Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/Zt9BdmMIpkw0MIyHiOhuungStoE.roa
File: Zt9BdmMIpkw0MIyHiOhuungStoE.roa (raw, json)
Hash identifier: L7P2p04wT0zw3+4RreSfPUQp7foJhVeuqfmP5tYHfcQ=
Subject key identifier: 66:DF:41:76:63:08:A6:4C:34:30:8C:87:88:E8:6E:BA:78:12:B6:81
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 019427B5EDAC7B71EB8DD364152557251FC7
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/Zt9BdmMIpkw0MIyHiOhuungStoE.roa
Signing time: Thu 02 Jan 2025 15:50:21 +0000
ROA not before: Thu 02 Jan 2025 15:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202499
IP address blocks: 109.205.194.0/24 maxlen: 24
193.142.188.0/22 maxlen: 24
195.216.208.0/23 maxlen: 24
2a0c:9b40::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ed:ac:7b:71:eb:8d:d3:64:15:25:57:25:1f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Jan 2 15:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66df41766308a64c34308c8788e86eba7812b681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:bd:c2:5c:5d:f8:73:cd:6a:6a:39:1c:f2:
2b:b7:c0:6a:68:2f:f7:0a:2c:fb:50:bf:68:f9:22:
81:1b:be:bd:43:a1:90:02:4f:4b:9e:7e:c6:a8:56:
db:9d:de:dd:28:40:01:eb:35:ee:e7:21:d9:10:6f:
1c:0f:2a:ec:b1:57:aa:a1:c9:2d:2a:1b:a1:f9:2a:
b8:d5:16:9f:27:c6:c5:fd:2f:d1:7f:0b:d2:d0:2d:
b2:d7:8d:75:37:ff:58:92:ef:fd:94:9e:81:06:d9:
8f:25:f8:cc:5b:0e:72:a5:6a:69:0f:1a:4d:47:7e:
a5:ac:13:20:f3:a0:1d:8c:7b:f0:82:8f:d5:a9:7b:
3c:9c:13:19:5d:96:b9:1d:19:30:16:68:df:c9:e8:
24:63:50:57:d3:c1:5f:6a:47:2d:75:ef:29:09:18:
5f:cd:47:2e:8a:2b:15:37:2c:6c:a0:cd:b4:9f:f6:
d9:e4:ba:c8:e1:96:76:1a:9a:37:d3:f2:f4:3c:75:
c8:53:d0:14:d5:c1:12:de:3f:75:a9:82:dc:a7:9b:
b1:8d:ee:bf:7b:c3:68:86:5e:2a:8e:c2:a9:ac:5e:
b1:8d:0c:18:21:a3:fd:e8:e9:44:63:6c:14:80:63:
da:7f:fe:ce:ac:c8:06:b1:d9:50:ce:c0:b2:6e:21:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:41:76:63:08:A6:4C:34:30:8C:87:88:E8:6E:BA:78:12:B6:81
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/Zt9BdmMIpkw0MIyHiOhuungStoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.194.0/24
193.142.188.0/22
195.216.208.0/23
IPv6:
2a0c:9b40::/29
Signature Algorithm: sha256WithRSAEncryption
2d:7e:d4:f6:02:b4:f6:90:10:1a:10:b4:40:58:c3:19:87:92:
64:ea:12:f5:4b:45:ce:35:85:09:7d:f3:c5:c3:36:c3:18:06:
41:bb:ce:36:65:04:e5:2e:15:72:a9:b6:de:af:e3:e7:47:6b:
7b:fb:02:19:88:8f:35:ae:de:10:78:3f:64:73:28:40:35:0c:
32:0b:16:f8:45:7c:55:fb:f2:33:ff:22:fe:5a:6e:d4:c7:11:
8f:80:7b:3c:b3:9f:7a:8c:6b:23:c4:b0:db:28:76:3a:e7:29:
08:8a:c5:90:9d:dd:15:49:be:42:31:2e:03:f1:20:52:f1:1d:
1e:90:b4:ad:3f:79:d0:2c:03:3c:21:91:cc:ba:a5:55:fb:5e:
53:03:48:d4:c4:fa:05:90:65:7e:32:41:d6:4d:4c:7b:46:64:
c4:ab:9c:38:5d:af:77:64:ed:f7:68:d2:3f:51:af:7e:70:01:
04:15:2f:e4:4f:22:28:2f:41:fd:85:4f:91:0b:fa:b8:0e:94:
ce:37:93:a4:24:7e:2d:43:39:55:cd:49:dc:41:d7:c9:ec:c1:
38:d5:1a:60:75:79:a0:ba:25:8d:92:b2:28:52:55:5b:16:0f:
cb:a2:04:9a:6e:9d:fe:c3:e1:cc:05:20:0b:d9:a8:bc:41:c1:
a4:70:8a:ff
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQnte2se3HrjdNkFSVXJR/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTRmMDA1ZjU5NzdjMzIzZWNkYmVhOWM1ZjhjY2EzNjll
NjVjNjcwHhcNMjUwMTAyMTU1MDIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmRmNDE3NjYzMDhhNjRjMzQzMDhjODc4OGU4NmViYTc4MTJiNjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG+9wlxd+HPNamo5HPIrt8BqaC/3
Ciz7UL9o+SKBG769Q6GQAk9Lnn7GqFbbnd7dKEAB6zXu5yHZEG8cDyrssVeqockt
Khuh+Sq41RafJ8bF/S/RfwvS0C2y1411N/9Yku/9lJ6BBtmPJfjMWw5ypWppDxpN
R36lrBMg86AdjHvwgo/VqXs8nBMZXZa5HRkwFmjfyegkY1BX08Ffakctde8pCRhf
zUcuiisVNyxsoM20n/bZ5LrI4ZZ2Gpo30/L0PHXIU9AU1cES3j91qYLcp5uxje6/
e8Nohl4qjsKprF6xjQwYIaP96OlEY2wUgGPaf/7OrMgGsdlQzsCybiHTawIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGbfQXZjCKZMNDCMh4jobrp4EraBMB8GA1UdIwQY
MBaAFKaU8AX1l3wyPs2+qcX4zKNp5lxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNzkxODctMGQ3YS00OTBiLTkyYjAt
MWI1MjdjZTE2NTExLzEvWnQ5QmRtTUlwa3cwTUl5SGlPaHV1bmdTdG9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jNzkxODctMGQ3YS00OTBiLTkyYjAtMWI1MjdjZTE2NTEx
LzEvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAbc3CAwQC
wY68AwQBw9jQMA0EAgACMAcDBQMqDJtAMA0GCSqGSIb3DQEBCwUAA4IBAQAtftT2
ArT2kBAaELRAWMMZh5Jk6hL1S0XONYUJffPFwzbDGAZBu842ZQTlLhVyqbber+Pn
R2t7+wIZiI81rt4QeD9kcyhANQwyCxb4RXxV+/Iz/yL+Wm7UxxGPgHs8s596jGsj
xLDbKHY65ykIisWQnd0VSb5CMS4D8SBS8R0ekLStP3nQLAM8IZHMuqVV+15TA0jU
xPoFkGV+MkHWTUx7RmTEq5w4Xa93ZO33aNI/Ua9+cAEEFS/kTyIoL0H9hU+RC/q4
DpTON5OkJH4tQzlVzUncQdfJ7ME41RpgdXmguiWNkrIoUlVbFg/LogSabp3+w+HM
BSAL2ai8QcGkcIr/
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:01 2025 by rpki-client