Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Z7-4BJiEbZpYttk0b6qy5YP1vsw.roa
File: Z7-4BJiEbZpYttk0b6qy5YP1vsw.roa (raw, json)
Hash identifier: rxq0LwW2UWA5Y6KtoLPTOHGqDYqBvMJ1burQ1bx3svA=
Subject key identifier: 67:BF:B8:04:98:84:6D:9A:58:B6:D9:34:6F:AA:B2:E5:83:F5:BE:CC
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B6695E4C7C049CE6C15CB47971B0
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Z7-4BJiEbZpYttk0b6qy5YP1vsw.roa
Signing time: Thu 09 Jan 2025 09:28:21 +0000
ROA not before: Thu 09 Jan 2025 09:28:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61996
IP address blocks: 91.148.136.0/24 maxlen: 24
91.148.137.0/24 maxlen: 24
91.148.138.0/24 maxlen: 24
91.148.139.0/24 maxlen: 24
91.148.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b6:69:5e:4c:7c:04:9c:e6:c1:5c:b4:79:71:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67bfb80498846d9a58b6d9346faab2e583f5becc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:3a:36:4c:fe:1c:59:1d:9a:76:42:fa:2b:
3b:dd:e4:fa:42:b5:58:72:77:33:1a:15:9d:75:b3:
ca:28:f3:86:b9:ba:97:76:e7:25:f3:54:e9:d0:e4:
a1:68:51:0e:79:e1:7d:6c:35:5a:91:e5:35:24:d3:
89:8d:03:c9:b4:b4:c0:14:22:10:c2:6e:de:5b:d1:
7b:56:02:83:ba:4a:f6:2e:8f:18:a4:5a:63:28:13:
57:9f:d7:21:da:89:b2:61:76:f8:01:8d:b5:c1:85:
84:49:65:bb:80:98:0a:87:0b:7a:98:cc:e4:e1:0a:
63:0f:02:6f:b3:3a:2b:44:37:42:b9:2f:d4:7b:22:
ab:25:4d:5c:a0:9c:d3:14:58:ac:c0:11:0a:fb:26:
37:20:b0:de:b4:bf:ec:94:77:2b:bb:bf:29:2c:5b:
31:6f:88:58:a3:1a:06:1a:b9:1b:d8:7d:8a:1f:98:
a3:48:b6:ea:01:11:2d:ac:c9:47:10:16:23:62:dc:
fc:5c:9a:1f:f6:c7:0e:41:91:e9:8e:76:95:a1:87:
14:18:2d:7c:75:c1:8f:78:92:27:26:0a:c9:91:33:
2f:d1:08:1c:3a:bc:33:05:59:02:79:b7:24:f9:17:
4c:17:ac:9f:20:b6:e5:65:aa:38:db:57:bd:b5:77:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:B8:04:98:84:6D:9A:58:B6:D9:34:6F:AA:B2:E5:83:F5:BE:CC
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Z7-4BJiEbZpYttk0b6qy5YP1vsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.136.0/22
91.148.161.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7c:77:84:e7:d2:1c:93:14:b8:9a:9e:f7:a0:2d:b6:54:50:
79:9d:12:e5:93:47:a7:c8:a6:a3:89:34:63:12:fe:2f:48:9b:
a2:af:99:94:32:03:c1:9d:ec:e5:dc:3f:a1:a0:79:3f:69:ca:
91:c0:42:69:52:0f:74:88:67:45:f5:ca:9e:16:37:f4:46:b3:
f6:2c:22:2a:c4:41:9f:44:41:e7:52:b6:16:7c:ae:68:7d:61:
e8:81:0a:74:d3:46:1b:c4:a6:64:62:dd:41:4d:51:3f:3f:b2:
59:0e:44:d8:8e:68:76:38:3c:ec:10:b0:78:8c:89:1e:00:ab:
93:97:53:4a:a6:24:d2:55:f4:b8:a3:29:f5:57:e1:22:41:56:
ab:b6:2b:5e:f4:6f:f0:36:80:b6:b7:96:a7:7f:af:df:bf:43:
e4:1b:f3:a1:38:b8:22:69:08:fe:f2:cc:39:3a:ec:c3:e7:0f:
87:89:ee:ae:da:71:79:6c:31:51:82:8e:66:e4:7f:16:a2:11:
e7:f6:81:f3:6f:f7:2a:c8:b6:7e:0a:4b:d1:50:64:e0:1a:7b:
6e:48:b9:ad:67:6e:87:65:c7:c2:9c:c9:fe:b2:48:d5:1f:73:
76:73:fc:fe:4e:bc:bf:ea:50:83:d5:df:04:bb:e7:11:16:37:
fb:e5:dc:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRKZLZpXkx8BJzmwVy0eXGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwMTA5MDkyODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2JmYjgwNDk4ODQ2ZDlhNThiNmQ5MzQ2ZmFhYjJlNTgzZjViZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp986Nkz+HFkdmnZC+is73eT6QrVY
cnczGhWddbPKKPOGubqXducl81Tp0OShaFEOeeF9bDVakeU1JNOJjQPJtLTAFCIQ
wm7eW9F7VgKDukr2Lo8YpFpjKBNXn9ch2omyYXb4AY21wYWESWW7gJgKhwt6mMzk
4QpjDwJvszorRDdCuS/UeyKrJU1coJzTFFiswBEK+yY3ILDetL/slHcru78pLFsx
b4hYoxoGGrkb2H2KH5ijSLbqAREtrMlHEBYjYtz8XJof9scOQZHpjnaVoYcUGC18
dcGPeJInJgrJkTMv0QgcOrwzBVkCebck+RdMF6yfILblZao421e9tXdTYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGe/uASYhG2aWLbZNG+qsuWD9b7MMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvWjctNEJKaUViWnBZdHRrMGI2cXk1WVAxdnN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW5SIAwQA
W5ShMA0GCSqGSIb3DQEBCwUAA4IBAQCBfHeE59IckxS4mp73oC22VFB5nRLlk0en
yKajiTRjEv4vSJuir5mUMgPBnezl3D+hoHk/acqRwEJpUg90iGdF9cqeFjf0RrP2
LCIqxEGfREHnUrYWfK5ofWHogQp000YbxKZkYt1BTVE/P7JZDkTYjmh2ODzsELB4
jIkeAKuTl1NKpiTSVfS4oyn1V+EiQVartite9G/wNoC2t5anf6/fv0PkG/OhOLgi
aQj+8sw5OuzD5w+Hie6u2nF5bDFRgo5m5H8WohHn9oHzb/cqyLZ+CkvRUGTgGntu
SLmtZ26HZcfCnMn+skjVH3N2c/z+Try/6lCD1d8Eu+cRFjf75dw6
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:37 2025 by rpki-client