Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0ZmwzDi9ST6yTMR1xXCSe82hGRY.roa
File: 0ZmwzDi9ST6yTMR1xXCSe82hGRY.roa (raw, json)
Hash identifier: dGqxOkm54xDXsK0ILBl4dciRG+K6tvyd90lfvlMS6wo=
Subject key identifier: D1:99:B0:CC:38:BD:49:3E:B2:4C:C4:75:C5:70:92:7B:CD:A1:19:16
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D78C4630CD461246626CA113E44538
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0ZmwzDi9ST6yTMR1xXCSe82hGRY.roa
Signing time: Wed 01 Jan 2025 21:48:36 +0000
ROA not before: Wed 01 Jan 2025 21:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213936
IP address blocks: 87.246.180.0/24 maxlen: 24
87.246.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:8c:46:30:cd:46:12:46:62:6c:a1:13:e4:45:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d199b0cc38bd493eb24cc475c570927bcda11916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:97:3c:86:41:87:9e:25:f4:69:bc:68:06:
52:ab:b4:c7:97:2e:fa:1b:f6:70:5f:8e:dc:5c:47:
c8:9c:9e:2f:d2:97:b9:8e:79:b1:10:18:38:66:b5:
0a:54:a7:19:63:e5:cc:8b:c5:e7:82:a5:25:a4:7c:
4c:b0:bb:c9:a2:00:aa:d2:28:9c:d2:2a:7f:da:e6:
44:aa:a0:ea:9a:6b:d8:27:f7:06:bb:ff:ce:f6:4f:
ac:6e:ca:bb:47:52:95:32:bf:09:6a:95:6d:8f:90:
c2:d1:14:2f:ef:74:cb:c5:d9:9a:59:42:bb:de:b4:
2d:06:7c:e5:36:10:6e:1c:fa:b3:65:b6:92:b1:26:
16:5b:9d:90:24:9d:ab:e7:5b:23:81:48:cd:6d:70:
21:66:b1:b6:45:e3:8b:fb:6f:f2:9e:4c:d8:75:5e:
12:81:1d:ea:40:2d:78:12:eb:48:a2:94:19:71:c5:
cd:36:9c:69:fa:28:b7:c5:38:7e:94:93:63:54:27:
bd:32:8d:7c:15:a6:23:7e:98:20:84:4b:90:d7:dd:
5e:1f:e2:b4:fb:14:d2:68:47:cc:c9:de:48:04:e1:
5c:12:23:19:8c:4a:5d:d7:9b:48:3b:1b:49:d8:c5:
3c:27:c5:66:85:c6:88:28:6a:fb:d8:21:80:e3:1e:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:B0:CC:38:BD:49:3E:B2:4C:C4:75:C5:70:92:7B:CD:A1:19:16
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0ZmwzDi9ST6yTMR1xXCSe82hGRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.180.0/23
Signature Algorithm: sha256WithRSAEncryption
99:00:91:9d:33:ff:ad:88:e6:34:ba:7c:88:a8:5e:bf:c7:81:
9e:74:c6:2e:6d:dd:67:23:79:17:9a:d2:7d:de:fb:a5:1c:7f:
d8:b3:eb:2e:e4:9e:71:29:bc:b2:e4:79:8c:37:42:f5:ae:6d:
a0:63:21:23:38:ce:72:e9:1f:5d:69:9e:25:b4:12:dd:2c:d1:
c0:c3:07:37:7a:84:df:77:d2:de:2a:8d:e2:57:0c:f9:a8:74:
6c:ba:43:78:94:86:43:d6:6a:ca:2f:9b:c8:1f:99:a6:b5:14:
ef:4f:82:cd:ee:e1:b9:99:b5:c9:56:49:8f:bc:4e:2d:b0:39:
12:b5:8c:f1:7f:f8:de:89:b5:57:53:a1:99:81:9a:b8:f6:5b:
f8:cd:d3:1e:99:b1:cb:24:3e:31:b0:72:10:5e:f8:b6:7f:72:
90:a3:ed:20:30:16:4c:86:56:41:cf:da:d9:e5:af:2f:00:fe:
d4:fc:6c:a9:7f:55:66:c2:34:97:58:66:ab:ff:e6:61:2f:49:
30:87:ea:92:66:89:81:53:2c:90:6f:35:37:5a:ba:a6:5d:9e:
8b:14:11:60:f8:eb:18:4f:47:df:5a:31:62:b4:54:ff:3d:5d:
14:9b:b0:78:0f:a4:6e:49:5c:0d:23:7e:65:64:12:3e:e2:a8:
bf:42:b0:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj14xGMM1GEkZibKET5EU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjUwMTAxMjE0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTk5YjBjYzM4YmQ0OTNlYjI0Y2M0NzVjNTcwOTI3YmNkYTExOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKCXPIZBh54l9Gm8aAZSq7THly76
G/ZwX47cXEfInJ4v0pe5jnmxEBg4ZrUKVKcZY+XMi8XngqUlpHxMsLvJogCq0iic
0ip/2uZEqqDqmmvYJ/cGu//O9k+sbsq7R1KVMr8JapVtj5DC0RQv73TLxdmaWUK7
3rQtBnzlNhBuHPqzZbaSsSYWW52QJJ2r51sjgUjNbXAhZrG2ReOL+2/ynkzYdV4S
gR3qQC14EutIopQZccXNNpxp+ii3xTh+lJNjVCe9Mo18FaYjfpgghEuQ191eH+K0
+xTSaEfMyd5IBOFcEiMZjEpd15tIOxtJ2MU8J8VmhcaIKGr72CGA4x6piwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNGZsMw4vUk+skzEdcVwknvNoRkWMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvMFptd3pEaTlTVDZ5VE1SMXhYQ1NlODJoR1JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/a0MA0G
CSqGSIb3DQEBCwUAA4IBAQCZAJGdM/+tiOY0unyIqF6/x4GedMYubd1nI3kXmtJ9
3vulHH/Ys+su5J5xKbyy5HmMN0L1rm2gYyEjOM5y6R9daZ4ltBLdLNHAwwc3eoTf
d9LeKo3iVwz5qHRsukN4lIZD1mrKL5vIH5mmtRTvT4LN7uG5mbXJVkmPvE4tsDkS
tYzxf/jeibVXU6GZgZq49lv4zdMembHLJD4xsHIQXvi2f3KQo+0gMBZMhlZBz9rZ
5a8vAP7U/Gypf1VmwjSXWGar/+ZhL0kwh+qSZomBUyyQbzU3WrqmXZ6LFBFg+OsY
T0ffWjFitFT/PV0Um7B4D6RuSVwNI35lZBI+4qi/QrB4
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:50 2025 by rpki-client