:bc:cf:
f7:74:2d:49:26:7e:da:de:98:0f:6a:34:50:08:20:72:ac:1b:
aa:36:dc:dc:9a:08:97:18:26:5e:e2:43:63:7e:d2:55:30:4e:
6c:67:52:d0:d5:f5:51:7e:3a:45:0c:6e:5a:88:86:4b:6f:a7:
a1:6a:69:66
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAe0n3DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NmRkMjVkOWYxNWMyMjdjYTM1ZjhhMmUyYjBkMWE4OWE5MmQ4ZDYyMB4XDTIyMDQx
MzEwMzYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmI1NjcwZGY3OTcx
YTZkNzc4OGJjYTVhM2JlODQzMWJhNmE4M2RiYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJEZwKrdz+xIwlQZJycF6yX13KfBndVVuB99+2YsjSzCB7+D
MUdMf/iA6EuvIjBF8fcRLKccwr+ra/l4n9UvGu1B8ZRUzI3L0IOlrx7n4YhulSLG
o/ntuRK6Buwvzos+TdnzOcWquvI4EZHKhpMKmdpWXnHFBRQkk6PRmaucxFCNsX1M
s/gqJ6bW32zzUmCj7HEv9zOrgFEK8PxEYN0Uhrgh0Sm3BByUAwMFoLUQ1y6LB5/c
TdtJKUtbuYar2oZ4cWyiIxJmcX4bb1NnSF87oZv0eGuihQ5ceGB8iZQi4PgOPveA
QermUoXq7T+616jU6IUWmU8xr6sPyK4UiWnF1W0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQrVnDfeXGm13iLylo76EMbpqg9ujAfBgNVHSMEGDAWgBRG3SXZ8VwifKNf
ii4rDRqJqS2NYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1J0MGwyZkZjSW55alg0b3VLdzBhaWFrdGpXSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvMzdkMDFmLTRhOWQtNDU2Yy1hY2E5LWQ4NTI0MzMzNjRiMy8x
L0sxWnczM2x4cHRkNGk4cGFPLWhERzZhb1Biby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
MzdkMDFmLTRhOWQtNDU2Yy1hY2E5LWQ4NTI0MzMzNjRiMy8xL1J0MGwyZkZjSW55
alg0b3VLdzBhaWFrdGpXSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF58SDANBgkqhkiG9w0BAQsFAAOC
AQEAVqlKsyDKCXOvDYPgqQdrx1I1JLCxI9Twz7Z/WZMGH40H3gN3r/Uqatdh9TfI
8vGjYpCGrPCfJwEhf9c6UcrpspuxyzSxTv0YVp54qqPdw8WcPObFpIp/JZ2knJpj
f6bsg1S6y33UYcJoFDMBxmqVzBvrKXmHSE3T1OK9GdFLYIIsrAYz5HJTolDzQqk8
uI54rL5NK8PyG6OMvA6OZHk53zGMXsABtUsC914mORqq43+oeBBaJyX7R7ZqOq2D
lJ3IKB8cn7zP93QtSSZ+2t6YD2o0UAggcqwbqjbc3JoIlxgmXuJDY37SVTBObGdS
0NX1UX46RQxuWoiGS2+noWppZg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:04 2025 by rpki-client