Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZvrdVCWpXAXTujsmndRLswViJJU.roa
File: ZvrdVCWpXAXTujsmndRLswViJJU.roa (raw, json)
Hash identifier: P/5wErgVrRVWJ60pM9zEyNqrb5sWH/ap5nk/qq2NoNU=
Subject key identifier: 66:FA:DD:54:25:A9:5C:05:D3:BA:3B:26:9D:D4:4B:B3:05:62:24:95
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB8FE983975478BB58B0C387941ED4
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZvrdVCWpXAXTujsmndRLswViJJU.roa
Signing time: Wed 01 Jan 2025 17:48:19 +0000
ROA not before: Wed 01 Jan 2025 17:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8f:e9:83:97:54:78:bb:58:b0:c3:87:94:1e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66fadd5425a95c05d3ba3b269dd44bb305622495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:2c:4c:b7:21:d7:83:4f:a1:f6:36:4b:89:
0e:32:ad:79:76:91:5a:0e:be:33:5e:33:d6:c8:ff:
19:0a:f8:ae:15:ae:2a:fe:1e:c6:c7:23:1f:b0:19:
10:dc:ad:89:d7:49:ce:06:d0:e2:b2:56:da:f9:de:
f9:1d:d4:d3:ef:a2:71:72:fd:de:cb:38:53:23:bf:
1b:83:d7:b2:31:43:b7:82:3b:30:47:60:14:6c:0a:
c5:80:e0:43:53:08:17:53:8d:a2:46:f3:29:2e:81:
e4:03:f4:67:ed:86:2d:bf:75:a3:81:40:d9:fd:c2:
c9:8e:42:97:c5:7f:5b:50:03:14:c4:14:b9:dc:59:
4f:06:57:e5:90:da:21:56:bc:ec:60:09:bc:a3:e2:
b9:9e:fc:d5:fd:f9:de:38:a0:5f:f2:0a:e4:3e:d3:
59:0c:31:93:f6:c7:17:b2:61:18:39:90:8c:e0:7a:
5d:b6:2e:c6:f3:6f:52:80:5e:7a:ec:ed:22:a5:b2:
5e:04:c0:e4:fb:ea:56:bb:41:bf:fe:1e:bd:1e:e5:
9d:62:17:0b:d2:ba:9e:c3:0e:e9:03:5f:c7:ca:95:
ca:78:7f:fd:a0:69:d8:b1:c2:03:13:7f:95:10:62:
0e:ba:15:3b:3b:f4:5d:62:37:03:c9:c0:0b:82:59:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FA:DD:54:25:A9:5C:05:D3:BA:3B:26:9D:D4:4B:B3:05:62:24:95
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZvrdVCWpXAXTujsmndRLswViJJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
57:18:14:0e:5d:32:ea:70:df:1b:4a:32:3f:3d:78:80:bd:02:
c3:53:ae:f1:36:a3:1c:09:da:a6:b8:cd:c0:40:b8:de:6c:69:
4b:45:84:6b:16:fd:41:0e:be:19:d3:82:0f:a1:67:f3:51:5a:
c4:42:1c:8c:10:da:a3:ba:09:3c:ef:df:7f:d9:5d:0b:9f:53:
ac:85:73:84:3b:68:27:00:33:53:7b:28:9e:80:d5:f5:50:70:
e3:72:3b:fb:10:bc:d6:60:c7:76:50:9d:3c:38:ad:b3:d5:c0:
19:7f:6e:39:87:41:54:1b:c4:91:59:a2:41:67:41:d2:5b:bb:
7f:b3:79:04:71:48:6d:f6:e2:00:f5:f0:c9:f2:43:64:dc:96:
e7:44:f4:0c:21:7c:df:d9:96:1f:29:60:10:bf:ca:b7:ba:d1:
5f:f1:f0:f9:8b:70:0b:b3:9f:9a:90:29:38:50:49:79:0f:ea:
d9:05:79:f1:d5:55:ea:92:12:7c:45:1a:20:e7:c9:0a:be:13:
75:fe:af:4a:8d:e1:91:d2:ac:fa:5f:18:fc:46:46:f5:c9:9a:
9a:5b:c2:22:16:68:d7:2a:56:18:db:38:8c:86:2c:2e:9e:0f:
46:f4:33:d1:a3:87:cc:34:e7:9d:f1:5d:a5:1a:45:48:86:25:
a7:cd:a8:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQi+4/pg5dUeLtYsMOHlB7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwMTAxMTc0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmZhZGQ1NDI1YTk1YzA1ZDNiYTNiMjY5ZGQ0NGJiMzA1NjIyNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG8sTLch14NPofY2S4kOMq15dpFa
Dr4zXjPWyP8ZCviuFa4q/h7GxyMfsBkQ3K2J10nOBtDislba+d75HdTT76Jxcv3e
yzhTI78bg9eyMUO3gjswR2AUbArFgOBDUwgXU42iRvMpLoHkA/Rn7YYtv3WjgUDZ
/cLJjkKXxX9bUAMUxBS53FlPBlflkNohVrzsYAm8o+K5nvzV/fneOKBf8grkPtNZ
DDGT9scXsmEYOZCM4Hpdti7G829SgF567O0ipbJeBMDk++pWu0G//h69HuWdYhcL
0rqeww7pA1/HypXKeH/9oGnYscIDE3+VEGIOuhU7O/RdYjcDycALgllRZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGb63VQlqVwF07o7Jp3US7MFYiSVMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvWnZyZFZDV3BYQVhUdWpzbW5kUkxzd1ZpSkpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWJc4AwQC
WNHoMA0GCSqGSIb3DQEBCwUAA4IBAQBXGBQOXTLqcN8bSjI/PXiAvQLDU67xNqMc
CdqmuM3AQLjebGlLRYRrFv1BDr4Z04IPoWfzUVrEQhyMENqjugk8799/2V0Ln1Os
hXOEO2gnADNTeyiegNX1UHDjcjv7ELzWYMd2UJ08OK2z1cAZf245h0FUG8SRWaJB
Z0HSW7t/s3kEcUht9uIA9fDJ8kNk3JbnRPQMIXzf2ZYfKWAQv8q3utFf8fD5i3AL
s5+akCk4UEl5D+rZBXnx1VXqkhJ8RRog58kKvhN1/q9KjeGR0qz6Xxj8Rkb1yZqa
W8IiFmjXKlYY2ziMhiwung9G9DPRo4fMNOed8V2lGkVIhiWnzai6
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:22:26 2025 by rpki-client