Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zvIJF20RFJ-p-jgWR9ZNjd70nZc.roa
File: zvIJF20RFJ-p-jgWR9ZNjd70nZc.roa (raw, json)
Hash identifier: 97lDSU2MlPINX/4cF716EspEAKempsx5nIxNYu28f4Y=
Subject key identifier: CE:F2:09:17:6D:11:14:9F:A9:FA:38:16:47:D6:4D:8D:DE:F4:9D:97
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483458DDD97203034064ECC9A1FDAF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zvIJF20RFJ-p-jgWR9ZNjd70nZc.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1221
IP address blocks: 192.71.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:34:58:dd:d9:72:03:03:40:64:ec:c9:a1:fd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cef209176d11149fa9fa381647d64d8ddef49d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:5a:27:31:aa:8f:1a:cc:ea:45:dc:06:bf:
c5:26:13:08:e1:4b:67:52:6a:67:14:5c:27:75:1c:
76:91:4d:2a:af:41:26:c0:0c:f3:74:cd:12:d7:be:
79:b2:08:dd:87:f0:85:8e:c8:bb:a4:02:f5:29:ab:
a1:9f:ef:d4:8d:90:3f:75:ad:a6:c4:b7:58:d3:3d:
6a:56:8b:27:0a:54:fc:35:9f:69:65:e7:ea:ab:5b:
fd:84:ec:aa:b0:c0:81:87:ec:36:81:5c:4c:c7:43:
0e:41:0e:63:a9:00:87:8b:61:22:c4:e2:8c:10:9c:
24:5e:c8:17:66:74:cc:fb:0d:16:53:11:08:c8:05:
3e:f6:76:c6:23:bc:56:90:7d:f5:5d:04:c3:43:8f:
c5:ea:47:4f:77:0f:25:f5:1f:7d:95:14:0e:a9:be:
93:65:e0:5f:d5:ad:a9:3c:5f:8a:23:7c:4d:36:f6:
3c:17:7f:0e:ae:e6:7d:b4:9c:02:4d:e1:63:44:c6:
a8:13:be:8f:a7:3c:51:76:1b:64:ea:21:27:7f:cb:
fe:ea:00:cf:48:61:bb:13:4a:af:99:40:95:e0:0e:
85:52:4b:93:c3:4d:75:22:27:84:65:81:32:e1:ad:
2f:7c:37:32:38:75:97:c0:75:d4:92:6c:b6:e0:61:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F2:09:17:6D:11:14:9F:A9:FA:38:16:47:D6:4D:8D:DE:F4:9D:97
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zvIJF20RFJ-p-jgWR9ZNjd70nZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.161.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c2:e4:ea:cf:fd:d3:c1:5c:93:5f:d0:bd:e5:ed:36:85:bf:
0f:28:e6:03:02:80:5e:2a:1d:3c:a2:84:9b:31:bb:6a:1f:83:
74:a9:d7:8c:9c:8f:0b:6f:ca:9e:ec:15:6e:08:63:d0:31:3f:
40:8b:41:e5:82:2b:87:b1:66:a1:6b:fc:f6:67:9d:6a:9f:17:
0a:c4:ed:1f:9a:e5:f1:3e:71:94:45:78:9a:53:29:94:e7:06:
db:f9:d6:2b:0b:ea:d9:a1:c2:3e:d4:9f:5f:87:fb:60:49:67:
aa:c2:87:7b:8d:ea:54:b6:20:11:37:46:6f:42:78:68:4e:80:
f9:7c:76:cb:ce:f4:5f:22:a2:0f:0e:df:da:0e:34:51:86:19:
6b:50:3e:b8:2a:7e:18:90:36:fe:4a:8e:d6:ef:76:04:cf:e1:
a8:bf:a9:d8:51:ef:2a:98:28:ea:6c:c4:05:30:7d:b6:6f:a0:
33:b6:a4:b7:62:1f:63:2c:b3:6d:6c:1c:aa:68:a7:84:9e:86:
fa:b7:77:d8:aa:e6:1e:83:30:ec:b0:9d:a1:42:3c:06:16:71:
2a:df:0d:e7:78:a8:e3:d0:f5:ba:7a:0c:bc:1a:27:9f:ca:cf:
ba:da:bb:f1:0d:ae:8b:ee:7c:f3:34:87:e6:25:14:53:76:4d:
e0:a9:e8:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSDRY3dlyAwNAZOzJof2vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWYyMDkxNzZkMTExNDlmYTlmYTM4MTY0N2Q2NGQ4ZGRlZjQ5ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l9aJzGqjxrM6kXcBr/FJhMI4Utn
UmpnFFwndRx2kU0qr0EmwAzzdM0S1755sgjdh/CFjsi7pAL1Kauhn+/UjZA/da2m
xLdY0z1qVosnClT8NZ9pZefqq1v9hOyqsMCBh+w2gVxMx0MOQQ5jqQCHi2EixOKM
EJwkXsgXZnTM+w0WUxEIyAU+9nbGI7xWkH31XQTDQ4/F6kdPdw8l9R99lRQOqb6T
ZeBf1a2pPF+KI3xNNvY8F38OruZ9tJwCTeFjRMaoE76PpzxRdhtk6iEnf8v+6gDP
SGG7E0qvmUCV4A6FUkuTw011IieEZYEy4a0vfDcyOHWXwHXUkmy24GFpXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7yCRdtERSfqfo4FkfWTY3e9J2XMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvenZJSkYyMFJGSi1wLWpnV1I5Wk5qZDcwblpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEehMA0G
CSqGSIb3DQEBCwUAA4IBAQCvwuTqz/3TwVyTX9C95e02hb8PKOYDAoBeKh08ooSb
MbtqH4N0qdeMnI8Lb8qe7BVuCGPQMT9Ai0HlgiuHsWaha/z2Z51qnxcKxO0fmuXx
PnGURXiaUymU5wbb+dYrC+rZocI+1J9fh/tgSWeqwod7jepUtiARN0ZvQnhoToD5
fHbLzvRfIqIPDt/aDjRRhhlrUD64Kn4YkDb+So7W73YEz+Gov6nYUe8qmCjqbMQF
MH22b6AztqS3Yh9jLLNtbByqaKeEnob6t3fYquYegzDssJ2hQjwGFnEq3w3neKjj
0PW6egy8Giefys+62rvxDa6L7nzzNIfmJRRTdk3gqeg/
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:44 2025 by rpki-client