Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/Zc10HX1foB49pMgA50Z_9jpZwkI.roa
File: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (raw, json)
Hash identifier: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=
Subject key identifier: 65:CD:74:1D:7D:5F:A0:1E:3D:A4:C8:00:E7:46:7F:F6:3A:59:C2:42
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 0194236A2DD600145DEA091413A08A2981EA
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/Zc10HX1foB49pMgA50Z_9jpZwkI.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.251.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2d:d6:00:14:5d:ea:09:14:13:a0:8a:29:81:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65cd741d7d5fa01e3da4c800e7467ff63a59c242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:65:df:8f:07:7d:13:d3:1a:0e:c7:3e:d0:
ff:ef:0d:90:73:fe:0a:51:4d:15:16:12:c2:10:45:
ed:1d:be:e6:2e:83:33:dc:e2:3b:ca:2e:7e:12:95:
3e:9d:ef:f0:eb:38:80:bd:11:30:b2:fc:b2:80:9b:
6a:0d:54:8f:e0:85:13:c0:a1:28:5f:fe:ae:9e:99:
7a:92:4b:e6:6a:32:fc:df:d1:f9:1d:b4:3f:df:fa:
a8:7e:91:57:30:e7:e8:61:a1:5a:7a:a9:e8:ac:9a:
b4:a8:4a:c1:d1:3b:40:a1:d0:51:c3:88:ad:ec:ba:
a0:f9:d1:b8:29:a7:2b:ef:50:4b:ea:e2:4a:12:61:
f9:23:48:f5:c4:5a:56:c0:6d:4d:87:5c:7e:cc:12:
76:2d:7b:1d:a1:03:66:f9:67:4a:92:8a:c2:53:14:
c2:17:89:a7:fb:2f:ab:61:a2:56:8a:5f:a2:f3:1b:
93:76:cc:13:c2:71:39:57:f1:9f:57:8c:de:f3:4f:
7a:27:62:5c:eb:8b:48:4b:54:dc:8c:1c:55:61:ba:
55:1d:9b:e2:14:61:8f:a5:cb:33:0e:f7:4c:fe:f7:
02:c1:aa:84:3c:f1:7d:b6:3f:5e:42:b3:eb:f1:ab:
dd:f1:59:38:e0:a0:31:a0:f5:ec:42:97:d2:b0:ef:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CD:74:1D:7D:5F:A0:1E:3D:A4:C8:00:E7:46:7F:F6:3A:59:C2:42
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/Zc10HX1foB49pMgA50Z_9jpZwkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:35:5f:9e:e2:36:13:8e:87:bc:52:95:2a:3a:09:6e:df:67:
b8:93:19:b8:9c:e1:d1:07:a8:7a:ef:64:93:30:8a:50:a5:b0:
bb:02:46:02:13:8e:4b:0f:15:39:5e:c5:e6:06:5b:26:ec:f8:
5e:bd:40:7d:35:3b:2f:07:f8:fa:a3:5f:e8:57:14:ac:fd:9e:
e5:61:ed:a6:21:9c:bd:f0:13:82:d6:26:54:61:f4:53:b5:fc:
af:92:1e:1f:44:48:51:ac:20:fb:a5:59:12:6f:56:42:bd:14:
82:c0:9e:2f:69:2b:3e:29:6e:d7:19:a6:91:f0:26:6c:40:d9:
29:29:4f:4b:d1:9c:bb:a2:80:b3:9d:d6:72:fe:dc:83:3d:f6:
03:98:99:ed:55:eb:6d:06:1e:19:30:6f:00:c3:2a:23:2d:df:
18:e9:35:ad:88:f8:01:d3:f4:8d:9b:42:33:16:97:e0:63:23:
ea:aa:ec:51:63:25:b1:bf:e0:98:73:86:e3:85:f2:df:d1:b9:
21:a6:8b:fa:d0:6e:cc:4c:2a:06:66:70:25:dd:cd:af:b6:1b:
be:13:9d:c3:b9:64:bb:a0:35:da:f7:a8:3d:a7:ff:17:57:42:
aa:f4:ce:78:6a:ca:b5:23:56:09:bd:17:8c:58:9a:bb:53:52:
c4:72:b7:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjai3WABRd6gkUE6CKKYHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNDc5MjFlNDQzMDUyMWE3NzI3ODg4YzEzYmM3YjhlMTA0
Y2JkYmUwHhcNMjUwMTAxMTk0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWNkNzQxZDdkNWZhMDFlM2RhNGM4MDBlNzQ2N2ZmNjNhNTljMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjpl348HfRPTGg7HPtD/7w2Qc/4K
UU0VFhLCEEXtHb7mLoMz3OI7yi5+EpU+ne/w6ziAvREwsvyygJtqDVSP4IUTwKEo
X/6unpl6kkvmajL839H5HbQ/3/qofpFXMOfoYaFaeqnorJq0qErB0TtAodBRw4it
7Lqg+dG4Kacr71BL6uJKEmH5I0j1xFpWwG1Nh1x+zBJ2LXsdoQNm+WdKkorCUxTC
F4mn+y+rYaJWil+i8xuTdswTwnE5V/GfV4ze8096J2Jc64tIS1TcjBxVYbpVHZvi
FGGPpcszDvdM/vcCwaqEPPF9tj9eQrPr8avd8Vk44KAxoPXsQpfSsO9fEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXNdB19X6AePaTIAOdGf/Y6WcJCMB8GA1UdIwQY
MBaAFMpHkh5EMFIadyeIjBO8e44QTL2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2It
ODNlNTVjNWY2ZjdkLzEvWmMxMEhYMWZvQjQ5cE1nQTUwWl85anBad2tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2ItODNlNTVjNWY2Zjdk
LzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufv0MA0G
CSqGSIb3DQEBCwUAA4IBAQChNV+e4jYTjoe8UpUqOglu32e4kxm4nOHRB6h672ST
MIpQpbC7AkYCE45LDxU5XsXmBlsm7PhevUB9NTsvB/j6o1/oVxSs/Z7lYe2mIZy9
8BOC1iZUYfRTtfyvkh4fREhRrCD7pVkSb1ZCvRSCwJ4vaSs+KW7XGaaR8CZsQNkp
KU9L0Zy7ooCzndZy/tyDPfYDmJntVettBh4ZMG8AwyojLd8Y6TWtiPgB0/SNm0Iz
FpfgYyPqquxRYyWxv+CYc4bjhfLf0bkhpov60G7MTCoGZnAl3c2vthu+E53DuWS7
oDXa96g9p/8XV0Kq9M54asq1I1YJvReMWJq7U1LEcreV
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:13 2025 by rpki-client