Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/zk_srIl5S_7GUjBcmkL0N53tb_I.roa
File: zk_srIl5S_7GUjBcmkL0N53tb_I.roa (raw, json)
Hash identifier: V7c6Bjezv7H8Tn4E1KiNBF/KluDeipGOdnhoYVfZOmM=
Subject key identifier: CE:4F:EC:AC:89:79:4B:FE:C6:52:30:5C:9A:42:F4:37:9D:ED:6F:F2
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 31DDF8AF
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/zk_srIl5S_7GUjBcmkL0N53tb_I.roa
Signing time: Fri 15 Apr 2022 16:12:49 +0000
ROA not before: Fri 15 Apr 2022 16:12:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61975
IP address blocks: 109.121.176.0/22 maxlen: 22
109.121.176.0/24 maxlen: 24
109.121.176.0/20 maxlen: 20
109.121.178.0/24 maxlen: 24
109.121.177.0/24 maxlen: 24
109.121.179.0/24 maxlen: 24
109.121.182.0/24 maxlen: 24
109.121.181.0/24 maxlen: 24
109.121.183.0/24 maxlen: 24
109.121.184.0/21 maxlen: 21
109.121.185.0/24 maxlen: 24
109.121.184.0/24 maxlen: 24
109.121.186.0/24 maxlen: 24
109.121.180.0/24 maxlen: 24
109.121.188.0/24 maxlen: 24
109.121.190.0/24 maxlen: 24
109.121.189.0/24 maxlen: 24
109.121.191.0/24 maxlen: 24
109.121.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836630703 (0x31ddf8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Apr 15 16:12:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce4fecac89794bfec652305c9a42f4379ded6ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:da:c9:20:33:e6:78:7a:ef:e8:bd:3a:42:
64:f5:56:d2:e9:cd:fe:f2:ac:15:1e:9e:e3:3f:8e:
eb:df:ec:88:03:ad:c0:56:f6:d3:15:6f:4a:9c:e3:
09:45:a5:59:03:aa:e1:3a:42:cd:bd:d1:25:8d:42:
a6:af:49:34:5c:30:8a:47:75:99:08:8f:d0:df:95:
d7:70:6c:e4:88:71:3e:1a:66:e2:15:40:5c:98:5f:
63:c2:27:40:16:1b:03:43:00:7c:18:27:3b:73:46:
b9:2c:3b:6e:4d:a3:b3:7f:1a:87:cc:6d:f3:f7:96:
8a:51:a3:ac:a1:82:59:7a:e8:79:b2:10:5b:85:07:
90:c5:02:90:4e:a2:cd:9a:80:d7:8f:02:b9:07:2a:
fc:f5:be:38:63:56:1c:1e:bc:ff:96:60:b6:ff:69:
91:e8:40:a5:b5:e8:20:86:ab:c0:ce:69:97:e4:57:
2e:c1:ba:b6:f5:77:58:ce:6f:d3:07:3d:68:6a:95:
c7:b6:87:4a:d7:78:2f:31:99:e8:69:be:42:92:5d:
73:cc:6a:57:21:52:6a:b3:ec:18:88:87:5e:f1:5f:
79:55:0b:88:f5:36:da:b5:75:bf:ce:02:75:1d:af:
e9:c0:93:7c:6b:82:71:7d:7b:ca:0d:e4:5e:6b:b7:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4F:EC:AC:89:79:4B:FE:C6:52:30:5C:9A:42:F4:37:9D:ED:6F:F2
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/zk_srIl5S_7GUjBcmkL0N53tb_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.176.0/20
Signature Algorithm: sha256WithRSAEncryption
09:86:8a:57:c4:d8:4f:a1:88:b3:e2:d1:37:e7:49:03:63:00:
95:84:39:f6:73:25:95:16:91:7e:32:41:72:e3:43:0f:f9:c9:
27:e2:a1:05:79:0e:b1:0b:1f:dd:36:07:76:da:49:8c:f7:f3:
2c:21:b5:ad:76:0d:84:47:8f:6c:af:8d:c2:86:91:a8:85:7d:
fc:cc:79:ca:c5:b3:8c:04:a6:d4:93:bd:d3:ee:e0:d0:d2:df:
b6:27:26:8b:93:00:e0:23:ac:46:8e:23:6a:0a:21:75:bb:d3:
7c:ed:c7:fc:2a:16:23:87:f1:dd:cf:ed:50:e6:b4:86:65:d0:
4d:74:5c:84:fc:74:9b:fc:e9:6d:2c:1f:3f:a2:f4:79:f9:16:
19:7b:26:b6:22:cc:da:fb:ba:4e:01:47:da:14:5a:de:20:c8:
08:4d:d2:c9:8c:78:cb:2b:3d:d5:48:64:8e:32:7c:4e:62:9f:
d2:76:8b:d7:18:28:f8:94:88:43:a1:ff:f9:10:14:a5:85:a0:
ac:fd:72:59:b8:80:60:43:27:69:3b:46:65:27:a1:e9:0a:7c:
b1:e3:57:a5:81:8c:91:85:41:04:4b:77:2c:a4:84:0b:2f:48:
8e:86:e8:de:5d:19:3f:30:27:0c:a6:10:d1:99:5b:a9:b7:06:
26:7b:ca:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMd34rzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGQyZTliM2E0ZDdiMjRiM2E2YWExNGYzZWRhM2YxNGZhMjljNzZiMB4XDTIyMDQx
NTE2MTI0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2U0ZmVjYWM4OTc5
NGJmZWM2NTIzMDVjOWE0MmY0Mzc5ZGVkNmZmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL8X2skgM+Z4eu/ovTpCZPVW0unN/vKsFR6e4z+O69/siAOt
wFb20xVvSpzjCUWlWQOq4TpCzb3RJY1Cpq9JNFwwikd1mQiP0N+V13Bs5IhxPhpm
4hVAXJhfY8InQBYbA0MAfBgnO3NGuSw7bk2js38ah8xt8/eWilGjrKGCWXroebIQ
W4UHkMUCkE6izZqA148CuQcq/PW+OGNWHB68/5Zgtv9pkehApbXoIIarwM5pl+RX
LsG6tvV3WM5v0wc9aGqVx7aHStd4LzGZ6Gm+QpJdc8xqVyFSarPsGIiHXvFfeVUL
iPU22rV1v84CdR2v6cCTfGuCcX17yg3kXmu3Lf8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTOT+ysiXlL/sZSMFyaQvQ3ne1v8jAfBgNVHSMEGDAWgBRt0umzpNeySzpq
oU8+2j8U+inHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JkTHBzNlRYc2tzNmFxRlBQdG9fRlBvcHgycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvY2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8x
L3prX3NySWw1U183R1VqQmNta0wwTjUzdGJfSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
Y2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8xL2JkTHBzNlRYc2tz
NmFxRlBQdG9fRlBvcHgycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBG15sDANBgkqhkiG9w0BAQsFAAOC
AQEACYaKV8TYT6GIs+LRN+dJA2MAlYQ59nMllRaRfjJBcuNDD/nJJ+KhBXkOsQsf
3TYHdtpJjPfzLCG1rXYNhEePbK+NwoaRqIV9/Mx5ysWzjASm1JO90+7g0NLfticm
i5MA4COsRo4jagohdbvTfO3H/CoWI4fx3c/tUOa0hmXQTXRchPx0m/zpbSwfP6L0
efkWGXsmtiLM2vu6TgFH2hRa3iDICE3SyYx4yys91UhkjjJ8TmKf0naL1xgo+JSI
Q6H/+RAUpYWgrP1yWbiAYEMnaTtGZSeh6Qp8seNXpYGMkYVBBEt3LKSECy9Ijobo
3l0ZPzAnDKYQ0ZlbqbcGJnvKgw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org