Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/ZFLE7kSOcN4M5zYAEi7Ye0XQrrk.roa
File: ZFLE7kSOcN4M5zYAEi7Ye0XQrrk.roa (raw, json)
Hash identifier: ZjQ08tBd2zQMGiPA0vddMTGrCWRHkIJjKJJ8vz5OSN8=
Subject key identifier: 64:52:C4:EE:44:8E:70:DE:0C:E7:36:00:12:2E:D8:7B:45:D0:AE:B9
Certificate issuer: /CN=f427ae173b84af39a10ebbd07dd63c2d5ce8fdc6
Certificate serial: 01263301
Authority key identifier: F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CeuFzuErzmhDrvQfdY8LVzo_cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/ZFLE7kSOcN4M5zYAEi7Ye0XQrrk.roa
Signing time: Mon 31 Jan 2022 12:15:31 +0000
ROA not before: Mon 31 Jan 2022 12:15:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 193.25.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19280641 (0x1263301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f427ae173b84af39a10ebbd07dd63c2d5ce8fdc6
Validity
Not Before: Jan 31 12:15:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6452c4ee448e70de0ce73600122ed87b45d0aeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:4c:b6:59:36:7c:34:01:72:b1:0e:d4:db:
16:39:32:91:6e:be:af:02:c3:f9:e8:8b:20:ae:c4:
b8:5a:d4:b0:69:a5:18:65:9c:a5:30:b0:20:91:6f:
1b:7d:e9:b6:db:e9:8e:ee:d7:c9:0c:44:12:e0:b2:
83:2c:71:cb:1d:7c:1b:7a:11:96:cf:2c:20:2c:2d:
75:75:30:8a:b3:45:e4:c6:68:04:57:d6:ff:6a:17:
06:f6:38:19:e0:e0:7c:5d:b9:41:4e:2a:09:43:3c:
08:d7:46:2e:28:dd:78:c2:60:19:d2:88:04:59:f8:
ed:22:d9:c4:8c:4c:09:e9:14:9b:e2:40:84:72:90:
8b:ec:76:dc:14:69:7f:c1:b1:ab:c3:d3:3d:54:0e:
52:78:60:bb:82:14:9b:1e:40:04:d3:93:0f:80:22:
40:d7:cd:8f:2a:08:ce:95:53:1e:12:b5:84:9b:2f:
ed:2f:9e:41:22:86:fc:e0:11:49:ea:7b:02:5d:34:
bd:7a:10:7f:ea:99:9e:25:37:e4:79:e4:f7:c0:ad:
af:8e:72:33:91:a6:65:71:20:24:db:02:2f:b5:01:
12:98:f2:85:29:b7:2d:e5:83:37:c1:cf:bd:11:03:
ff:1d:38:6b:2f:ff:fb:a1:5e:74:c8:b4:a8:98:b2:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:52:C4:EE:44:8E:70:DE:0C:E7:36:00:12:2E:D8:7B:45:D0:AE:B9
X509v3 Authority Key Identifier:
keyid:F4:27:AE:17:3B:84:AF:39:A1:0E:BB:D0:7D:D6:3C:2D:5C:E8:FD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CeuFzuErzmhDrvQfdY8LVzo_cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/ZFLE7kSOcN4M5zYAEi7Ye0XQrrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/509e11-da92-4b72-94b6-12cba15c4c29/1/9CeuFzuErzmhDrvQfdY8LVzo_cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.207.0/24
Signature Algorithm: sha256WithRSAEncryption
39:61:c1:90:f2:86:ab:ce:55:c7:bf:c1:a3:62:db:1e:70:59:
30:1f:e7:68:c0:fa:88:6c:d7:f6:33:66:84:58:98:f8:ac:cb:
e8:ce:7d:f9:e8:1e:45:ed:6b:37:12:5d:b6:51:85:b1:37:4b:
a0:3a:e2:3e:8c:eb:66:7e:66:5b:3d:74:90:fc:f6:7a:79:ea:
a9:24:c0:1f:a1:e4:f2:3d:da:21:17:ee:bc:80:d3:d4:18:45:
45:72:fc:5a:e3:77:c8:dd:eb:1e:d2:27:13:32:71:2a:7d:d4:
c0:c2:26:26:65:2e:e3:e2:d8:a3:a2:2d:64:7e:9e:a3:e3:f8:
cb:20:6a:48:96:ff:ad:b6:be:3b:4e:99:b2:ac:e2:53:9c:8c:
8b:78:1d:cd:bb:e2:a2:5c:cc:ed:c6:d7:f9:91:62:18:eb:27:
95:8b:ef:5d:7c:8e:d5:25:d7:75:5e:ec:ef:6d:98:7f:df:5d:
04:03:b3:24:87:78:b2:11:b1:e4:bd:61:7f:de:04:be:39:74:
a9:94:36:11:86:8f:0f:10:1d:1b:7f:8c:78:a6:99:58:f9:b7:
4a:63:9d:9a:10:2b:2e:da:f5:0c:9b:cd:5c:e1:8b:e1:39:ec:
ac:d3:3a:84:26:fa:9c:8c:74:70:44:8e:81:75:07:02:2c:bf:
7c:c9:3b:e2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASYzATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NDI3YWUxNzNiODRhZjM5YTEwZWJiZDA3ZGQ2M2MyZDVjZThmZGM2MB4XDTIyMDEz
MTEyMTUzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjQ1MmM0ZWU0NDhl
NzBkZTBjZTczNjAwMTIyZWQ4N2I0NWQwYWViOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJz/TLZZNnw0AXKxDtTbFjkykW6+rwLD+eiLIK7EuFrUsGml
GGWcpTCwIJFvG33pttvpju7XyQxEEuCygyxxyx18G3oRls8sICwtdXUwirNF5MZo
BFfW/2oXBvY4GeDgfF25QU4qCUM8CNdGLijdeMJgGdKIBFn47SLZxIxMCekUm+JA
hHKQi+x23BRpf8Gxq8PTPVQOUnhgu4IUmx5ABNOTD4AiQNfNjyoIzpVTHhK1hJsv
7S+eQSKG/OARSep7Al00vXoQf+qZniU35Hnk98Ctr45yM5GmZXEgJNsCL7UBEpjy
hSm3LeWDN8HPvRED/x04ay//+6FedMi0qJiy8Z8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRkUsTuRI5w3gznNgASLth7RdCuuTAfBgNVHSMEGDAWgBT0J64XO4SvOaEO
u9B91jwtXOj9xjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlDZXVGenVFcnptaERydlFmZFk4TFZ6b19jWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2IvNTA5ZTExLWRhOTItNGI3Mi05NGI2LTEyY2JhMTVjNGMyOS8x
L1pGTEU3a1NPY040TTV6WUFFaTdZZTBYUXJyay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Iv
NTA5ZTExLWRhOTItNGI3Mi05NGI2LTEyY2JhMTVjNGMyOS8xLzlDZXVGenVFcnpt
aERydlFmZFk4TFZ6b19jWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEZzzANBgkqhkiG9w0BAQsFAAOC
AQEAOWHBkPKGq85Vx7/Bo2LbHnBZMB/naMD6iGzX9jNmhFiY+KzL6M59+egeRe1r
NxJdtlGFsTdLoDriPozrZn5mWz10kPz2ennqqSTAH6Hk8j3aIRfuvIDT1BhFRXL8
WuN3yN3rHtInEzJxKn3UwMImJmUu4+LYo6ItZH6eo+P4yyBqSJb/rba+O06Zsqzi
U5yMi3gdzbviolzM7cbX+ZFiGOsnlYvvXXyO1SXXdV7s722Yf99dBAOzJId4shGx
5L1hf94Evjl0qZQ2EYaPDxAdG3+MeKaZWPm3SmOdmhArLtr1DJvNXOGL4TnsrNM6
hCb6nIx0cESOgXUHAiy/fMk74g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:51 2023 by rpki-client on console-ams.rpki-client.org