Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/_zy-hd_1CqLpUmql-Z7RtHBnPZQ.roa
File: _zy-hd_1CqLpUmql-Z7RtHBnPZQ.roa (raw, json)
Hash identifier: 6w7msx//uWNJpgAZ8QjaWdCRJ4Y3ZPToGA+wOzkF/yA=
Subject key identifier: FF:3C:BE:85:DF:F5:0A:A2:E9:52:6A:A5:F9:9E:D1:B4:70:67:3D:94
Certificate issuer: /CN=0dbcffabf5fabc8bcb04457c1ea6cc665f62740f
Certificate serial: 0BACBD44
Authority key identifier: 0D:BC:FF:AB:F5:FA:BC:8B:CB:04:45:7C:1E:A6:CC:66:5F:62:74:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dbz_q_X6vIvLBEV8HqbMZl9idA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/_zy-hd_1CqLpUmql-Z7RtHBnPZQ.roa
Signing time: Sat 01 Jan 2022 15:57:57 +0000
ROA not before: Sat 01 Jan 2022 15:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38895
IP address blocks: 176.32.64.0/19 maxlen: 24
176.34.0.0/19 maxlen: 24
176.34.32.0/19 maxlen: 24
46.51.216.0/21 maxlen: 24
46.137.192.0/19 maxlen: 24
46.51.224.0/19 maxlen: 24
46.137.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195870020 (0xbacbd44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dbcffabf5fabc8bcb04457c1ea6cc665f62740f
Validity
Not Before: Jan 1 15:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff3cbe85dff50aa2e9526aa5f99ed1b470673d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:3e:9c:c8:35:fe:a7:af:4a:17:22:2a:9b:
e8:52:16:13:9d:64:b7:a9:47:d0:1e:c2:f0:9c:99:
38:d9:c4:e1:72:64:17:bc:a5:3f:b9:d1:b9:df:b6:
99:ce:b4:23:14:15:46:5b:96:6f:d7:25:b3:a1:31:
72:67:bf:5a:db:dc:e2:e0:fb:3e:8f:2a:0c:ef:f2:
95:03:fb:47:2f:17:c1:36:7d:15:1b:1c:06:bb:f7:
6d:c3:e9:b8:76:52:36:55:75:06:b8:d0:07:c5:ef:
f7:f0:c0:8d:b5:23:4a:9c:eb:cd:fe:db:fb:9b:46:
65:aa:45:4a:8b:76:fd:f2:a5:df:c8:42:86:d2:09:
99:cc:2c:01:4c:64:5f:11:e0:ec:c2:29:56:1a:ca:
4f:07:1d:dd:00:74:f2:f1:ce:8c:b4:8c:df:53:7a:
98:15:f6:1c:4f:9f:38:3c:09:19:f8:3b:94:2b:c9:
47:8a:a1:c9:f9:e0:8f:93:70:c4:0d:64:d6:fb:44:
79:8c:6f:71:e0:82:d2:20:1f:12:96:21:42:d8:98:
46:42:0a:e6:0f:fa:8d:d9:4a:70:95:df:a4:ab:75:
2d:14:90:f4:fa:0a:57:c1:aa:b7:2d:5c:e0:93:ac:
ab:9e:2e:86:df:1b:bf:4b:16:82:6a:7d:77:38:69:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3C:BE:85:DF:F5:0A:A2:E9:52:6A:A5:F9:9E:D1:B4:70:67:3D:94
X509v3 Authority Key Identifier:
keyid:0D:BC:FF:AB:F5:FA:BC:8B:CB:04:45:7C:1E:A6:CC:66:5F:62:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dbz_q_X6vIvLBEV8HqbMZl9idA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/_zy-hd_1CqLpUmql-Z7RtHBnPZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/Dbz_q_X6vIvLBEV8HqbMZl9idA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.216.0-46.51.255.255
46.137.192.0/18
176.32.64.0/19
176.34.0.0/18
Signature Algorithm: sha256WithRSAEncryption
59:7f:e0:47:af:3c:e6:04:d2:ea:8a:f6:c0:ca:ff:8c:ef:15:
b0:8a:46:35:4e:ba:c0:93:d1:6c:a5:7c:a7:6b:33:29:4e:71:
53:3d:1f:6e:39:73:01:dc:38:aa:82:3a:60:01:c1:f8:f6:0b:
8b:31:03:7a:29:bd:f7:11:05:06:ca:ab:b7:9e:fa:97:ab:af:
99:1e:cf:9d:bb:48:f0:f7:78:aa:6c:28:a2:c9:a7:ef:87:b7:
aa:fe:89:ea:9a:9f:22:3a:c3:59:01:71:0e:9f:2a:a7:54:0a:
37:35:00:74:ed:58:49:43:33:9c:5b:f7:fa:f0:0e:00:80:c6:
7a:b9:6b:5e:de:44:c1:a1:a3:4b:4c:74:cd:e5:55:b8:fe:d8:
ac:cb:42:61:23:3c:ae:7c:cf:9e:44:1a:c6:34:72:ad:e1:ca:
09:ab:01:d4:ee:e3:99:fc:77:f9:51:d4:ba:7c:f5:fd:40:5b:
99:49:dc:bd:f5:55:31:ed:8f:bd:99:cc:4a:10:55:62:df:74:
f3:a6:d3:7a:f7:0f:47:26:5a:9d:6a:56:73:50:39:8b:df:37:
ec:ff:56:f3:aa:6f:49:6f:03:e7:7e:76:2f:51:4e:c6:2a:8c:
de:55:0a:f0:36:97:67:d8:d1:9c:70:f3:bf:5a:77:6d:72:df:
cd:13:d9:69
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEC6y9RDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZGJjZmZhYmY1ZmFiYzhiY2IwNDQ1N2MxZWE2Y2M2NjVmNjI3NDBmMB4XDTIyMDEw
MTE1NTc1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmYzY2JlODVkZmY1
MGFhMmU5NTI2YWE1Zjk5ZWQxYjQ3MDY3M2Q5NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ4MPpzINf6nr0oXIiqb6FIWE51kt6lH0B7C8JyZONnE4XJk
F7ylP7nRud+2mc60IxQVRluWb9cls6Excme/Wtvc4uD7Po8qDO/ylQP7Ry8XwTZ9
FRscBrv3bcPpuHZSNlV1BrjQB8Xv9/DAjbUjSpzrzf7b+5tGZapFSot2/fKl38hC
htIJmcwsAUxkXxHg7MIpVhrKTwcd3QB08vHOjLSM31N6mBX2HE+fODwJGfg7lCvJ
R4qhyfngj5NwxA1k1vtEeYxvceCC0iAfEpYhQtiYRkIK5g/6jdlKcJXfpKt1LRSQ
9PoKV8Gqty1c4JOsq54uht8bv0sWgmp9dzhpcyMCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBT/PL6F3/UKoulSaqX5ntG0cGc9lDAfBgNVHSMEGDAWgBQNvP+r9fq8i8sE
RXwepsxmX2J0DzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Riel9xX1g2dkl2TEJFVjhIcWJNWmw5aWRBOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTQvMWU2NTYxLTM5NWItNGJkZS1iY2QxLWMwMmQ1ODVjZmZjYS8x
L196eS1oZF8xQ3FMcFVtcWwtWjdSdEhCblBaUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQv
MWU2NTYxLTM5NWItNGJkZS1iY2QxLWMwMmQ1ODVjZmZjYS8xL0Riel9xX1g2dkl2
TEJFVjhIcWJNWmw5aWRBOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4
BggrBgEFBQcBBwEB/wQpMCcwJQQCAAEwHzALAwQDLjPYAwMCLjADBAYuicADBAWw
IEADBAawIgAwDQYJKoZIhvcNAQELBQADggEBAFl/4EevPOYE0uqK9sDK/4zvFbCK
RjVOusCT0WylfKdrMylOcVM9H245cwHcOKqCOmABwfj2C4sxA3opvfcRBQbKq7ee
+perr5kez527SPD3eKpsKKLJp++Ht6r+ieqanyI6w1kBcQ6fKqdUCjc1AHTtWElD
M5xb9/rwDgCAxnq5a17eRMGho0tMdM3lVbj+2KzLQmEjPK58z55EGsY0cq3hygmr
AdTu45n8d/lR1Lp89f1AW5lJ3L31VTHtj72ZzEoQVWLfdPOm03r3D0cmWp1qVnNQ
OYvfN+z/VvOqb0lvA+d+di9RTsYqjN5VCvA2l2fY0Zxw879ad21y380T2Wk=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:09:33 2025 by rpki-client