Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa
File: 1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa (raw, json)
Hash identifier: J6Mj0qs7STVl56/TudBQhf4GIVoZij0kDMBUdFZiWTw=
Subject key identifier: FB:37:FD:65:06:53:DB:15:20:11:B9:55:C7:1D:A4:EB:1A:04:DC:E7
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 019427B5F533BC533D955A0E1D61F5711D25
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa
Signing time: Thu 02 Jan 2025 15:50:23 +0000
ROA not before: Thu 02 Jan 2025 15:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39180
IP address blocks: 94.231.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f5:33:bc:53:3d:95:5a:0e:1d:61:f5:71:1d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: Jan 2 15:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb37fd650653db152011b955c71da4eb1a04dce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:ab:08:18:41:73:15:dd:ed:ad:6e:0f:37:
f1:11:f4:ad:04:1c:e0:36:9d:53:b7:13:76:24:31:
2a:e6:dc:4f:0a:d6:f2:ef:b7:cd:6b:4c:61:3e:ba:
72:84:a0:49:23:66:9e:f7:21:5d:fd:38:c5:e7:46:
70:d0:da:19:77:d7:f6:53:f0:8d:ed:da:52:52:91:
64:c4:93:88:55:11:51:0f:81:5c:0c:76:6b:8b:4e:
77:07:63:53:61:0c:a8:14:16:b2:fc:0e:e5:e7:fd:
21:cd:e2:dd:4b:83:0a:ea:21:ca:44:84:2f:2d:4c:
47:a3:ad:b9:5f:c6:0c:3e:ea:38:38:de:5a:82:d3:
08:6f:fc:8f:6c:f8:0f:4b:85:1f:e1:30:b4:9c:e3:
4e:8b:52:97:60:67:9d:e4:5c:8d:31:45:cf:db:c9:
38:e8:5d:0d:39:7b:e4:2d:f9:47:bf:b5:53:d9:27:
e4:65:77:41:24:5d:af:23:58:7a:13:b5:81:11:51:
05:9f:19:42:5a:4e:28:fd:86:7d:8b:84:a6:c0:14:
4c:4c:cb:4c:8f:7b:99:37:68:7f:30:d0:e0:d5:09:
b7:07:cb:98:27:e9:ae:64:2b:b1:ec:02:b2:5f:4e:
bc:8a:8b:6f:d9:17:1d:a5:84:ef:6e:7a:57:e2:d5:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:FD:65:06:53:DB:15:20:11:B9:55:C7:1D:A4:EB:1A:04:DC:E7
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:bf:95:bf:c6:97:fd:7b:87:da:06:f5:34:9d:f7:9c:7a:87:
28:1a:4e:fe:4d:86:d3:7f:c6:6a:3d:2f:bb:47:67:17:ac:af:
f9:e5:28:b7:8d:f1:d1:d4:f8:4f:1a:ac:53:e0:45:9e:e3:32:
bd:47:9d:4c:a2:ed:a2:de:4a:03:94:b4:47:4b:25:3d:56:32:
3c:cd:49:ed:c2:9a:78:af:2f:f6:71:99:0b:0d:83:4b:0d:41:
48:a9:4d:3e:ca:96:fd:df:c2:be:63:b9:01:e4:a1:ba:1f:03:
a0:17:dc:66:80:b9:7c:10:2e:8d:41:67:30:98:45:de:41:67:
e5:22:1e:01:45:48:3c:57:65:d3:e9:c1:d5:21:a6:ea:5f:70:
80:d7:8f:06:a1:3f:bc:65:31:5d:53:11:2c:b5:0d:9c:03:97:
91:a3:2e:91:e9:29:60:17:42:28:f1:2f:37:f5:59:0a:c5:f0:
43:6c:f4:36:11:02:bd:c3:b5:a2:b3:d7:19:8d:ed:01:03:7b:
46:b7:0f:e3:84:a5:1b:b9:18:c8:95:a5:83:11:58:53:dd:71:
8b:f4:f9:b3:b1:4a:2d:7b:a6:ff:5b:9e:54:49:10:e1:45:14:
bc:95:86:02:66:71:78:99:68:c4:2f:ff:14:37:0a:c4:9f:6a:
1a:38:f6:de
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQntfUzvFM9lVoOHWH1cR0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZmYTZhOTBlZDk0ZTIyMWRiNjlkMjFmY2RkYTdjNjZk
MTNjOTEwHhcNMjUwMTAyMTU1MDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjM3ZmQ2NTA2NTNkYjE1MjAxMWI5NTVjNzFkYTRlYjFhMDRkY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylqrCBhBcxXd7a1uDzfxEfStBBzg
Np1TtxN2JDEq5txPCtby77fNa0xhPrpyhKBJI2ae9yFd/TjF50Zw0NoZd9f2U/CN
7dpSUpFkxJOIVRFRD4FcDHZri053B2NTYQyoFBay/A7l5/0hzeLdS4MK6iHKRIQv
LUxHo625X8YMPuo4ON5agtMIb/yPbPgPS4Uf4TC0nONOi1KXYGed5FyNMUXP28k4
6F0NOXvkLflHv7VT2SfkZXdBJF2vI1h6E7WBEVEFnxlCWk4o/YZ9i4SmwBRMTMtM
j3uZN2h/MNDg1Qm3B8uYJ+muZCux7AKyX068iotv2RcdpYTvbnpX4tUUEQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPs3/WUGU9sVIBG5VccdpOsaBNznMB8GA1UdIwQY
MBaAFJQW+mqQ7ZTiIdtp0h/N2nxm0TyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYt
N2RlOTEwZTAwYmVkLzEvMS16ZjlaUVpUMnhVZ0VibFZ4eDJrNnhvRTNPYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODIvMDM2MjEzLTc0YjEtNDI1Yy05ZTU2LTdkZTkxMGUwMGJl
ZC8xL2xCYjZhcER0bE9JaDIyblNIODNhZkdiUlBKRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF7nzjAN
BgkqhkiG9w0BAQsFAAOCAQEAsr+Vv8aX/XuH2gb1NJ33nHqHKBpO/k2G03/Gaj0v
u0dnF6yv+eUot43x0dT4TxqsU+BFnuMyvUedTKLtot5KA5S0R0slPVYyPM1J7cKa
eK8v9nGZCw2DSw1BSKlNPsqW/d/CvmO5AeShuh8DoBfcZoC5fBAujUFnMJhF3kFn
5SIeAUVIPFdl0+nB1SGm6l9wgNePBqE/vGUxXVMRLLUNnAOXkaMukekpYBdCKPEv
N/VZCsXwQ2z0NhECvcO1orPXGY3tAQN7RrcP44SlG7kYyJWlgxFYU91xi/T5s7FK
LXum/1ueVEkQ4UUUvJWGAmZxeJloxC//FDcKxJ9qGjj23g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:08:33 2025 by rpki-client