Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/zY66R4PlYnOuPkmGqs8XTZ6eMd8.roa
File: zY66R4PlYnOuPkmGqs8XTZ6eMd8.roa (raw, json)
Hash identifier: enNu24b23wg1K1RIp6WfyJxooF13hp5aIKfR3aehppY=
Subject key identifier: CD:8E:BA:47:83:E5:62:73:AE:3E:49:86:AA:CF:17:4D:9E:9E:31:DF
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 0195C791B64E6BCAEE0557994104DDAACA40
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/zY66R4PlYnOuPkmGqs8XTZ6eMd8.roa
Signing time: Mon 24 Mar 2025 09:52:50 +0000
ROA not before: Mon 24 Mar 2025 09:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200484
IP address blocks: 1.179.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:91:b6:4e:6b:ca:ee:05:57:99:41:04:dd:aa:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Mar 24 09:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd8eba4783e56273ae3e4986aacf174d9e9e31df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:70:ce:36:4b:e1:87:f3:45:49:bd:da:fb:
83:67:2a:f7:8d:91:0a:b4:dd:49:22:6c:6d:34:f6:
34:cf:a5:ca:d6:ee:57:2b:71:b5:f1:36:40:bb:d0:
ff:b0:ef:16:ab:b9:b4:06:ee:44:69:88:40:b8:0b:
e4:67:e1:18:54:62:2f:82:b2:4a:73:26:47:90:d9:
13:7c:59:8d:4f:44:d8:7f:de:d9:7f:ab:53:46:e5:
24:d4:a6:f0:24:8b:ec:60:9e:df:d3:13:2c:60:2c:
0f:df:3c:7e:16:0f:d0:7a:be:5c:0c:e8:ff:32:84:
fd:31:41:06:b5:23:fe:1e:43:cc:df:86:15:46:94:
9a:13:d5:54:6e:a6:91:09:ce:56:95:30:7c:e5:1a:
ae:cd:66:46:b7:dd:bc:cc:ce:09:c5:cd:82:37:21:
2f:42:0d:8d:9e:ba:39:7e:2e:d9:90:8c:fe:71:f0:
46:95:03:c1:e0:03:c1:00:8d:09:ad:0c:03:4d:34:
30:2b:e1:62:06:ad:0a:e0:0b:5a:c2:e0:67:5e:42:
61:28:69:8f:29:ca:39:9c:c2:9b:9c:9d:e7:7d:b5:
75:a3:8a:f6:13:45:a0:ab:22:4b:b9:d5:08:96:5a:
1c:5f:d0:c9:d5:c2:ea:10:1d:0f:d9:80:49:31:b3:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8E:BA:47:83:E5:62:73:AE:3E:49:86:AA:CF:17:4D:9E:9E:31:DF
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/zY66R4PlYnOuPkmGqs8XTZ6eMd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.120.0/21
Signature Algorithm: sha256WithRSAEncryption
48:ce:eb:ab:82:e2:88:f9:b9:32:6e:e5:ef:e8:a5:9d:3c:ca:
4e:0f:94:10:63:2b:94:b7:cc:18:44:08:36:11:6b:bf:02:1e:
28:99:90:9d:2c:3a:87:62:9e:ba:49:78:20:c8:f0:ce:a4:d2:
5f:0e:b9:ce:38:fe:f7:03:33:01:c3:fa:f4:77:7e:41:b1:8e:
e8:bd:45:0c:98:4f:2b:47:6f:b6:90:13:92:28:b1:b1:a1:e4:
5d:c5:87:68:11:86:51:0e:3e:b0:37:06:06:b8:d9:a1:ae:3c:
c1:c3:94:64:08:aa:93:8d:c7:af:72:d6:5c:5a:79:88:af:d7:
20:f8:b4:73:de:c1:48:09:3b:71:eb:55:fe:5a:0e:7d:bf:e8:
2d:f3:6c:61:e0:eb:9b:8f:a9:da:9e:f4:62:ce:9e:54:8e:e8:
6d:de:d4:75:ef:d6:ec:15:a3:bf:c4:1f:cf:4a:4a:1d:49:66:
ce:9f:83:85:60:6a:0b:01:9d:e2:86:69:2e:9b:d6:f7:69:3b:
e3:a0:61:c5:2a:4e:d2:e2:9e:f7:01:7d:ab:be:fc:86:75:02:
82:67:55:07:d3:f9:0b:7a:ac:f1:c9:92:d2:13:f0:62:b4:79:
c8:27:71:56:e9:40:06:06:fe:05:fe:e1:a7:10:f3:43:0c:11:
0b:42:71:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXHkbZOa8ruBVeZQQTdqspAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZTM2ZTk4MDIxMjY0ZjVhODA3MDEwNjc4MGJlMjlkNDhh
MTZjNjcwHhcNMjUwMzI0MDk1MjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDhlYmE0NzgzZTU2MjczYWUzZTQ5ODZhYWNmMTc0ZDllOWUzMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomNwzjZL4YfzRUm92vuDZyr3jZEK
tN1JImxtNPY0z6XK1u5XK3G18TZAu9D/sO8Wq7m0Bu5EaYhAuAvkZ+EYVGIvgrJK
cyZHkNkTfFmNT0TYf97Zf6tTRuUk1KbwJIvsYJ7f0xMsYCwP3zx+Fg/Qer5cDOj/
MoT9MUEGtSP+HkPM34YVRpSaE9VUbqaRCc5WlTB85RquzWZGt928zM4Jxc2CNyEv
Qg2Nnro5fi7ZkIz+cfBGlQPB4APBAI0JrQwDTTQwK+FiBq0K4AtawuBnXkJhKGmP
Kco5nMKbnJ3nfbV1o4r2E0WgqyJLudUIllocX9DJ1cLqEB0P2YBJMbMTjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM2OukeD5WJzrj5JhqrPF02enjHfMB8GA1UdIwQY
MBaAFN3jbpgCEmT1qAcBBngL4p1IoWxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NmFlZTEtZTIyMC00ZTIyLTljYjUt
OGZlM2EwZjYxNDM3LzEvelk2NlI0UGxZbk91UGttR3FzOFhUWjZlTWQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NmFlZTEtZTIyMC00ZTIyLTljYjUtOGZlM2EwZjYxNDM3
LzEvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDAbN4MA0G
CSqGSIb3DQEBCwUAA4IBAQBIzuurguKI+bkybuXv6KWdPMpOD5QQYyuUt8wYRAg2
EWu/Ah4omZCdLDqHYp66SXggyPDOpNJfDrnOOP73AzMBw/r0d35BsY7ovUUMmE8r
R2+2kBOSKLGxoeRdxYdoEYZRDj6wNwYGuNmhrjzBw5RkCKqTjcevctZcWnmIr9cg
+LRz3sFICTtx61X+Wg59v+gt82xh4Oubj6nanvRizp5Ujuht3tR179bsFaO/xB/P
SkodSWbOn4OFYGoLAZ3ihmkum9b3aTvjoGHFKk7S4p73AX2rvvyGdQKCZ1UH0/kL
eqzxyZLSE/BitHnIJ3FW6UAGBv4F/uGnEPNDDBELQnF3
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:34 2025 by rpki-client