Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/zdObFdZtAZgDZJQ4dHcHMs88rLs.roa
File: zdObFdZtAZgDZJQ4dHcHMs88rLs.roa (raw, json)
Hash identifier: Wdk7R/450Y1+GjHqWIw+JXB60ajJFz3NKzZb7NE6bs4=
Subject key identifier: CD:D3:9B:15:D6:6D:01:98:03:64:94:38:74:77:07:32:CF:3C:AC:BB
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 1793FC
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/zdObFdZtAZgDZJQ4dHcHMs88rLs.roa
Signing time: Sat 29 Jan 2022 09:54:36 +0000
ROA not before: Sat 29 Jan 2022 09:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51302
IP address blocks: 185.88.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545212 (0x1793fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 29 09:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdd39b15d66d01980364943874770732cf3cacbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:b5:fb:1b:f6:48:a5:a5:60:2c:30:67:c4:
ae:1c:1c:a8:38:cf:94:e7:6d:b1:69:5d:76:ba:d8:
86:20:82:78:82:47:49:68:e7:30:b5:2b:7a:fd:18:
3d:4f:a5:1f:27:ad:a7:75:3a:60:2d:d6:8e:e8:1d:
4c:6a:17:87:10:72:e6:d5:2b:b7:c7:7d:0b:b4:82:
2f:6c:52:78:49:f0:e3:55:cc:bc:cd:e1:a4:0a:11:
d8:23:c4:39:2d:cb:bf:6e:a3:38:45:67:65:a9:61:
8b:c2:96:d1:af:85:e3:a0:66:49:d5:94:e5:89:bd:
37:94:f7:e6:79:1b:6d:21:46:ee:02:f6:97:fe:09:
76:94:5d:0f:76:05:4a:b3:55:b1:0c:db:13:ed:a9:
db:50:ff:79:88:9b:7f:1b:b1:f3:c4:5f:33:21:e3:
de:0a:2f:f0:e8:c9:3b:78:60:99:ca:d0:bc:f2:0c:
cd:07:ea:25:f7:af:51:a6:92:e5:94:6b:58:ab:1b:
40:42:6e:89:a3:6d:e9:48:52:ce:d7:8c:9a:78:0c:
71:5b:fb:df:ac:15:aa:1f:87:a8:07:39:95:14:9c:
8b:c9:13:18:ca:c6:bb:18:ac:1b:aa:29:3a:89:6e:
5b:20:08:ab:46:f7:32:12:1a:36:b9:47:74:37:1d:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:9B:15:D6:6D:01:98:03:64:94:38:74:77:07:32:CF:3C:AC:BB
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/zdObFdZtAZgDZJQ4dHcHMs88rLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2f:b2:de:bc:43:c9:d8:f6:a4:2b:04:5f:81:9d:11:fc:dd:
b0:5e:32:d0:4f:e4:e1:8e:b2:d5:8e:65:c4:1e:5d:5c:22:6d:
a8:7b:e2:a2:8e:02:e8:e5:e5:c8:1b:8f:72:8a:a0:44:86:3e:
55:33:68:0e:af:d8:3b:12:40:a8:b6:2c:36:e9:5b:19:a8:b9:
c9:e5:b8:78:3c:c8:fa:ed:bd:21:ec:cb:14:d9:8a:d7:c0:4e:
96:54:08:da:17:0f:31:0a:c9:b7:d5:48:2f:1f:b7:f5:b8:86:
7d:a4:1e:b4:b6:c5:ed:00:63:ba:c5:12:a2:00:f5:17:ad:2d:
e7:f6:5f:aa:02:21:5d:f5:ff:e7:f9:ed:bf:a6:a9:3c:4a:a9:
41:d0:70:6e:6c:bc:c3:ef:70:a7:bf:a2:4a:c3:04:68:14:33:
74:75:af:da:d5:19:3b:85:df:f0:7d:30:14:b7:d1:38:c6:79:
49:59:03:8b:93:cb:fd:18:ec:01:f4:bd:ec:33:38:88:51:4e:
39:1f:6b:60:31:34:4c:33:5f:60:16:1f:bf:e5:fb:3b:7b:02:
26:56:df:17:a5:af:2d:41:6e:ab:8a:30:3b:e7:1a:31:04:c8:
27:c0:4f:3c:d4:d6:54:79:5e:ee:fe:f6:7f:29:49:85:28:2c:
22:41:f7:5c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDF5P8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
ZWIzYjNiNTc5YzkwYjRiOTk2YTdmZTQwZjIwNTAzOTEzYTI1Y2YwHhcNMjIwMTI5
MDk1NDM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjZGQzOWIxNWQ2NmQw
MTk4MDM2NDk0Mzg3NDc3MDczMmNmM2NhY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvnO1+xv2SKWlYCwwZ8SuHByoOM+U522xaV12utiGIIJ4gkdJ
aOcwtSt6/Rg9T6UfJ62ndTpgLdaO6B1MaheHEHLm1Su3x30LtIIvbFJ4SfDjVcy8
zeGkChHYI8Q5Lcu/bqM4RWdlqWGLwpbRr4XjoGZJ1ZTlib03lPfmeRttIUbuAvaX
/gl2lF0PdgVKs1WxDNsT7anbUP95iJt/G7HzxF8zIePeCi/w6Mk7eGCZytC88gzN
B+ol969RppLllGtYqxtAQm6Jo23pSFLO14yaeAxxW/vfrBWqH4eoBzmVFJyLyRMY
ysa7GKwbqik6iW5bIAirRvcyEho2uUd0Nx0TcQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFM3TmxXWbQGYA2SUOHR3BzLPPKy7MB8GA1UdIwQYMBaAFEbrOztXnJC0uZan
/kDyBQOROiXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
UnVzN08xZWNrTFM1bHFmLVFQSUZBNUU2SmM4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lNC9hNmFkOWYtOGQ2OS00NmVhLWJkN2MtMzJiMTUwZjhlNjFmLzEv
emRPYkZkWnRBWmdEWkpRNGRIY0hNczg4ckxzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9h
NmFkOWYtOGQ2OS00NmVhLWJkN2MtMzJiMTUwZjhlNjFmLzEvUnVzN08xZWNrTFM1
bHFmLVFQSUZBNUU2SmM4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuViBMA0GCSqGSIb3DQEBCwUAA4IB
AQA+L7LevEPJ2PakKwRfgZ0R/N2wXjLQT+ThjrLVjmXEHl1cIm2oe+KijgLo5eXI
G49yiqBEhj5VM2gOr9g7EkCotiw26VsZqLnJ5bh4PMj67b0h7MsU2YrXwE6WVAja
Fw8xCsm31UgvH7f1uIZ9pB60tsXtAGO6xRKiAPUXrS3n9l+qAiFd9f/n+e2/pqk8
SqlB0HBubLzD73Cnv6JKwwRoFDN0da/a1Rk7hd/wfTAUt9E4xnlJWQOLk8v9GOwB
9L3sMziIUU45H2tgMTRMM19gFh+/5fs7ewImVt8Xpa8tQW6rijA75xoxBMgnwE88
1NZUeV7u/vZ/KUmFKCwiQfdc
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:02 2025 by rpki-client