Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa
File: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (raw, json)
Hash identifier: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=
Subject key identifier: 66:63:9B:B2:33:16:78:1F:5E:72:FF:18:F9:A9:46:81:94:D7:DA:F0
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 0194258F7811758FBF007BAD2632EE0D8580
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18434
IP address blocks: 185.41.232.0/24 maxlen: 24
185.41.233.0/24 maxlen: 24
185.41.234.0/24 maxlen: 24
185.41.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:78:11:75:8f:bf:00:7b:ad:26:32:ee:0d:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66639bb23316781f5e72ff18f9a9468194d7daf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:99:eb:b1:5d:1d:98:02:4b:cb:3c:db:64:
63:54:03:0d:c4:5c:5b:12:3a:8c:f7:a0:74:0d:31:
e9:3e:67:96:a7:15:7d:c9:23:e9:ae:2d:3e:37:f2:
f7:99:5c:c4:62:41:83:c4:bc:17:2f:10:0d:8d:a3:
3d:8a:ff:23:d0:d0:a0:9d:e6:51:fc:a4:0a:6c:8f:
5d:92:80:c9:1c:78:8c:20:d4:75:8c:fc:d0:f9:65:
93:0c:d8:1e:5d:33:e7:eb:8e:91:f4:a5:12:1e:02:
10:e1:b5:80:5e:63:47:30:31:42:9b:bb:32:c3:7f:
75:99:e4:46:42:c5:1a:d4:3a:db:bb:b9:04:d9:22:
e9:69:3f:60:e3:dd:f4:0a:0c:1d:3b:7f:e7:a2:12:
22:95:56:a9:d5:e8:33:fb:aa:e5:6c:20:48:41:fd:
ab:49:eb:0a:75:1f:e9:b8:39:92:47:5a:06:fb:0d:
39:ff:c2:3f:6b:ea:1b:cf:9b:6b:ae:c0:27:4c:95:
cb:1f:6e:e9:4a:6c:20:54:12:f0:57:d4:58:db:4d:
17:67:3d:78:db:11:01:cd:82:17:e2:d1:10:57:95:
d9:6e:9f:5b:44:ca:18:2e:05:c5:1d:c2:53:18:e3:
96:60:fd:d4:a0:aa:3c:82:cf:a7:90:3f:0e:46:8b:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:63:9B:B2:33:16:78:1F:5E:72:FF:18:F9:A9:46:81:94:D7:DA:F0
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.232.0/22
Signature Algorithm: sha256WithRSAEncryption
88:98:e0:ed:a2:57:bb:35:ea:47:09:51:49:12:c4:66:53:17:
3b:30:cc:aa:9c:40:94:f5:bd:67:33:99:ca:f8:41:82:d5:98:
20:c2:40:2d:7f:66:51:c9:31:61:61:4d:e6:89:a5:12:73:b9:
cc:f8:a6:75:45:c2:7f:bc:aa:c2:0e:68:28:15:62:5a:ce:a7:
2c:05:e4:f7:46:c0:c8:e3:c8:1c:1f:37:39:8a:b8:73:76:40:
69:43:96:f5:61:70:f2:18:61:a8:e1:d3:06:3b:79:e0:3f:cf:
e9:05:46:72:f7:a0:ac:52:f5:12:6c:cf:de:14:09:0a:ae:1c:
2d:02:9a:7b:05:dd:03:f8:2e:d0:ec:ad:48:c1:59:c0:4f:bb:
77:05:4d:16:c9:72:bf:86:f6:ed:f5:89:1c:b3:33:28:1a:81:
29:2b:33:81:01:cc:e4:e6:37:06:64:d6:1e:ce:49:72:1b:2a:
a0:6d:38:a6:a4:5d:26:29:52:be:24:6e:56:82:ba:7f:3e:1c:
e7:e1:f4:10:3a:1f:2e:05:f3:ec:46:2c:fd:9b:63:f6:b7:55:
67:4a:ac:cf:c8:a1:6d:fe:ec:84:56:66:7c:9b:ba:4e:ed:6d:
28:cb:66:f9:e5:e5:c4:e9:1f:d2:f9:b2:29:36:d4:f7:60:ae:
4f:ca:64:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj3gRdY+/AHutJjLuDYWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTM4MDZmNzQyYWJjZDVkYjEyMDRmNTI4ZjRjYTZkZGVi
MWU5ZGEwHhcNMjUwMTAyMDU0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjYzOWJiMjMzMTY3ODFmNWU3MmZmMThmOWE5NDY4MTk0ZDdkYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPeZ67FdHZgCS8s822RjVAMNxFxb
EjqM96B0DTHpPmeWpxV9ySPpri0+N/L3mVzEYkGDxLwXLxANjaM9iv8j0NCgneZR
/KQKbI9dkoDJHHiMINR1jPzQ+WWTDNgeXTPn646R9KUSHgIQ4bWAXmNHMDFCm7sy
w391meRGQsUa1Drbu7kE2SLpaT9g4930CgwdO3/nohIilVap1egz+6rlbCBIQf2r
SesKdR/puDmSR1oG+w05/8I/a+obz5trrsAnTJXLH27pSmwgVBLwV9RY200XZz14
2xEBzYIX4tEQV5XZbp9bRMoYLgXFHcJTGOOWYP3UoKo8gs+nkD8ORovGqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGZjm7IzFngfXnL/GPmpRoGU19rwMB8GA1UdIwQY
MBaAFJSjgG90KrzV2xIE9Sj0ym3esenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEt
ZDhiZjUyMWIyNmIwLzEvWm1PYnNqTVdlQjllY3Y4WS1hbEdnWlRYMnZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jN2I1MjQtYzRkOS00MWE0LTg4ZmEtZDhiZjUyMWIyNmIw
LzEvbEtPQWIzUXF2TlhiRWdUMUtQVEtiZDZ4NmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSnoMA0G
CSqGSIb3DQEBCwUAA4IBAQCImODtole7NepHCVFJEsRmUxc7MMyqnECU9b1nM5nK
+EGC1ZggwkAtf2ZRyTFhYU3miaUSc7nM+KZ1RcJ/vKrCDmgoFWJazqcsBeT3RsDI
48gcHzc5irhzdkBpQ5b1YXDyGGGo4dMGO3ngP8/pBUZy96CsUvUSbM/eFAkKrhwt
App7Bd0D+C7Q7K1IwVnAT7t3BU0WyXK/hvbt9YkcszMoGoEpKzOBAczk5jcGZNYe
zklyGyqgbTimpF0mKVK+JG5Wgrp/Phzn4fQQOh8uBfPsRiz9m2P2t1VnSqzPyKFt
/uyEVmZ8m7pO7W0oy2b55eXE6R/S+bIpNtT3YK5PymTb
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:58 2025 by rpki-client