Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/zV60OWNiEhDqebBXx7tqvmRMGPw.roa
File: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (raw, json)
Hash identifier: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=
Subject key identifier: CD:5E:B4:39:63:62:12:10:EA:79:B0:57:C7:BB:6A:BE:64:4C:18:FC
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01941FFA40EFB328A23E9EC6A6285A1B36B6
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/zV60OWNiEhDqebBXx7tqvmRMGPw.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48156
IP address blocks: 194.137.237.0/24 maxlen: 24
195.165.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:40:ef:b3:28:a2:3e:9e:c6:a6:28:5a:1b:36:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd5eb43963621210ea79b057c7bb6abe644c18fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:13:01:a8:7b:47:cb:df:1b:7b:55:ae:29:
b1:b7:a4:37:32:d6:fb:1b:c0:dc:92:99:8d:5c:58:
b3:ba:ed:97:ef:96:ce:8e:7d:11:9c:16:45:f9:eb:
1a:f1:21:20:ce:70:5e:cc:28:e0:13:de:8f:3b:71:
1c:ab:4a:be:9f:67:e1:ca:e2:69:1e:0d:a2:78:43:
d4:0d:89:f2:a9:93:1a:67:26:85:95:c0:86:10:f4:
8e:f9:75:42:c0:29:ec:77:f5:57:04:55:52:49:08:
ec:a6:73:84:33:ed:60:72:c7:0c:af:99:0e:1e:42:
18:37:7f:7c:97:79:ba:9a:a7:fd:c4:85:85:51:b2:
3e:7c:74:5d:0d:62:87:9c:bf:14:cc:fa:cc:0d:2a:
47:69:8d:36:28:54:23:7f:b4:1e:08:dd:cc:09:c3:
30:97:e7:43:58:10:14:a0:be:2a:bd:9c:28:18:9a:
52:b7:66:cb:b6:01:c7:76:b3:9b:b7:9d:f4:9b:a7:
23:0a:85:22:ab:f4:27:fa:f6:04:4a:1c:79:a2:66:
3a:06:93:75:51:27:d1:d7:b1:21:15:f2:1f:3a:05:
68:cc:08:d4:4a:dd:7a:50:46:4f:5f:41:f8:fc:26:
02:49:97:0f:58:86:34:1c:9f:e1:22:a2:b9:ff:26:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:B4:39:63:62:12:10:EA:79:B0:57:C7:BB:6A:BE:64:4C:18:FC
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/zV60OWNiEhDqebBXx7tqvmRMGPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.137.237.0/24
195.165.77.0/24
Signature Algorithm: sha256WithRSAEncryption
15:25:f1:d1:e6:33:a0:64:a3:d2:3b:5f:40:7d:ed:a5:0b:f6:
42:30:bd:01:dd:c0:79:bd:1a:9d:e0:aa:d4:27:17:b3:14:40:
f8:59:90:eb:24:d0:d3:38:9b:f9:32:d2:52:f2:9c:61:e0:39:
ae:81:6f:bc:84:43:bc:34:5f:4b:96:90:dd:b6:9e:7f:86:33:
b3:3c:67:03:bd:10:d4:3b:55:08:dd:84:3a:42:42:cf:65:69:
05:cf:02:bb:fd:68:4d:11:cd:6a:05:64:24:05:bc:66:c9:c6:
bc:8b:97:0d:bf:4f:ef:8b:79:07:e4:9a:15:3a:ec:24:a1:1a:
b0:02:74:ae:0b:f7:5b:d9:8b:d7:8c:0a:a8:ae:04:51:e3:a5:
da:1c:eb:b4:c1:16:70:6f:a8:0a:b4:f2:3c:70:fa:45:65:fd:
fd:0d:62:b5:f7:c3:03:d8:44:e6:f4:43:04:57:0a:8f:75:52:
16:23:1f:a5:9a:63:89:39:66:64:72:fc:18:9e:a5:86:1e:28:
01:9b:60:c1:50:21:42:00:28:88:5c:97:7b:fd:4a:de:5e:7d:
bc:e6:f6:69:b8:33:dc:64:e6:15:3c:3f:1b:aa:ad:b6:f2:ec:
37:ea:f2:bf:75:a6:e6:bb:e2:06:64:9f:eb:cb:5a:0b:9d:1a:
89:06:ad:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+kDvsyiiPp7GpihaGza2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj
NWRiNDYwHhcNMjUwMTAxMDM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDVlYjQzOTYzNjIxMjEwZWE3OWIwNTdjN2JiNmFiZTY0NGMxOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHITAah7R8vfG3tVrimxt6Q3Mtb7
G8DckpmNXFizuu2X75bOjn0RnBZF+esa8SEgznBezCjgE96PO3Ecq0q+n2fhyuJp
Hg2ieEPUDYnyqZMaZyaFlcCGEPSO+XVCwCnsd/VXBFVSSQjspnOEM+1gcscMr5kO
HkIYN398l3m6mqf9xIWFUbI+fHRdDWKHnL8UzPrMDSpHaY02KFQjf7QeCN3MCcMw
l+dDWBAUoL4qvZwoGJpSt2bLtgHHdrObt530m6cjCoUiq/Qn+vYEShx5omY6BpN1
USfR17EhFfIfOgVozAjUSt16UEZPX0H4/CYCSZcPWIY0HJ/hIqK5/yYlFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM1etDljYhIQ6nmwV8e7ar5kTBj8MB8GA1UdIwQY
MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt
YTRjYThiOWMyMDViLzEvelY2ME9XTmlFaERxZWJCWHg3dHF2bVJNR1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi
LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwontAwQA
w6VNMA0GCSqGSIb3DQEBCwUAA4IBAQAVJfHR5jOgZKPSO19Afe2lC/ZCML0B3cB5
vRqd4KrUJxezFED4WZDrJNDTOJv5MtJS8pxh4DmugW+8hEO8NF9LlpDdtp5/hjOz
PGcDvRDUO1UI3YQ6QkLPZWkFzwK7/WhNEc1qBWQkBbxmyca8i5cNv0/vi3kH5JoV
OuwkoRqwAnSuC/db2YvXjAqorgRR46XaHOu0wRZwb6gKtPI8cPpFZf39DWK198MD
2ETm9EMEVwqPdVIWIx+lmmOJOWZkcvwYnqWGHigBm2DBUCFCACiIXJd7/UreXn28
5vZpuDPcZOYVPD8bqq228uw36vK/dabmu+IGZJ/ry1oLnRqJBq2n
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:42 2025 by rpki-client