Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/zrwokDU3FhdB7_q1CXdcMR9bnVs.roa
File: zrwokDU3FhdB7_q1CXdcMR9bnVs.roa (raw, json)
Hash identifier: GD4RouuFMqAMeF041Js/nVB0Sr40yt7mYWnED87KOPQ=
Subject key identifier: CE:BC:28:90:35:37:16:17:41:EF:FA:B5:09:77:5C:31:1F:5B:9D:5B
Certificate issuer: /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial: 019421B1DD7B86B8715C90832078B5DB6010
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/zrwokDU3FhdB7_q1CXdcMR9bnVs.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49015
IP address blocks: 193.36.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:dd:7b:86:b8:71:5c:90:83:20:78:b5:db:60:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cebc28903537161741effab509775c311f5b9d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:0c:86:3c:66:59:b4:7f:cc:2c:fa:ae:8b:
9b:ae:a6:52:6c:6b:9d:d7:cc:2c:72:e9:9f:da:49:
9a:ca:57:c2:22:f6:26:da:fa:4b:e5:e3:6f:4a:2a:
28:7b:c3:66:1e:74:8e:d7:5b:39:ba:45:40:b2:9e:
83:de:82:55:be:fd:29:aa:cd:98:20:61:a4:3d:9e:
4f:14:8e:29:09:68:3a:5b:a9:3c:57:22:89:cb:c4:
a8:88:fd:72:09:73:d2:1c:58:48:85:30:6d:f2:9c:
15:59:03:cf:a7:14:66:c3:a1:0e:0f:47:d3:16:91:
93:f3:b8:2a:6f:46:35:7b:b7:c3:fd:af:5c:d1:46:
c2:24:88:23:d5:56:5e:a9:ac:1a:fc:d9:97:b6:65:
f4:e1:c0:36:83:8d:40:08:84:e3:17:68:43:7d:6b:
96:90:e1:69:ad:54:61:ac:0b:7d:29:f3:0e:71:f8:
21:2b:49:7b:2f:f8:ef:c5:27:1a:b9:94:7b:14:bd:
f6:16:d3:ba:19:52:e8:ad:0c:39:c3:6c:0f:79:51:
1d:50:58:d2:75:b0:92:51:34:af:9e:3d:6b:bb:ac:
f4:15:de:9f:a2:ca:80:0c:f1:48:dc:ed:eb:d6:82:
4e:9b:97:ca:f8:d2:a2:f2:ce:c6:32:68:10:1a:2c:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:28:90:35:37:16:17:41:EF:FA:B5:09:77:5C:31:1F:5B:9D:5B
X509v3 Authority Key Identifier:
keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/zrwokDU3FhdB7_q1CXdcMR9bnVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.40.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e3:a3:2e:93:54:fc:4e:94:da:eb:56:00:60:0f:c7:c0:39:
c9:31:c4:b7:80:24:8a:23:9f:28:83:e2:bc:2a:9e:bc:02:50:
5c:3f:72:45:5a:8a:21:4f:82:16:1c:d2:11:92:37:7e:dd:38:
b6:18:f0:1e:c1:72:45:22:b7:09:5a:bc:84:c4:7f:25:12:78:
a3:65:db:90:f7:18:64:2e:d9:ff:20:e7:29:6c:ee:1a:39:2c:
53:da:5d:80:13:9e:e7:1f:3a:bb:3c:11:40:f8:83:a6:b8:a0:
f1:f0:b8:91:fa:7b:29:fd:c4:39:d7:60:2a:ab:6e:58:b7:4e:
b8:49:2f:c8:d1:58:72:9c:2d:14:c0:72:99:49:14:fe:39:16:
31:7f:84:83:e2:ad:36:56:81:d8:cd:b0:8a:dc:36:d5:ab:05:
45:0c:86:dd:ce:0b:6a:42:32:3e:c8:76:d3:30:28:72:f2:12:
ad:c7:2d:09:54:ba:0b:79:51:32:28:65:a2:9c:26:a2:56:02:
a3:fe:9f:47:16:56:7b:e4:3f:0f:05:a5:f1:7b:4a:df:a8:42:
bd:6c:94:ff:9b:43:cf:0d:38:4d:31:e2:c3:7d:13:2b:b6:e7:
67:42:e2:01:2c:43:13:af:09:d0:0f:41:35:de:6f:14:00:de:
3a:e4:f8:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsd17hrhxXJCDIHi122AQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmNlZjk3NjY0MmQ1NGI0YjRhMTk5OGYwYjNmZjQ4ODQ1
YTkyNmQwHhcNMjUwMTAxMTE0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWJjMjg5MDM1MzcxNjE3NDFlZmZhYjUwOTc3NWMzMTFmNWI5ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcMMhjxmWbR/zCz6roubrqZSbGud
18wscumf2kmaylfCIvYm2vpL5eNvSiooe8NmHnSO11s5ukVAsp6D3oJVvv0pqs2Y
IGGkPZ5PFI4pCWg6W6k8VyKJy8SoiP1yCXPSHFhIhTBt8pwVWQPPpxRmw6EOD0fT
FpGT87gqb0Y1e7fD/a9c0UbCJIgj1VZeqawa/NmXtmX04cA2g41ACITjF2hDfWuW
kOFprVRhrAt9KfMOcfghK0l7L/jvxScauZR7FL32FtO6GVLorQw5w2wPeVEdUFjS
dbCSUTSvnj1ru6z0Fd6fosqADPFI3O3r1oJOm5fK+NKi8s7GMmgQGiwtpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM68KJA1NxYXQe/6tQl3XDEfW51bMB8GA1UdIwQY
MBaAFAO875dmQtVLS0oZmPCz/0iEWpJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYt
ZjFlOWJmMmJmZjIxLzEvenJ3b2tEVTNGaGRCN19xMUNYZGNNUjliblZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYtZjFlOWJmMmJmZjIx
LzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSQoMA0G
CSqGSIb3DQEBCwUAA4IBAQAW46Muk1T8TpTa61YAYA/HwDnJMcS3gCSKI58og+K8
Kp68AlBcP3JFWoohT4IWHNIRkjd+3Ti2GPAewXJFIrcJWryExH8lEnijZduQ9xhk
Ltn/IOcpbO4aOSxT2l2AE57nHzq7PBFA+IOmuKDx8LiR+nsp/cQ512Aqq25Yt064
SS/I0VhynC0UwHKZSRT+ORYxf4SD4q02VoHYzbCK3DbVqwVFDIbdzgtqQjI+yHbT
MChy8hKtxy0JVLoLeVEyKGWinCaiVgKj/p9HFlZ75D8PBaXxe0rfqEK9bJT/m0PP
DThNMeLDfRMrtudnQuIBLEMTrwnQD0E13m8UAN465Ph7
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:45 2025 by rpki-client