Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/zGSlecf-Mb2Lr0ELUZBt4X9sJFY.roa
File: zGSlecf-Mb2Lr0ELUZBt4X9sJFY.roa (raw, json)
Hash identifier: Sjr+lts/NYtFDCyPAuJtXvgiw8roi7CT9iWlsop++Lk=
Subject key identifier: CC:64:A5:79:C7:FE:31:BD:8B:AF:41:0B:51:90:6D:E1:7F:6C:24:56
Certificate issuer: /CN=b2cd4f9229095bdf31aa786a1e55b9977f8e5b05
Certificate serial: 1510C629
Authority key identifier: B2:CD:4F:92:29:09:5B:DF:31:AA:78:6A:1E:55:B9:97:7F:8E:5B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ss1PkikJW98xqnhqHlW5l3-OWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/zGSlecf-Mb2Lr0ELUZBt4X9sJFY.roa
Signing time: Sat 01 Jan 2022 07:52:29 +0000
ROA not before: Sat 01 Jan 2022 07:52:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206894
IP address blocks: 185.102.44.0/22 maxlen: 22
2a00:d220::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353420841 (0x1510c629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd4f9229095bdf31aa786a1e55b9977f8e5b05
Validity
Not Before: Jan 1 07:52:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc64a579c7fe31bd8baf410b51906de17f6c2456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:56:30:a5:be:c5:6c:92:10:62:09:0a:5b:
0f:1f:14:ae:96:a4:53:7b:1e:3c:44:eb:20:bd:0f:
4d:bb:71:86:2c:ef:be:6e:02:71:b1:f0:9b:09:dc:
1d:98:02:bd:43:48:02:bf:7b:61:73:c3:65:f2:44:
f1:fd:2d:0c:7d:22:7c:e4:c0:74:8d:48:7f:5f:ff:
f1:77:ed:14:4c:d8:91:c8:83:c6:6c:74:ac:63:40:
ec:89:a6:a9:60:29:fa:4c:51:ec:a3:58:02:70:a8:
c6:71:1a:f1:aa:46:6f:bf:c2:c1:51:89:04:be:73:
6a:40:e1:6b:92:89:68:d1:de:17:60:01:41:12:a6:
02:0d:63:66:7b:73:86:0c:a6:fa:3c:96:25:6f:bf:
2d:e4:9b:f6:14:29:fa:29:0c:a5:1e:5b:02:55:5b:
5a:7c:61:9d:15:63:18:4c:28:b9:7e:de:63:b7:20:
5f:0d:09:8a:d3:d7:8a:a6:41:ca:b3:0f:83:e1:ae:
b8:c9:32:b4:a1:8c:34:d8:ef:58:d8:17:4d:b0:e2:
58:2a:94:33:c2:b1:b0:98:0c:d1:0f:f4:f3:c8:ff:
aa:fc:e7:89:4b:98:cc:da:46:ba:61:0c:61:b6:27:
9c:6b:ed:5a:8c:0f:76:43:26:2c:e8:ae:b9:85:95:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:64:A5:79:C7:FE:31:BD:8B:AF:41:0B:51:90:6D:E1:7F:6C:24:56
X509v3 Authority Key Identifier:
keyid:B2:CD:4F:92:29:09:5B:DF:31:AA:78:6A:1E:55:B9:97:7F:8E:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss1PkikJW98xqnhqHlW5l3-OWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/zGSlecf-Mb2Lr0ELUZBt4X9sJFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/ss1PkikJW98xqnhqHlW5l3-OWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.44.0/22
IPv6:
2a00:d220::/32
Signature Algorithm: sha256WithRSAEncryption
18:8f:ea:3b:5c:19:6f:63:50:44:1d:fa:06:fb:fc:d4:94:23:
3d:79:0b:b4:fe:7c:27:02:de:7b:90:d6:2a:56:07:a0:d7:b0:
0f:c7:b3:1b:3b:3a:8b:df:b8:a8:9d:ee:cf:2a:e0:bd:59:eb:
8f:d1:e8:f1:ae:ae:46:43:9c:d5:3d:b0:de:db:5e:62:46:b4:
d7:5c:b1:8c:88:c8:52:14:88:33:dc:64:9d:7b:e3:d4:db:d9:
c0:f0:15:4e:cd:a4:fd:36:dc:aa:60:07:d7:88:14:bc:4d:86:
aa:7d:af:5a:bd:de:8b:72:21:1b:f3:ce:42:41:34:22:88:ad:
62:13:ad:e7:e3:31:a1:4f:58:06:d2:78:0c:e5:5d:21:32:3f:
c9:a1:47:08:6f:73:bb:f0:de:ac:2c:e2:ee:c7:b1:fe:df:99:
e5:6b:71:1b:4b:f2:78:03:d9:44:06:7e:b2:8b:a5:b8:a2:d9:
aa:63:69:b8:50:66:68:ae:48:fa:ef:bf:e2:8e:a5:ff:52:9d:
5c:5a:6e:50:41:fd:0f:a3:50:eb:67:bc:fa:60:ec:1f:73:99:
6e:0b:9c:44:04:78:03:0e:9e:e1:a6:0b:4c:c5:b9:f4:55:cf:
85:8a:91:2e:f3:25:28:25:a1:47:61:dd:9c:6f:1a:0e:1b:d7:
96:32:ff:5c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEFRDGKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MmNkNGY5MjI5MDk1YmRmMzFhYTc4NmExZTU1Yjk5NzdmOGU1YjA1MB4XDTIyMDEw
MTA3NTIyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2M2NGE1NzljN2Zl
MzFiZDhiYWY0MTBiNTE5MDZkZTE3ZjZjMjQ1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKoiVjClvsVskhBiCQpbDx8UrpakU3sePETrIL0PTbtxhizv
vm4CcbHwmwncHZgCvUNIAr97YXPDZfJE8f0tDH0ifOTAdI1If1//8XftFEzYkciD
xmx0rGNA7ImmqWAp+kxR7KNYAnCoxnEa8apGb7/CwVGJBL5zakDha5KJaNHeF2AB
QRKmAg1jZntzhgym+jyWJW+/LeSb9hQp+ikMpR5bAlVbWnxhnRVjGEwouX7eY7cg
Xw0JitPXiqZByrMPg+GuuMkytKGMNNjvWNgXTbDiWCqUM8KxsJgM0Q/088j/qvzn
iUuYzNpGumEMYbYnnGvtWowPdkMmLOiuuYWV5V8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTMZKV5x/4xvYuvQQtRkG3hf2wkVjAfBgNVHSMEGDAWgBSyzU+SKQlb3zGq
eGoeVbmXf45bBTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NzMVBraWtKVzk4eHFuaHFIbFc1bDMtT1d3VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvMTVmYWRkLWM2MGYtNDg3Yy05NzVlLWIwNTcxZDY5MjFiNC8x
L3pHU2xlY2YtTWIyTHIwRUxVWkJ0NFg5c0pGWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
MTVmYWRkLWM2MGYtNDg3Yy05NzVlLWIwNTcxZDY5MjFiNC8xL3NzMVBraWtKVzk4
eHFuaHFIbFc1bDMtT1d3VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlmLDANBAIAAjAHAwUAKgDSIDAN
BgkqhkiG9w0BAQsFAAOCAQEAGI/qO1wZb2NQRB36Bvv81JQjPXkLtP58JwLee5DW
KlYHoNewD8ezGzs6i9+4qJ3uzyrgvVnrj9Ho8a6uRkOc1T2w3tteYka011yxjIjI
UhSIM9xknXvj1NvZwPAVTs2k/TbcqmAH14gUvE2Gqn2vWr3ei3IhG/POQkE0Ioit
YhOt5+MxoU9YBtJ4DOVdITI/yaFHCG9zu/DerCzi7sex/t+Z5WtxG0vyeAPZRAZ+
souluKLZqmNpuFBmaK5I+u+/4o6l/1KdXFpuUEH9D6NQ62e8+mDsH3OZbgucRAR4
Aw6e4aYLTMW59FXPhYqRLvMlKCWhR2HdnG8aDhvXljL/XA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:39 2025 by rpki-client