Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zosxNZuJrpl2WCXK75sIdGR3tBk.roa
File: zosxNZuJrpl2WCXK75sIdGR3tBk.roa (raw, json)
Hash identifier: FixADrWUcJc6QIlK1XKsZoHHDpaUvt+BViK2/hVQjnQ=
Subject key identifier: CE:8B:31:35:9B:89:AE:99:76:58:25:CA:EF:9B:08:74:64:77:B4:19
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01946CA73B5CE61A44168EFFA08E96B4F301
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zosxNZuJrpl2WCXK75sIdGR3tBk.roa
Signing time: Thu 16 Jan 2025 01:08:06 +0000
ROA not before: Thu 16 Jan 2025 01:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 185.52.136.0/24 maxlen: 24
193.160.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6c:a7:3b:5c:e6:1a:44:16:8e:ff:a0:8e:96:b4:f3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 16 01:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce8b31359b89ae99765825caef9b08746477b419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:2b:69:72:10:c3:7b:5b:44:bf:e1:24:e8:
f5:82:dd:96:e0:79:03:48:00:3f:b0:14:22:b5:ec:
77:e7:7a:fb:7c:6e:2e:5c:13:0c:61:e4:af:e2:68:
bf:7e:96:02:dc:ad:b4:0f:3e:71:9a:dc:42:05:52:
a9:dc:11:d3:4a:e0:42:72:2c:04:b3:82:8e:ed:08:
09:90:b4:f9:c9:85:77:92:77:f7:40:0b:69:71:7d:
e1:81:f2:65:1b:4a:26:89:d0:44:68:5b:3d:6c:ee:
65:e0:c6:fb:34:bd:34:ec:f0:63:2e:a6:46:e1:37:
8a:0f:e4:56:fd:52:de:97:86:7d:31:44:f4:46:a5:
33:80:58:50:e3:3b:ae:a4:e2:ba:32:28:ac:1a:c9:
20:49:ab:d0:fb:f7:03:fc:0f:2c:b1:81:31:07:01:
f7:f6:0f:60:37:8b:ca:5e:7f:d2:f4:d4:44:c8:06:
58:3f:55:73:4d:c2:d2:63:48:b8:e9:87:b4:34:f0:
3c:99:46:44:9b:f5:3b:a2:51:fb:7a:56:8a:89:1f:
21:12:c3:f7:be:09:5a:c9:83:0c:d3:f1:01:f2:13:
01:e1:71:3a:8a:c4:7d:72:fc:88:52:cf:6a:17:3d:
7b:5a:ab:7e:9d:c4:de:68:95:2e:4c:42:81:5b:9b:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:31:35:9B:89:AE:99:76:58:25:CA:EF:9B:08:74:64:77:B4:19
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zosxNZuJrpl2WCXK75sIdGR3tBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.136.0/24
193.160.80.0/22
Signature Algorithm: sha256WithRSAEncryption
71:6e:f3:dd:cf:f7:1d:be:9b:92:a8:92:67:7c:36:85:c7:59:
5e:a9:63:6b:83:59:2b:7c:a4:e0:8a:02:4b:27:dd:c1:81:37:
72:84:65:90:d6:3a:92:65:3a:37:34:31:62:83:f8:0d:c6:18:
3e:c4:a6:cf:79:98:1f:09:f1:d8:14:a5:25:85:b6:23:b7:72:
ad:2f:ef:13:0c:89:99:1a:1e:67:da:c7:41:02:4b:60:c7:ee:
27:31:b5:63:ea:c5:15:bf:4f:d7:d6:40:6e:b5:ba:e6:f0:26:
98:c0:27:74:59:52:21:e3:0d:9d:07:06:cb:c9:3b:61:dc:87:
b5:f2:fd:fc:d6:2b:7d:9f:0a:91:a3:e9:89:17:58:92:2b:ae:
7b:3d:a1:d5:e7:c8:3f:c2:60:88:e0:b0:8b:1e:a0:b1:a3:00:
14:5f:f2:a9:49:33:0b:7c:a5:46:90:dd:50:a1:39:8a:17:5d:
98:ab:32:58:0f:cd:11:2b:dd:f7:1f:0b:e8:44:d3:30:c1:d2:
7e:aa:17:2d:9a:88:25:8a:6d:69:b2:86:8e:6a:8a:d8:ee:64:
9b:b3:5b:0a:06:7a:b2:e8:11:7d:f3:56:c2:2e:ec:2a:3b:fa:
4c:55:d4:e5:1d:f0:de:61:40:27:0f:d1:e6:eb:f0:6d:90:77:
15:ae:50:11
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRspztc5hpEFo7/oI6WtPMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwMTE2MDEwODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZThiMzEzNTliODlhZTk5NzY1ODI1Y2FlZjliMDg3NDY0NzdiNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RIraXIQw3tbRL/hJOj1gt2W4HkD
SAA/sBQitex353r7fG4uXBMMYeSv4mi/fpYC3K20Dz5xmtxCBVKp3BHTSuBCciwE
s4KO7QgJkLT5yYV3knf3QAtpcX3hgfJlG0omidBEaFs9bO5l4Mb7NL007PBjLqZG
4TeKD+RW/VLel4Z9MUT0RqUzgFhQ4zuupOK6MiisGskgSavQ+/cD/A8ssYExBwH3
9g9gN4vKXn/S9NREyAZYP1VzTcLSY0i46Ye0NPA8mUZEm/U7olH7elaKiR8hEsP3
vglayYMM0/EB8hMB4XE6isR9cvyIUs9qFz17Wqt+ncTeaJUuTEKBW5u/9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM6LMTWbia6Zdlglyu+bCHRkd7QZMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvem9zeE5adUpycGwyV0NYSzc1c0lkR1IzdEJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuTSIAwQC
waBQMA0GCSqGSIb3DQEBCwUAA4IBAQBxbvPdz/cdvpuSqJJnfDaFx1leqWNrg1kr
fKTgigJLJ93BgTdyhGWQ1jqSZTo3NDFig/gNxhg+xKbPeZgfCfHYFKUlhbYjt3Kt
L+8TDImZGh5n2sdBAktgx+4nMbVj6sUVv0/X1kButbrm8CaYwCd0WVIh4w2dBwbL
yTth3Ie18v381it9nwqRo+mJF1iSK657PaHV58g/wmCI4LCLHqCxowAUX/KpSTML
fKVGkN1QoTmKF12YqzJYD80RK933HwvoRNMwwdJ+qhctmoglim1psoaOaorY7mSb
s1sKBnqy6BF981bCLuwqO/pMVdTlHfDeYUAnD9Hm6/BtkHcVrlAR
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:48 2025 by rpki-client