Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/ZT5okXQpCE1L_UFUxKGgKpmWveI.roa
File: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (raw, json)
Hash identifier: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=
Subject key identifier: 65:3E:68:91:74:29:08:4D:4B:FD:41:54:C4:A1:A0:2A:99:96:BD:E2
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 0194228D73932A907071F37CDFF3E9860106
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/ZT5okXQpCE1L_UFUxKGgKpmWveI.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2844
IP address blocks: 86.104.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:73:93:2a:90:70:71:f3:7c:df:f3:e9:86:01:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=653e68917429084d4bfd4154c4a1a02a9996bde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:da:30:97:5a:49:bb:83:3b:2d:a5:25:b4:
44:e6:86:19:0f:7f:f3:17:e1:a2:69:52:a5:2f:c2:
94:78:8f:6d:d2:8c:50:52:be:78:5e:18:86:72:98:
f8:b9:40:a7:93:fe:d0:2a:ca:b6:b2:3a:97:bb:9c:
ad:f1:78:f5:c9:00:60:2b:d3:5e:33:f9:eb:41:e4:
f8:44:b3:de:99:19:cb:68:49:1c:21:b6:81:f6:a2:
0d:ea:38:5d:be:c8:9e:ed:ca:13:57:53:a5:03:a1:
0b:03:a0:e8:fc:b4:d3:79:05:f1:04:5a:6e:00:70:
75:5c:7c:dc:e2:98:47:e3:dd:e2:28:f9:e7:17:01:
20:1e:21:8e:05:41:67:08:cb:7b:68:5c:69:cb:11:
e8:b0:66:a8:54:99:e2:ee:2e:27:fb:e3:53:b3:d2:
02:9c:cf:11:b3:1b:eb:72:1f:6f:c2:d8:77:09:03:
af:b4:d4:98:1e:a4:19:59:ea:8e:a5:95:d3:fe:7f:
ae:a1:89:3b:72:61:d6:77:a0:51:e7:aa:3a:c0:24:
42:13:de:c6:c3:68:fd:5e:2b:d2:69:02:0e:65:b2:
17:0d:a7:11:d9:64:61:10:53:df:9a:93:55:26:2b:
8f:eb:cd:02:b2:24:8d:25:d9:22:91:48:54:ae:38:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3E:68:91:74:29:08:4D:4B:FD:41:54:C4:A1:A0:2A:99:96:BD:E2
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/ZT5okXQpCE1L_UFUxKGgKpmWveI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.48.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:fd:04:42:84:24:69:42:b6:4a:4a:07:dc:42:4e:29:5e:4a:
f6:3c:d7:68:62:51:2a:4c:c6:47:1b:49:2b:0b:f8:03:51:88:
04:72:f9:8a:ab:bd:41:f1:e1:c0:57:1e:05:95:28:93:41:c7:
32:eb:4d:e2:6c:47:7b:d2:09:3b:ec:46:d8:da:0a:23:f9:68:
c7:a1:bb:ca:26:eb:42:7d:89:1a:b2:54:f9:4e:4d:60:14:75:
03:37:36:fc:9e:dd:79:02:f6:45:44:61:55:96:5f:30:c1:3c:
2e:31:3e:d9:29:c7:01:a3:4e:9a:22:97:fb:7e:3a:30:91:a9:
d9:08:14:31:86:d4:49:ba:aa:5f:dd:11:55:58:f1:ea:d6:94:
1c:01:41:da:6a:80:60:52:57:a0:d8:14:ea:90:e8:6e:ed:d4:
e5:71:f9:ae:ea:38:fa:18:a6:e9:97:0f:52:4d:95:18:be:5e:
ff:74:f1:f5:6f:50:fc:99:bb:f1:95:5e:6e:6d:4b:e1:25:8b:
a4:89:2a:5e:60:c3:38:33:51:22:f3:ee:2a:14:a3:d3:a4:59:
87:70:34:8c:73:1f:f9:94:9b:03:e0:83:4b:ef:e3:ff:22:ce:
3a:ee:28:81:b4:09:5b:a8:e1:f6:91:ad:fa:29:fd:c2:05:f6:
80:58:34:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijXOTKpBwcfN83/PphgEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5
NGM1ZjIwHhcNMjUwMTAxMTU0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTNlNjg5MTc0MjkwODRkNGJmZDQxNTRjNGExYTAyYTk5OTZiZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxLaMJdaSbuDOy2lJbRE5oYZD3/z
F+GiaVKlL8KUeI9t0oxQUr54XhiGcpj4uUCnk/7QKsq2sjqXu5yt8Xj1yQBgK9Ne
M/nrQeT4RLPemRnLaEkcIbaB9qIN6jhdvsie7coTV1OlA6ELA6Do/LTTeQXxBFpu
AHB1XHzc4phH493iKPnnFwEgHiGOBUFnCMt7aFxpyxHosGaoVJni7i4n++NTs9IC
nM8Rsxvrch9vwth3CQOvtNSYHqQZWeqOpZXT/n+uoYk7cmHWd6BR56o6wCRCE97G
w2j9XivSaQIOZbIXDacR2WRhEFPfmpNVJiuP680CsiSNJdkikUhUrjhx2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGU+aJF0KQhNS/1BVMShoCqZlr3iMB8GA1UdIwQY
MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt
NDY0ZWIxODNiNTY4LzEvWlQ1b2tYUXBDRTFMX1VGVXhLR2dLcG1XdmVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4
LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEVmgwMA0G
CSqGSIb3DQEBCwUAA4IBAQBr/QRChCRpQrZKSgfcQk4pXkr2PNdoYlEqTMZHG0kr
C/gDUYgEcvmKq71B8eHAVx4FlSiTQccy603ibEd70gk77EbY2goj+WjHobvKJutC
fYkaslT5Tk1gFHUDNzb8nt15AvZFRGFVll8wwTwuMT7ZKccBo06aIpf7fjowkanZ
CBQxhtRJuqpf3RFVWPHq1pQcAUHaaoBgUleg2BTqkOhu7dTlcfmu6jj6GKbplw9S
TZUYvl7/dPH1b1D8mbvxlV5ubUvhJYukiSpeYMM4M1Ei8+4qFKPTpFmHcDSMcx/5
lJsD4INL7+P/Is467iiBtAlbqOH2ka36Kf3CBfaAWDSl
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:32 2025 by rpki-client