Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095be7-cf74-4744-a690-b9596f862e68/1/zeWbr1-0zcV_1c2xD_OwwA_vh9w.roa
File: zeWbr1-0zcV_1c2xD_OwwA_vh9w.roa (raw, json)
Hash identifier: GJQVFhvcTmhAqEbBRhUmmnYxNJjKOhmpuuiLBmzzEgE=
Subject key identifier: CD:E5:9B:AF:5F:B4:CD:C5:7F:D5:CD:B1:0F:F3:B0:C0:0F:EF:87:DC
Certificate issuer: /CN=5c421560c791dca28921f23fca2e628c6b237c81
Certificate serial: 08166957
Authority key identifier: 5C:42:15:60:C7:91:DC:A2:89:21:F2:3F:CA:2E:62:8C:6B:23:7C:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEIVYMeR3KKJIfI_yi5ijGsjfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095be7-cf74-4744-a690-b9596f862e68/1/zeWbr1-0zcV_1c2xD_OwwA_vh9w.roa
Signing time: Sat 01 Jan 2022 11:05:01 +0000
ROA not before: Sat 01 Jan 2022 11:05:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200428
IP address blocks: 185.229.208.0/22 maxlen: 22
2a0d:ce00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135686487 (0x8166957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c421560c791dca28921f23fca2e628c6b237c81
Validity
Not Before: Jan 1 11:05:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cde59baf5fb4cdc57fd5cdb10ff3b0c00fef87dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:60:67:1a:54:ee:2c:54:25:3c:4b:38:28:
40:3a:de:14:d3:7f:23:4e:e3:9f:10:6b:53:3e:e1:
99:d8:19:cc:bc:35:8d:df:3d:47:b6:d4:84:94:3d:
c3:82:2a:26:dd:d2:04:b8:45:c2:ba:f2:3c:50:2a:
cd:da:ad:e4:4e:d4:b8:b5:3a:a1:01:b6:0e:00:13:
3e:c4:3f:c9:15:85:b5:4a:ad:2c:60:c3:5a:53:d4:
ef:f2:a1:58:6f:54:b8:0f:8a:bd:c1:d3:2f:e2:45:
26:e4:3d:f4:71:a3:29:21:46:00:c8:dd:e0:8c:11:
32:69:a4:bd:2c:00:73:86:a1:3f:e5:e9:5f:06:8a:
93:41:80:12:d2:f2:c1:99:02:55:b5:e1:46:38:2f:
cb:12:2f:ec:79:65:cf:56:15:c7:82:fa:95:4c:82:
a1:46:78:cd:f8:d8:49:9e:0d:08:c8:22:7c:70:85:
07:9e:83:80:9a:e6:d3:0d:20:2b:14:98:9f:ca:4f:
5f:8e:4e:71:14:f4:73:3c:1a:1e:75:9d:8d:66:85:
19:41:31:10:ce:2f:9e:fe:3a:2e:bd:88:a3:c0:b5:
0e:c4:d6:cc:21:0f:67:b7:b8:b0:72:a6:19:2c:b9:
8a:66:9b:76:cf:e8:bc:55:3e:f6:e9:6b:61:60:d7:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E5:9B:AF:5F:B4:CD:C5:7F:D5:CD:B1:0F:F3:B0:C0:0F:EF:87:DC
X509v3 Authority Key Identifier:
keyid:5C:42:15:60:C7:91:DC:A2:89:21:F2:3F:CA:2E:62:8C:6B:23:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEIVYMeR3KKJIfI_yi5ijGsjfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095be7-cf74-4744-a690-b9596f862e68/1/zeWbr1-0zcV_1c2xD_OwwA_vh9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095be7-cf74-4744-a690-b9596f862e68/1/XEIVYMeR3KKJIfI_yi5ijGsjfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.208.0/22
IPv6:
2a0d:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:ce:c4:cb:4e:74:75:51:f0:8e:77:37:98:bf:89:28:87:a1:
b7:82:fc:af:e9:48:91:31:30:6b:9d:b1:12:d0:02:48:29:68:
9a:ba:c3:06:91:b8:4f:42:fb:53:4c:c9:70:bd:7d:54:e8:c0:
e4:37:10:f8:10:84:3a:d1:68:c0:e1:b5:67:17:33:65:2b:7c:
1a:d8:af:ab:d5:a7:bc:aa:b2:95:44:80:a3:0d:ba:60:2f:59:
52:7a:fd:57:10:4b:f6:66:78:8e:90:42:b5:21:4a:ef:0f:36:
e2:ff:a4:0d:ea:74:fb:0a:65:1e:a6:94:56:d5:9e:4e:54:05:
9c:da:34:80:6a:18:80:85:a9:50:c2:cc:0d:21:f9:6b:e7:4e:
aa:c0:72:92:c7:89:44:11:7d:07:dd:9f:e1:7a:c7:dc:1c:1c:
34:cd:44:14:3e:c6:ed:1a:af:2b:23:d5:94:df:1e:c4:66:9c:
22:7b:d4:92:fd:a1:3a:67:54:4a:79:c1:0d:2b:63:41:b9:b5:
20:03:4e:bd:6e:a0:a6:07:e9:fd:c4:36:ed:e8:42:3e:ad:c2:
55:91:17:89:c4:30:35:e9:19:5a:69:3f:14:c8:48:e0:d2:ba:
00:cb:db:29:8d:36:a3:b7:02:b5:d7:56:bf:66:e2:27:40:6e:
c7:0a:63:4a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECBZpVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YzQyMTU2MGM3OTFkY2EyODkyMWYyM2ZjYTJlNjI4YzZiMjM3YzgxMB4XDTIyMDEw
MTExMDUwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2RlNTliYWY1ZmI0
Y2RjNTdmZDVjZGIxMGZmM2IwYzAwZmVmODdkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMsqYGcaVO4sVCU8SzgoQDreFNN/I07jnxBrUz7hmdgZzLw1
jd89R7bUhJQ9w4IqJt3SBLhFwrryPFAqzdqt5E7UuLU6oQG2DgATPsQ/yRWFtUqt
LGDDWlPU7/KhWG9UuA+KvcHTL+JFJuQ99HGjKSFGAMjd4IwRMmmkvSwAc4ahP+Xp
XwaKk0GAEtLywZkCVbXhRjgvyxIv7Hllz1YVx4L6lUyCoUZ4zfjYSZ4NCMgifHCF
B56DgJrm0w0gKxSYn8pPX45OcRT0czwaHnWdjWaFGUExEM4vnv46Lr2Io8C1DsTW
zCEPZ7e4sHKmGSy5imabds/ovFU+9ulrYWDXQ28CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTN5ZuvX7TNxX/VzbEP87DAD++H3DAfBgNVHSMEGDAWgBRcQhVgx5Hcookh
8j/KLmKMayN8gTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hFSVZZTWVSM0tLSklmSV95aTVpakdzamZJRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvMDk1YmU3LWNmNzQtNDc0NC1hNjkwLWI5NTk2Zjg2MmU2OC8x
L3plV2JyMS0wemNWXzFjMnhEX093d0Ffdmg5dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
MDk1YmU3LWNmNzQtNDc0NC1hNjkwLWI5NTk2Zjg2MmU2OC8xL1hFSVZZTWVSM0tL
SklmSV95aTVpakdzamZJRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArnl0DANBAIAAjAHAwUDKg3OADAN
BgkqhkiG9w0BAQsFAAOCAQEADM7Ey050dVHwjnc3mL+JKIeht4L8r+lIkTEwa52x
EtACSClomrrDBpG4T0L7U0zJcL19VOjA5DcQ+BCEOtFowOG1ZxczZSt8Gtivq9Wn
vKqylUSAow26YC9ZUnr9VxBL9mZ4jpBCtSFK7w824v+kDep0+wplHqaUVtWeTlQF
nNo0gGoYgIWpUMLMDSH5a+dOqsBykseJRBF9B92f4XrH3BwcNM1EFD7G7RqvKyPV
lN8exGacInvUkv2hOmdUSnnBDStjQbm1IANOvW6gpgfp/cQ27ehCPq3CVZEXicQw
NekZWmk/FMhI4NK6AMvbKY02o7cCtddWv2biJ0BuxwpjSg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org