Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zgKN12dHSSvT8-LVGJxcedndHa0.roa
File: zgKN12dHSSvT8-LVGJxcedndHa0.roa (raw, json)
Hash identifier: l3+rlJ87sSd/kOfO2ILTFMXmLKGAH7pMx+g7yQchhQM=
Subject key identifier: CE:02:8D:D7:67:47:49:2B:D3:F3:E2:D5:18:9C:5C:79:D9:DD:1D:AD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D72DCECE9B14A50C8DE3A2E6EAFE07
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zgKN12dHSSvT8-LVGJxcedndHa0.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214576
IP address blocks: 185.40.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2d:ce:ce:9b:14:a5:0c:8d:e3:a2:e6:ea:fe:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce028dd76747492bd3f3e2d5189c5c79d9dd1dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:78:7f:64:18:a4:93:8a:5f:d4:42:2d:32:96:
a9:ac:79:05:a5:1e:b9:8f:a1:43:87:a5:e9:ce:07:
90:89:bd:5e:02:ca:fd:eb:81:d8:5a:aa:d7:ea:c8:
4e:c2:71:61:f5:b3:d6:5f:4a:d8:ff:05:0f:74:e7:
8a:05:c3:1b:c2:54:a5:13:aa:87:86:d0:29:f9:d5:
bd:60:0e:12:bb:e5:d4:d6:b5:f8:76:c7:a3:f3:68:
48:d0:ad:48:d3:7b:22:5a:99:a5:bc:cb:02:dd:b0:
78:87:30:1b:d6:98:2c:67:04:a3:08:70:17:4b:09:
f1:e1:c9:fb:61:70:e8:66:6f:a9:c8:ec:22:9f:97:
aa:01:70:71:99:47:23:ad:0a:4d:e4:f9:4f:2e:9e:
5b:b7:c1:ef:8b:a8:d4:58:50:41:91:0c:ad:c7:ff:
27:b4:a4:46:ca:d0:a3:27:e2:c0:f0:83:9c:a6:1e:
a1:30:23:02:08:f1:bd:7a:b5:94:8f:51:f0:40:50:
04:40:39:d3:03:43:b1:b4:ca:88:e9:31:5c:64:00:
0c:ff:24:b4:bf:be:f3:de:0f:37:af:4e:d3:f3:7d:
29:97:bd:31:13:9b:79:35:52:44:31:5b:b5:41:7b:
cd:ec:3d:b4:18:89:09:84:a0:f5:16:8d:bb:3a:6a:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:8D:D7:67:47:49:2B:D3:F3:E2:D5:18:9C:5C:79:D9:DD:1D:AD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zgKN12dHSSvT8-LVGJxcedndHa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.4.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:79:a9:39:23:e7:b0:f2:90:51:02:f8:78:b7:5d:ff:6f:29:
74:78:a5:09:46:38:22:cc:f5:52:6b:a2:71:64:27:c9:10:d3:
22:01:3f:bf:10:65:0e:05:26:a2:d6:f7:40:e4:11:6e:f1:23:
05:09:85:c8:74:1f:0a:da:6d:20:42:db:b6:04:cd:d7:65:8f:
0a:79:8d:01:3e:0f:86:df:86:9f:81:88:e2:a4:c7:bb:b9:a2:
b7:0b:06:ad:09:07:b9:5b:24:dd:86:7c:c1:1d:47:61:cb:a3:
44:fc:96:3c:11:68:aa:ef:6b:59:7e:fb:bb:e8:87:19:77:bf:
19:ef:8b:82:46:4c:cf:1b:85:8e:8f:3c:f7:49:ce:b8:29:11:
e2:0a:2b:2e:3e:6e:40:f3:1f:a7:2b:80:05:7f:de:2b:52:1e:
ce:ee:06:03:26:2b:27:30:20:4f:f4:af:76:39:68:9c:ae:d5:
db:67:bd:ca:0f:a5:80:4e:b7:72:6c:c0:05:80:5f:26:a1:47:
05:58:a7:bc:e2:3d:cb:2a:5e:3c:96:b9:eb:bf:20:4c:20:63:
02:5e:38:d6:7f:a1:71:a8:dc:93:f1:00:d4:0d:27:d4:f2:e6:
db:f4:05:3c:63:16:fc:88:d9:4e:6e:6c:0f:d8:1d:82:67:53:
b1:63:0c:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1y3OzpsUpQyN46Lm6v4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTAyOGRkNzY3NDc0OTJiZDNmM2UyZDUxODljNWM3OWQ5ZGQxZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHh/ZBikk4pf1EItMpaprHkFpR65
j6FDh6XpzgeQib1eAsr964HYWqrX6shOwnFh9bPWX0rY/wUPdOeKBcMbwlSlE6qH
htAp+dW9YA4Su+XU1rX4dsej82hI0K1I03siWpmlvMsC3bB4hzAb1pgsZwSjCHAX
Swnx4cn7YXDoZm+pyOwin5eqAXBxmUcjrQpN5PlPLp5bt8Hvi6jUWFBBkQytx/8n
tKRGytCjJ+LA8IOcph6hMCMCCPG9erWUj1HwQFAEQDnTA0OxtMqI6TFcZAAM/yS0
v77z3g83r07T830pl70xE5t5NVJEMVu1QXvN7D20GIkJhKD1Fo27Omp6aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM4CjddnR0kr0/Pi1RicXHnZ3R2tMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvemdLTjEyZEhTU3ZUOC1MVkdKeGNlZG5kSGEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSgEMA0G
CSqGSIb3DQEBCwUAA4IBAQA7eak5I+ew8pBRAvh4t13/byl0eKUJRjgizPVSa6Jx
ZCfJENMiAT+/EGUOBSai1vdA5BFu8SMFCYXIdB8K2m0gQtu2BM3XZY8KeY0BPg+G
34afgYjipMe7uaK3CwatCQe5WyTdhnzBHUdhy6NE/JY8EWiq72tZfvu76IcZd78Z
74uCRkzPG4WOjzz3Sc64KRHiCisuPm5A8x+nK4AFf94rUh7O7gYDJisnMCBP9K92
OWicrtXbZ73KD6WATrdybMAFgF8moUcFWKe84j3LKl48lrnrvyBMIGMCXjjWf6Fx
qNyT8QDUDSfU8ubb9AU8Yxb8iNlObmwP2B2CZ1OxYwwC
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:32 2025 by rpki-client