Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa
File: ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa (raw, json)
Hash identifier: UCqx4EaKls5iWpImDrWYZpurlTDip+uji9Lqqm7JLEg=
Subject key identifier: 64:37:67:37:10:BE:22:FD:47:E4:0E:41:90:99:68:26:A4:8D:C5:FF
Certificate issuer: /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial: 01942823173CC00AF88DC2890FC859EEA551
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa
Signing time: Thu 02 Jan 2025 17:49:35 +0000
ROA not before: Thu 02 Jan 2025 17:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210433
IP address blocks: 185.81.200.0/22 maxlen: 24
2a03:6260::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:17:3c:c0:0a:f8:8d:c2:89:0f:c8:59:ee:a5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Validity
Not Before: Jan 2 17:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6437673710be22fd47e40e4190996826a48dc5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:22:0b:d8:07:de:92:5c:c1:52:ac:44:47:
3b:09:00:e6:71:bb:0b:06:74:d5:c7:1b:e7:33:2d:
3b:87:85:e4:af:27:2f:21:dc:e8:81:73:b3:de:26:
6b:51:8d:47:f7:b3:bb:28:22:d0:ee:36:a4:f9:00:
24:bc:4d:6c:da:d6:dd:c9:4e:71:01:ed:e7:e3:60:
52:38:6c:ae:98:3b:bd:4c:ff:24:97:87:7b:19:00:
19:d8:90:61:1d:bc:5e:33:1e:ec:fd:ef:9f:40:43:
4d:c7:26:eb:24:41:a7:3e:bf:5d:d9:39:57:03:a5:
15:e4:f9:0a:06:52:43:b2:3c:a4:a5:3f:c6:da:ac:
e0:42:06:c9:9e:2d:81:47:ec:5f:28:c0:5e:96:83:
10:d8:07:43:b8:43:f9:b3:65:6d:bc:2e:8d:f8:68:
0f:bb:59:d7:92:46:2c:da:e3:6b:53:58:95:cc:97:
21:4a:b5:fa:b5:e7:3f:d1:ad:5c:f9:86:4e:3e:5a:
4a:c5:72:f5:50:e5:09:19:69:42:62:2d:07:36:d0:
52:12:48:2c:c3:b7:e1:0f:bc:f7:25:c1:fb:c2:09:
aa:1b:91:b2:69:4e:60:c5:12:d6:24:5e:4a:9a:d7:
05:40:f0:7d:95:dd:63:74:9e:e8:38:4a:21:a5:b6:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:37:67:37:10:BE:22:FD:47:E4:0E:41:90:99:68:26:A4:8D:C5:FF
X509v3 Authority Key Identifier:
keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.200.0/22
IPv6:
2a03:6260::/32
Signature Algorithm: sha256WithRSAEncryption
2f:ce:56:72:73:e5:41:a6:c0:1a:6b:b8:5a:ff:b1:32:16:92:
c7:16:46:0c:e5:e9:54:89:1f:85:db:74:22:44:1d:12:78:11:
e7:c9:d8:a5:09:a6:54:e1:f8:5d:85:fa:64:b7:e7:14:05:8c:
64:15:03:f4:05:69:e3:2d:33:81:7e:09:d5:52:6c:c7:7a:17:
49:9e:46:38:83:84:2f:72:8e:8a:13:4c:8d:3c:57:8c:6d:a2:
9e:8b:f3:f9:09:3c:21:56:22:4c:fd:e4:ce:0d:ab:ed:6c:33:
e4:6c:98:03:9f:42:8e:ac:5f:b0:18:b2:6c:e8:f9:73:78:ad:
c0:13:b7:1c:a7:69:14:79:a6:a8:c2:99:86:d4:8f:01:94:fa:
f3:ae:44:60:db:46:0c:e8:a5:87:64:e0:ea:0d:e6:c2:ed:8e:
bd:eb:8d:5f:b2:54:a0:c1:03:d5:f3:97:c8:2b:78:c5:e7:cb:
60:8a:f0:7f:c6:f4:3c:f8:02:34:e8:32:47:1f:01:74:01:9a:
72:5b:2e:c2:a8:5d:bc:cd:78:af:81:9e:3f:c6:e1:ec:b2:79:
74:8a:e8:d5:ac:68:d7:b1:49:90:7c:60:e3:86:25:1a:5d:56:
07:d7:18:e8:2a:90:91:a1:bf:e6:73:99:e8:97:c9:ad:9e:c9:
83:9e:dc:8d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoIxc8wAr4jcKJD8hZ7qVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMzFkNDY1NjE3NDRhNjgxMDE2YzhkNmY5YTYxYjljMTdj
YjdmMGYwHhcNMjUwMTAyMTc0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDM3NjczNzEwYmUyMmZkNDdlNDBlNDE5MDk5NjgyNmE0OGRjNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLYiC9gH3pJcwVKsREc7CQDmcbsL
BnTVxxvnMy07h4XkrycvIdzogXOz3iZrUY1H97O7KCLQ7jak+QAkvE1s2tbdyU5x
Ae3n42BSOGyumDu9TP8kl4d7GQAZ2JBhHbxeMx7s/e+fQENNxybrJEGnPr9d2TlX
A6UV5PkKBlJDsjykpT/G2qzgQgbJni2BR+xfKMBeloMQ2AdDuEP5s2VtvC6N+GgP
u1nXkkYs2uNrU1iVzJchSrX6tec/0a1c+YZOPlpKxXL1UOUJGWlCYi0HNtBSEkgs
w7fhD7z3JcH7wgmqG5GyaU5gxRLWJF5KmtcFQPB9ld1jdJ7oOEohpbYRlQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGQ3ZzcQviL9R+QOQZCZaCakjcX/MB8GA1UdIwQY
MBaAFMEx1GVhdEpoEBbI1vmmG5wXy38PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84MmJhOWQtMzg4Mi00N2ZkLTkxZDUt
NGI3ZTVjNWE5ZDRiLzEvWkRkbk54Qy1JdjFINUE1QmtKbG9KcVNOeGY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84MmJhOWQtMzg4Mi00N2ZkLTkxZDUtNGI3ZTVjNWE5ZDRi
LzEvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVHIMA0E
AgACMAcDBQAqA2JgMA0GCSqGSIb3DQEBCwUAA4IBAQAvzlZyc+VBpsAaa7ha/7Ey
FpLHFkYM5elUiR+F23QiRB0SeBHnydilCaZU4fhdhfpkt+cUBYxkFQP0BWnjLTOB
fgnVUmzHehdJnkY4g4Qvco6KE0yNPFeMbaKei/P5CTwhViJM/eTODavtbDPkbJgD
n0KOrF+wGLJs6PlzeK3AE7ccp2kUeaaowpmG1I8BlPrzrkRg20YM6KWHZODqDebC
7Y69641fslSgwQPV85fIK3jF58tgivB/xvQ8+AI06DJHHwF0AZpyWy7CqF28zXiv
gZ4/xuHssnl0iujVrGjXsUmQfGDjhiUaXVYH1xjoKpCRob/mc5nol8mtnsmDntyN
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:12:03 2025 by rpki-client