Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa
File: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (raw, json)
Hash identifier: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=
Subject key identifier: CF:33:76:16:0D:AD:C6:F8:B8:1E:92:BC:CA:CE:A5:92:93:79:38:3C
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 0194228E106C5302424B27723E7CB9B8DE20
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43050
IP address blocks: 91.194.50.0/23 maxlen: 23
91.215.124.0/22 maxlen: 22
176.119.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:10:6c:53:02:42:4b:27:72:3e:7c:b9:b8:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf3376160dadc6f8b81e92bccacea5929379383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:55:5d:c0:da:04:ea:35:56:c7:4f:1b:27:
d7:80:32:b5:db:37:2e:f6:72:7e:63:55:dc:61:a6:
1d:ac:84:a8:4a:4b:7c:9a:66:d2:c0:de:03:91:7d:
64:cb:cb:ab:18:54:00:e9:b5:69:9d:aa:c3:c3:fb:
9d:a7:c3:7c:9a:55:3b:fa:0f:1a:f8:bb:8a:9d:4a:
39:e2:e7:e9:e3:9e:93:17:bf:9d:7e:36:e7:a1:f6:
1f:69:97:0b:23:31:9d:7a:24:29:52:93:f9:23:a7:
5b:a0:c7:3d:bc:b6:19:e1:68:d3:6b:8c:96:da:d2:
c9:8e:8d:16:d0:6e:10:cf:2f:d3:5d:0b:58:05:91:
71:65:bd:2f:7b:6f:27:a0:b8:08:91:57:44:ac:81:
d2:6e:53:f9:a5:5a:fe:0f:f9:ba:53:11:f0:13:af:
34:f0:2d:57:99:1c:5f:f1:18:17:59:41:db:d5:7c:
5f:cb:10:fc:92:d8:ad:e2:d1:dd:4e:95:3b:db:23:
f2:f7:e7:b5:e7:c1:00:0e:87:de:5c:03:9a:56:7a:
60:7b:75:2a:3a:14:a4:0d:e6:fc:28:1e:c2:42:eb:
df:37:bc:20:64:b9:c6:cd:a1:e4:c3:5b:5b:94:66:
ce:e0:87:e8:93:7e:a9:60:23:7c:1a:a9:bd:a4:71:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:33:76:16:0D:AD:C6:F8:B8:1E:92:BC:CA:CE:A5:92:93:79:38:3C
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.50.0/23
91.215.124.0/22
176.119.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:d8:4a:90:97:73:be:54:9e:25:8d:98:df:18:52:0c:69:f9:
25:67:d1:47:7f:bf:4a:a8:22:3e:b6:24:cb:6d:fd:5a:8f:39:
09:81:41:03:14:f1:49:38:bf:b8:b4:ac:a5:1c:cb:04:70:4a:
87:b8:70:e7:cc:da:15:7c:c7:89:8e:42:35:98:83:d6:6d:bd:
a8:9c:f5:00:cd:b5:eb:ee:0d:ab:7e:57:ae:81:c1:2e:b6:86:
85:4d:e5:5b:f4:f9:a3:e2:2f:c4:bc:35:22:37:09:4a:c5:a8:
f6:69:49:5e:b8:b2:1f:60:21:16:ca:17:cf:8a:d1:5c:b1:6d:
8a:0f:b1:71:80:f6:5e:1a:90:5a:5c:07:39:5c:4a:2d:db:a7:
85:dc:6a:24:04:99:ff:37:42:a9:05:d7:4f:ff:05:bb:4f:8a:
3a:a7:a5:09:6b:15:e0:7d:c2:a4:b0:84:64:27:8e:24:d6:09:
35:a0:1e:a6:ec:46:2f:1c:f2:ce:9d:fc:8d:c4:c4:96:30:ed:
20:d8:dd:0a:4b:66:5a:42:35:f8:de:32:3e:a3:2a:34:25:f1:
0b:69:7d:9c:86:11:e0:3f:ec:38:ea:f2:90:bc:96:6c:25:e3:
05:2c:ff:7a:0f:83:4f:f6:10:26:40:85:15:65:a1:bb:a9:fe:
93:8b:19:5f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQijhBsUwJCSydyPny5uN4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTVmYmNiY2Y4OGQxYWQ5YjE5ZmM0MmM3YWExMWFkM2Qy
YTdlYTAwHhcNMjUwMTAxMTU0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjMzNzYxNjBkYWRjNmY4YjgxZTkyYmNjYWNlYTU5MjkzNzkzODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6xVXcDaBOo1VsdPGyfXgDK12zcu
9nJ+Y1XcYaYdrISoSkt8mmbSwN4DkX1ky8urGFQA6bVpnarDw/udp8N8mlU7+g8a
+LuKnUo54ufp456TF7+dfjbnofYfaZcLIzGdeiQpUpP5I6dboMc9vLYZ4WjTa4yW
2tLJjo0W0G4Qzy/TXQtYBZFxZb0ve28noLgIkVdErIHSblP5pVr+D/m6UxHwE680
8C1XmRxf8RgXWUHb1XxfyxD8ktit4tHdTpU72yPy9+e158EADofeXAOaVnpge3Uq
OhSkDeb8KB7CQuvfN7wgZLnGzaHkw1tblGbO4Ifok36pYCN8Gqm9pHHRtQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM8zdhYNrcb4uB6SvMrOpZKTeTg8MB8GA1UdIwQY
MBaAFCiV+8vPiNGtmxn8QseqEa09Kn6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTIt
NDk2NmIzY2ZjODdkLzEvenpOMkZnMnR4dmk0SHBLOHlzNmxrcE41T0R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTItNDk2NmIzY2ZjODdk
LzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW8IyAwQC
W9d8AwQDsHfoMA0GCSqGSIb3DQEBCwUAA4IBAQAf2EqQl3O+VJ4ljZjfGFIMafkl
Z9FHf79KqCI+tiTLbf1ajzkJgUEDFPFJOL+4tKylHMsEcEqHuHDnzNoVfMeJjkI1
mIPWbb2onPUAzbXr7g2rfleugcEutoaFTeVb9Pmj4i/EvDUiNwlKxaj2aUleuLIf
YCEWyhfPitFcsW2KD7FxgPZeGpBaXAc5XEot26eF3GokBJn/N0KpBddP/wW7T4o6
p6UJaxXgfcKksIRkJ44k1gk1oB6m7EYvHPLOnfyNxMSWMO0g2N0KS2ZaQjX43jI+
oyo0JfELaX2chhHgP+w46vKQvJZsJeMFLP96D4NP9hAmQIUVZaG7qf6Tixlf
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:26:56 2025 by rpki-client