Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/z502xT8fldDMfCFjsr579OmkJRA.roa
File: z502xT8fldDMfCFjsr579OmkJRA.roa (raw, json)
Hash identifier: EU0iWdFWw8u5nhpEFFB+AuzgnFPgEI28RkBPO3DgVu4=
Subject key identifier: CF:9D:36:C5:3F:1F:95:D0:CC:7C:21:63:B2:BE:7B:F4:E9:A4:25:10
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E205E4E86DE8761A8601AE40B78B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/z502xT8fldDMfCFjsr579OmkJRA.roa
Signing time: Sun 01 Jan 2023 19:35:23 +0000
ROA not before: Sun 01 Jan 2023 19:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24913
IP address blocks: 213.172.3.0/24 maxlen: 24
217.195.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e2:05:e4:e8:6d:e8:76:1a:86:01:ae:40:b7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf9d36c53f1f95d0cc7c2163b2be7bf4e9a42510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:aa:9d:5f:8c:aa:6b:55:3a:7a:f3:be:bf:
12:48:b9:f3:dc:35:4c:90:3b:93:17:99:63:9a:f1:
de:14:4f:dc:12:e7:28:88:dc:8e:84:84:f6:d2:b3:
f6:39:1c:84:88:a7:56:67:ee:a1:7a:bb:1b:99:6a:
fa:d2:6b:ab:9a:b6:37:e0:0e:68:ae:a2:95:19:c0:
42:a8:c3:14:ab:cf:8c:6b:4a:1a:d8:bf:4a:9e:3e:
e4:35:04:ff:cd:35:8e:93:75:c3:ec:d8:e9:a2:20:
cf:ea:ec:7e:30:f5:cd:df:45:51:b6:85:be:0e:d4:
6a:fa:60:1d:7f:fd:8e:7c:35:e0:ee:da:69:23:dc:
d4:87:42:fa:72:39:e9:5a:4e:25:e0:f3:04:9c:45:
37:93:a6:b2:fb:61:0c:de:4e:90:4e:8d:dc:f3:04:
00:2e:fa:91:c1:20:28:8f:c3:71:0f:32:2f:4b:bf:
4c:8f:ef:2e:83:9a:73:e4:53:0b:e4:07:73:62:b3:
94:3e:b5:c2:75:13:54:79:b4:e6:a4:f2:ae:53:3c:
68:4e:4b:86:89:cb:e0:e5:45:d1:42:4b:9c:3c:41:
36:d6:ca:08:d3:ed:c6:a4:69:c0:42:ba:a6:65:95:
ef:87:58:f3:d0:a2:e8:ac:c5:06:0d:be:88:05:b5:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9D:36:C5:3F:1F:95:D0:CC:7C:21:63:B2:BE:7B:F4:E9:A4:25:10
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/z502xT8fldDMfCFjsr579OmkJRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.172.3.0/24
217.195.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d1:07:b0:7a:d6:8c:91:94:d9:70:57:20:5d:27:87:0c:17:
c1:08:54:49:6e:18:06:b1:df:ad:55:46:eb:2d:88:b4:ce:78:
62:e4:55:f2:86:e1:94:ca:cb:23:78:22:ff:fa:68:54:f6:0b:
aa:68:62:e6:41:38:69:17:b6:91:81:09:03:04:ef:a2:2d:ba:
b5:85:1a:98:57:95:24:8e:90:d2:eb:92:cb:16:bd:40:f5:43:
0f:11:cb:8d:89:51:a4:ee:38:d4:e0:91:3d:c6:3e:87:23:15:
32:20:c3:06:50:de:8f:71:6e:11:e6:ea:05:1a:f9:19:df:2c:
d1:f1:72:ae:f7:fb:3a:d1:9d:b8:7a:73:5a:cd:7f:80:db:1c:
0e:dc:ec:81:aa:51:fe:90:1c:24:bb:b6:97:78:f3:5e:84:1c:
4f:e5:d4:23:3b:79:d7:ec:10:7e:b0:99:ed:b0:8e:1f:12:5d:
66:64:a1:34:16:3e:13:11:f2:98:89:1f:c5:0e:79:a3:b7:36:
94:8f:10:6c:cf:3c:7c:67:57:ac:2d:da:04:f5:61:13:c4:68:
81:dc:d3:0a:bd:4e:1f:c0:9e:d0:ec:55:89:22:40:92:e6:c1:
2c:de:9b:fe:8b:0b:19:d9:cf:44:9a:12:bb:70:d8:bc:b7:4b:
44:12:c9:39
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVu1OIF5Oht6HYahgGuQLeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjMwMTAxMTkzNTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjlkMzZjNTNmMWY5NWQwY2M3YzIxNjNiMmJlN2JmNGU5YTQyNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5aqnV+MqmtVOnrzvr8SSLnz3DVM
kDuTF5ljmvHeFE/cEucoiNyOhIT20rP2ORyEiKdWZ+6hersbmWr60murmrY34A5o
rqKVGcBCqMMUq8+Ma0oa2L9Knj7kNQT/zTWOk3XD7NjpoiDP6ux+MPXN30VRtoW+
DtRq+mAdf/2OfDXg7tppI9zUh0L6cjnpWk4l4PMEnEU3k6ay+2EM3k6QTo3c8wQA
LvqRwSAoj8NxDzIvS79Mj+8ug5pz5FML5AdzYrOUPrXCdRNUebTmpPKuUzxoTkuG
icvg5UXRQkucPEE21soI0+3GpGnAQrqmZZXvh1jz0KLorMUGDb6IBbUfRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM+dNsU/H5XQzHwhY7K+e/TppCUQMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvejUwMnhUOGZsZERNZkNGanNyNTc5T21rSlJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1awDAwQA
2cNWMA0GCSqGSIb3DQEBCwUAA4IBAQBa0QewetaMkZTZcFcgXSeHDBfBCFRJbhgG
sd+tVUbrLYi0znhi5FXyhuGUyssjeCL/+mhU9guqaGLmQThpF7aRgQkDBO+iLbq1
hRqYV5UkjpDS65LLFr1A9UMPEcuNiVGk7jjU4JE9xj6HIxUyIMMGUN6PcW4R5uoF
GvkZ3yzR8XKu9/s60Z24enNazX+A2xwO3OyBqlH+kBwku7aXePNehBxP5dQjO3nX
7BB+sJntsI4fEl1mZKE0Fj4TEfKYiR/FDnmjtzaUjxBszzx8Z1esLdoE9WETxGiB
3NMKvU4fwJ7Q7FWJIkCS5sEs3pv+iwsZ2c9EmhK7cNi8t0tEEsk5
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:26:01 2025 by rpki-client