Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/ziT1KvRp4nclVM5reU3sOFNH1x4.roa
File: ziT1KvRp4nclVM5reU3sOFNH1x4.roa (raw, json)
Hash identifier: Q4C5iLbiXkuuyYxp+dYvmqYFnNUxA4NFMnWPDomm2KQ=
Subject key identifier: CE:24:F5:2A:F4:69:E2:77:25:54:CE:6B:79:4D:EC:38:53:47:D7:1E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 0194236A412B28A4DB0C2517C1331035F2F4
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/ziT1KvRp4nclVM5reU3sOFNH1x4.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35478
IP address blocks: 185.26.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:41:2b:28:a4:db:0c:25:17:c1:33:10:35:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce24f52af469e2772554ce6b794dec385347d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:d4:1c:24:65:5f:ce:b7:1e:a9:9d:98:7e:
36:97:8c:28:c0:ba:7d:32:7b:af:17:17:39:48:5e:
26:56:61:11:45:8d:4a:c1:73:f4:34:8f:4d:f6:72:
22:7a:91:de:69:43:e6:60:58:ca:59:e6:75:87:fa:
34:25:f8:27:1d:09:72:3d:f1:2b:71:30:c6:d0:2b:
69:14:1b:2a:a9:37:10:1b:98:c6:a7:bd:74:d8:cb:
f5:27:99:56:25:37:d6:20:c7:f1:f8:ed:26:da:7e:
c1:12:93:0f:c9:9e:f2:be:21:94:76:ef:53:29:b4:
8c:d2:dc:f4:53:c7:43:bf:31:0b:5f:29:7b:18:da:
a4:d2:4c:65:5c:85:e3:60:c1:60:7a:50:d0:8d:4b:
9c:86:5f:44:ab:a1:d3:a0:74:37:35:c7:f4:4b:24:
dd:8f:88:fd:b6:50:9a:34:8e:30:f7:cd:a3:a1:d1:
30:b0:12:32:a2:21:79:0d:fe:60:7b:b5:63:73:25:
00:b7:10:a4:c1:4e:55:20:56:c8:37:83:fc:b9:82:
fa:c7:a7:b6:f6:70:3a:31:9f:65:6e:95:7a:08:09:
2b:ed:19:dd:72:28:02:f2:4c:17:29:77:42:3c:6c:
58:5f:82:fe:b1:a1:ce:f9:a6:60:04:92:93:c1:e0:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:24:F5:2A:F4:69:E2:77:25:54:CE:6B:79:4D:EC:38:53:47:D7:1E
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/ziT1KvRp4nclVM5reU3sOFNH1x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:01:c5:b9:9b:4b:0f:15:47:6c:e7:3b:67:8a:f6:f3:5c:0e:
c7:b7:d1:87:e4:87:e4:ec:ff:c6:8a:2c:01:8e:35:00:e1:47:
e0:f9:a3:57:be:78:05:d0:e9:e4:65:25:eb:99:56:fc:96:f5:
ad:39:15:ac:75:06:cb:66:67:80:ea:bd:07:7d:f6:2b:08:9a:
d1:a1:41:6d:ea:56:a3:e4:8e:c1:db:3c:5d:ec:6f:ef:6f:ee:
0f:22:4e:0a:37:f4:43:d3:2b:f4:16:3a:9f:e9:b3:1f:0e:e4:
c2:0a:98:69:e1:c1:a3:f3:cc:06:81:77:55:d3:53:41:65:77:
a1:de:1b:a0:76:18:f7:bf:af:fa:9c:e1:c0:07:ec:e2:e1:5d:
00:5b:ab:9c:82:49:79:34:63:1e:08:7d:0a:87:48:dc:ba:18:
11:f9:a3:c0:24:4a:3a:83:1c:c5:eb:3e:e2:19:ed:47:1f:b8:
1e:bc:00:77:d9:40:87:33:7f:b7:53:f1:28:b5:fd:ef:54:4c:
53:8f:ed:16:b4:48:c5:a8:da:9d:f4:14:6c:c2:3b:25:c6:d5:
21:33:99:85:61:78:98:d6:76:4d:ef:47:41:06:de:59:1c:14:
b2:05:ef:cf:5c:2e:3f:19:26:12:4d:13:bf:c4:24:7a:99:54:
c4:9a:59:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjakErKKTbDCUXwTMQNfL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjM4MGQ3NjRhOTYxMWRmZTJmYmMwY2UwY2M0MDQ5NmVj
MWU4M2UwHhcNMjUwMTAxMTk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTI0ZjUyYWY0NjllMjc3MjU1NGNlNmI3OTRkZWMzODUzNDdkNzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/3UHCRlX863HqmdmH42l4wowLp9
MnuvFxc5SF4mVmERRY1KwXP0NI9N9nIiepHeaUPmYFjKWeZ1h/o0JfgnHQlyPfEr
cTDG0CtpFBsqqTcQG5jGp7102Mv1J5lWJTfWIMfx+O0m2n7BEpMPyZ7yviGUdu9T
KbSM0tz0U8dDvzELXyl7GNqk0kxlXIXjYMFgelDQjUuchl9Eq6HToHQ3Ncf0SyTd
j4j9tlCaNI4w982jodEwsBIyoiF5Df5ge7VjcyUAtxCkwU5VIFbIN4P8uYL6x6e2
9nA6MZ9lbpV6CAkr7RndcigC8kwXKXdCPGxYX4L+saHO+aZgBJKTweCQowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM4k9Sr0aeJ3JVTOa3lN7DhTR9ceMB8GA1UdIwQY
MBaAFHwjgNdkqWEd/i+8DODMQEluweg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMt
NWQ4Y2E2MzY4MWFkLzEvemlUMUt2UnA0bmNsVk01cmVVM3NPRk5IMXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMtNWQ4Y2E2MzY4MWFk
LzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRrfMA0G
CSqGSIb3DQEBCwUAA4IBAQCPAcW5m0sPFUds5ztnivbzXA7Ht9GH5Ifk7P/GiiwB
jjUA4Ufg+aNXvngF0OnkZSXrmVb8lvWtORWsdQbLZmeA6r0HffYrCJrRoUFt6laj
5I7B2zxd7G/vb+4PIk4KN/RD0yv0Fjqf6bMfDuTCCphp4cGj88wGgXdV01NBZXeh
3hugdhj3v6/6nOHAB+zi4V0AW6ucgkl5NGMeCH0Kh0jcuhgR+aPAJEo6gxzF6z7i
Ge1HH7gevAB32UCHM3+3U/Eotf3vVExTj+0WtEjFqNqd9BRswjslxtUhM5mFYXiY
1nZN70dBBt5ZHBSyBe/PXC4/GSYSTRO/xCR6mVTEmlnZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:05 2025 by rpki-client