Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/zMyGOHmvQxlyfrs1OghC5yStoGo.roa
File: zMyGOHmvQxlyfrs1OghC5yStoGo.roa (raw, json)
Hash identifier: fkNNsjYwjGJdBk9EG576RfnY3qRh/g7R8d1quHUrIPY=
Subject key identifier: CC:CC:86:38:79:AF:43:19:72:7E:BB:35:3A:08:42:E7:24:AD:A0:6A
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: C07D1E
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/zMyGOHmvQxlyfrs1OghC5yStoGo.roa
Signing time: Wed 08 Jun 2022 08:53:02 +0000
ROA not before: Wed 08 Jun 2022 08:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20983
IP address blocks: 193.109.244.0/23 maxlen: 24
195.242.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12614942 (0xc07d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Jun 8 08:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cccc863879af4319727ebb353a0842e724ada06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:91:9f:1c:72:3e:9e:b8:f4:2a:f9:7c:87:
7c:89:13:cb:a4:c2:18:fd:a9:1d:4d:ee:7d:04:70:
1c:60:14:07:39:4f:58:1c:0e:16:c1:d2:9a:a4:09:
c8:31:b2:7f:70:09:d8:53:0a:a9:ff:88:4c:86:d0:
db:c1:b0:53:01:83:d6:2a:83:5e:1f:e3:89:a8:b5:
5d:f0:88:aa:99:a7:51:66:e7:13:8f:a9:d7:97:40:
c6:0d:ed:89:31:c1:60:8f:d9:80:e5:ad:31:e9:38:
c6:7c:ac:08:2a:cb:dc:a7:2f:dc:36:eb:28:eb:51:
37:61:76:00:bf:31:45:7d:a3:67:fa:d2:4a:3a:72:
53:a4:3a:af:b2:6a:59:70:61:df:b6:c4:07:45:5e:
a3:8f:a5:b3:f5:32:fb:98:43:f4:1b:6d:6b:6d:7a:
8d:c2:0e:c8:fe:37:3e:23:a4:cc:7c:53:1f:3a:91:
2a:56:a3:47:6d:99:3a:17:29:6a:c2:34:9d:ce:9a:
53:ee:fc:3a:9f:dd:30:4f:22:59:dc:ff:bc:c0:68:
60:7d:1e:57:fb:88:a1:48:07:cb:3d:48:f2:7a:80:
39:65:6c:58:ac:11:63:d0:bb:7b:ad:e6:bd:d7:72:
8a:89:67:b8:ee:91:f3:9c:a6:7b:57:57:69:f6:e3:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:86:38:79:AF:43:19:72:7E:BB:35:3A:08:42:E7:24:AD:A0:6A
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/zMyGOHmvQxlyfrs1OghC5yStoGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.244.0/23
195.242.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:44:60:e7:76:a8:18:9a:0b:21:45:1f:11:02:59:56:3f:c5:
4b:83:a4:9d:df:8d:c9:82:d3:bc:97:8e:5f:49:73:75:85:54:
41:fc:71:c8:a0:32:82:36:0b:69:1a:fd:e9:a5:4e:88:a6:3c:
8d:c6:f9:b2:2f:34:c6:89:92:0b:48:23:f2:ac:fe:f6:3a:12:
2e:52:b2:98:f4:22:2d:cf:90:b9:f8:f1:bf:9b:c3:3e:40:a2:
33:63:08:fe:80:5b:da:1b:81:55:96:75:46:42:0d:92:ec:04:
6f:7c:eb:3e:9b:fe:7f:2b:cd:c4:51:d4:de:f0:bc:28:fc:d3:
e3:12:f8:0b:30:40:0e:7f:24:22:d7:ba:01:88:0b:da:54:7d:
12:42:5a:21:77:e0:7e:8b:d4:0c:a6:5a:2a:2f:31:78:a5:a8:
af:d2:fc:17:bd:ac:c5:9a:61:f6:ea:82:06:2c:0c:a1:ad:d7:
49:2f:a1:83:2e:8a:d3:09:81:f6:a6:12:9d:e7:d4:9b:9e:ac:
d5:ce:31:9d:49:a5:56:b0:7c:c1:15:da:6d:3e:c3:ec:cc:f3:
fd:24:20:d2:91:cd:5e:c3:c5:b0:41:44:e1:af:53:f3:98:17:
a3:0a:c7:f9:50:79:6f:65:28:d4:f4:58:35:4d:0d:5a:cf:02:
80:6c:28:d2
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAMB9HjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjIzYjA2ZDYwZWMzZTc2YjQ5MjBiMmI2NDE0MWZhM2FmNmU1ZmJiMB4XDTIyMDYw
ODA4NTMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2NjYzg2Mzg3OWFm
NDMxOTcyN2ViYjM1M2EwODQyZTcyNGFkYTA2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL67kZ8ccj6euPQq+XyHfIkTy6TCGP2pHU3ufQRwHGAUBzlP
WBwOFsHSmqQJyDGyf3AJ2FMKqf+ITIbQ28GwUwGD1iqDXh/jiai1XfCIqpmnUWbn
E4+p15dAxg3tiTHBYI/ZgOWtMek4xnysCCrL3Kcv3DbrKOtRN2F2AL8xRX2jZ/rS
SjpyU6Q6r7JqWXBh37bEB0Veo4+ls/Uy+5hD9Btta216jcIOyP43PiOkzHxTHzqR
KlajR22ZOhcpasI0nc6aU+78Op/dME8iWdz/vMBoYH0eV/uIoUgHyz1I8nqAOWVs
WKwRY9C7e63mvddyiolnuO6R85yme1dXafbjGRMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTMzIY4ea9DGXJ+uzU6CELnJK2gajAfBgNVHSMEGDAWgBRLI7BtYOw+drSS
CytkFB+jr25fuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N5T3diV0RzUG5hMGtnc3JaQlFmbzY5dVg3cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjkvNWFhY2YzLWJiYzktNDNjNC04NmYwLTU0ZjZlNTJmNTQ3Yi8x
L3pNeUdPSG12UXhseWZyczFPZ2hDNXlTdG9Hby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkv
NWFhY2YzLWJiYzktNDNjNC04NmYwLTU0ZjZlNTJmNTQ3Yi8xL1N5T3diV0RzUG5h
MGtnc3JaQlFmbzY5dVg3cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAcFt9AMEAMPytzANBgkqhkiG9w0B
AQsFAAOCAQEALkRg53aoGJoLIUUfEQJZVj/FS4Oknd+NyYLTvJeOX0lzdYVUQfxx
yKAygjYLaRr96aVOiKY8jcb5si80xomSC0gj8qz+9joSLlKymPQiLc+Qufjxv5vD
PkCiM2MI/oBb2huBVZZ1RkINkuwEb3zrPpv+fyvNxFHU3vC8KPzT4xL4CzBADn8k
Ite6AYgL2lR9EkJaIXfgfovUDKZaKi8xeKWor9L8F72sxZph9uqCBiwMoa3XSS+h
gy6K0wmB9qYSnefUm56s1c4xnUmlVrB8wRXabT7D7Mzz/SQg0pHNXsPFsEFE4a9T
85gXowrH+VB5b2Uo1PRYNU0NWs8CgGwo0g==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:44 2025 by rpki-client