Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ZIBj51rvzdxNBOQu45s1TsXZfA4.roa
File: ZIBj51rvzdxNBOQu45s1TsXZfA4.roa (raw, json)
Hash identifier: Mlg1sMaq1AzoqpdQv0YafCX4XwaQte0j2dMM5uFDd64=
Subject key identifier: 64:80:63:E7:5A:EF:CD:DC:4D:04:E4:2E:E3:9B:35:4E:C5:D9:7C:0E
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C46E0F73BBD6D9735F50599014096
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ZIBj51rvzdxNBOQu45s1TsXZfA4.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39650
IP address blocks: 185.125.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:46:e0:f7:3b:bd:6d:97:35:f5:05:99:01:40:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=648063e75aefcddc4d04e42ee39b354ec5d97c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:49:a9:37:9f:ef:fd:7f:74:c3:e1:5f:69:
c7:6b:82:d5:e8:84:8d:c4:88:66:f4:d6:68:df:49:
b5:c3:2b:a6:35:84:0a:2f:70:44:2a:f5:76:77:fd:
8e:31:65:f0:68:6e:f3:72:4a:12:dc:f1:2b:79:0e:
e1:13:a7:d6:0b:9e:ed:8a:8b:f0:6a:c5:3d:82:01:
7b:dc:54:88:73:a3:44:1b:9e:16:83:5b:ec:96:2e:
68:96:85:29:30:36:90:fc:aa:78:bf:5a:60:29:39:
7b:7d:c2:96:d4:93:3c:a9:5a:8f:49:75:3a:ee:2d:
bc:f8:20:0d:ca:68:41:59:f2:82:4f:eb:1a:5f:24:
36:7d:04:65:e6:fe:c4:f8:26:f4:12:a9:31:82:c6:
86:4d:83:e0:32:43:5d:b7:61:1a:16:d3:53:19:72:
06:90:3d:e4:4b:32:1b:1d:e9:39:8f:26:e7:24:18:
35:ed:3e:4f:4c:4d:6e:28:a0:39:5d:cc:f9:97:88:
3c:26:a3:21:b5:f0:14:dc:f3:8a:5f:19:c0:1b:1e:
a1:7c:5e:fc:ae:ea:e6:9e:a2:41:06:f7:72:d5:0a:
64:0c:44:c6:39:0e:b9:04:f0:f8:7e:c3:6d:e6:4e:
d7:1b:0c:83:b5:7a:95:2e:1d:ee:fe:75:12:b4:59:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:63:E7:5A:EF:CD:DC:4D:04:E4:2E:E3:9B:35:4E:C5:D9:7C:0E
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ZIBj51rvzdxNBOQu45s1TsXZfA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.244.0/22
Signature Algorithm: sha256WithRSAEncryption
27:c9:5f:9e:4f:bd:f6:94:e0:c7:c4:e5:94:48:08:d3:15:a5:
80:bc:f5:f6:bb:7d:19:56:eb:39:9e:f2:d4:36:92:e9:f2:32:
a3:52:e6:67:89:a1:2a:a8:73:dc:85:b1:65:b0:6d:6a:cf:d2:
6b:96:df:41:ee:6d:a2:dd:2c:7a:50:9c:f0:7f:4b:ab:dc:0c:
cf:79:9e:de:84:0f:ee:6d:16:68:5c:c6:14:d8:a7:73:1e:25:
fc:8b:9c:ab:cd:e3:3f:be:24:02:15:5c:be:60:36:ee:41:fe:
9d:52:3f:33:4b:11:1b:2d:f1:19:4c:d7:09:f9:28:15:d8:e5:
e4:45:68:8d:fd:89:33:29:31:c0:ce:42:24:25:36:68:b5:fd:
a9:e6:e6:c8:c8:3a:c1:c0:c1:76:84:e9:f4:a7:6c:3a:10:97:
4f:fb:39:36:81:cc:d5:e9:d7:70:04:b4:99:c4:2d:c6:56:22:
ff:f0:f0:5d:72:1b:4c:df:40:eb:9f:ea:68:c4:e0:b4:6f:83:
ea:0e:0a:4f:b0:ae:37:d2:62:3d:98:df:8c:19:78:e8:81:c9:
2f:e1:d7:d2:c3:2d:bb:6c:59:c0:63:92:5d:ca:56:cc:e7:55:
66:d1:9d:d7:a9:92:10:01:f0:ed:ae:a2:c3:ae:c3:07:80:f4:
23:60:04:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjEbg9zu9bZc19QWZAUCWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjUwMTAxMDE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDgwNjNlNzVhZWZjZGRjNGQwNGU0MmVlMzliMzU0ZWM1ZDk3YzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyapJqTef7/1/dMPhX2nHa4LV6ISN
xIhm9NZo30m1wyumNYQKL3BEKvV2d/2OMWXwaG7zckoS3PEreQ7hE6fWC57tiovw
asU9ggF73FSIc6NEG54Wg1vsli5oloUpMDaQ/Kp4v1pgKTl7fcKW1JM8qVqPSXU6
7i28+CANymhBWfKCT+saXyQ2fQRl5v7E+Cb0EqkxgsaGTYPgMkNdt2EaFtNTGXIG
kD3kSzIbHek5jybnJBg17T5PTE1uKKA5Xcz5l4g8JqMhtfAU3POKXxnAGx6hfF78
rurmnqJBBvdy1QpkDETGOQ65BPD4fsNt5k7XGwyDtXqVLh3u/nUStFlCSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGSAY+da783cTQTkLuObNU7F2XwOMB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvWklCajUxcnZ6ZHhOQk9RdTQ1czFUc1haZkE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuX30MA0G
CSqGSIb3DQEBCwUAA4IBAQAnyV+eT732lODHxOWUSAjTFaWAvPX2u30ZVus5nvLU
NpLp8jKjUuZniaEqqHPchbFlsG1qz9Jrlt9B7m2i3Sx6UJzwf0ur3AzPeZ7ehA/u
bRZoXMYU2KdzHiX8i5yrzeM/viQCFVy+YDbuQf6dUj8zSxEbLfEZTNcJ+SgV2OXk
RWiN/YkzKTHAzkIkJTZotf2p5ubIyDrBwMF2hOn0p2w6EJdP+zk2gczV6ddwBLSZ
xC3GViL/8PBdchtM30Drn+poxOC0b4PqDgpPsK430mI9mN+MGXjogckv4dfSwy27
bFnAY5JdylbM51Vm0Z3XqZIQAfDtrqLDrsMHgPQjYARf
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:52:54 2025 by rpki-client