Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/zCw-9AZjP26xMi8ifkh6cllXO9s.roa
File: zCw-9AZjP26xMi8ifkh6cllXO9s.roa (raw, json)
Hash identifier: D1nIK1UZwod09XQftoKXhB7rZyXrZ+n2IZxVQbyl2wc=
Subject key identifier: CC:2C:3E:F4:06:63:3F:6E:B1:32:2F:22:7E:48:7A:72:59:57:3B:DB
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 01941FFAA569EFAAC71ACF99C9A5A51393E8
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/zCw-9AZjP26xMi8ifkh6cllXO9s.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207138
IP address blocks: 185.164.216.0/24 maxlen: 24
185.164.217.0/24 maxlen: 24
185.164.218.0/24 maxlen: 24
185.164.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a5:69:ef:aa:c7:1a:cf:99:c9:a5:a5:13:93:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc2c3ef406633f6eb1322f227e487a7259573bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:30:15:6f:ef:52:44:7b:89:68:b8:c4:05:
91:9d:d2:63:37:85:32:8a:b2:fa:c1:f7:0c:b5:13:
d3:7f:97:e5:c3:58:ab:34:6b:67:f6:74:4f:da:7c:
e8:e8:18:60:b1:3e:8f:db:ee:95:5f:18:4d:bf:32:
99:7a:60:71:c9:92:82:31:05:3d:a6:e1:67:aa:de:
9b:2f:30:c6:0f:1c:fd:1a:22:7d:20:5a:7c:41:c0:
67:e5:9e:0d:8f:81:bf:65:eb:49:43:c6:15:21:f9:
16:37:2c:52:c9:c0:3d:9d:1d:73:40:05:49:22:91:
75:40:21:60:ce:85:e0:5a:3b:d1:ee:6c:67:ab:0b:
ac:32:6b:36:ef:c5:1a:84:ac:4f:11:02:46:29:45:
fa:3d:eb:e8:d1:dd:38:73:50:88:4a:c8:8e:31:8a:
e4:e3:f7:73:b4:cc:f0:62:a0:3f:43:8e:e8:dc:69:
4a:b9:5c:cb:c3:c4:d3:90:f8:07:44:3d:8d:f0:e0:
ef:2c:7f:2f:e6:9a:8b:2c:42:b3:27:46:fe:70:a8:
42:b3:1d:6d:47:fe:5d:a5:08:0e:25:0b:76:c1:4b:
86:ba:47:89:c8:ef:cb:97:26:22:51:0d:f9:4c:e1:
15:ae:21:52:bd:d4:e2:1e:29:e8:af:55:7a:64:2c:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2C:3E:F4:06:63:3F:6E:B1:32:2F:22:7E:48:7A:72:59:57:3B:DB
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/zCw-9AZjP26xMi8ifkh6cllXO9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.216.0/22
Signature Algorithm: sha256WithRSAEncryption
42:06:03:5b:47:f4:91:6e:ef:e2:7b:9c:56:7c:82:bc:de:a3:
a0:11:b7:9f:44:48:20:b9:31:85:c9:a6:7f:19:68:f5:eb:a8:
27:cd:98:d7:bc:8c:1f:2d:59:9d:4d:9b:f1:e9:d9:b9:d6:8f:
78:ef:16:10:d8:89:91:1e:2c:ef:2e:d1:cc:58:64:ba:41:45:
af:31:b7:9c:b8:9e:02:c2:16:eb:09:c2:ad:c6:ba:df:5e:11:
3e:d2:53:92:5a:44:c4:e5:e6:b4:c6:d5:19:af:a8:cc:e8:a1:
cc:bb:0e:57:70:c9:40:c4:3e:42:5f:21:7a:93:ee:11:d1:c9:
e5:21:b9:f6:3f:df:13:11:64:e6:dd:ed:38:9d:87:5f:24:85:
1d:7f:0a:bd:82:35:6a:b8:4e:ef:08:f5:62:c8:cb:32:a3:df:
82:53:c2:5d:e1:6b:9f:0a:48:64:51:40:aa:5c:38:14:03:d5:
2f:25:95:f1:3d:74:0b:ce:c9:52:99:a8:d5:e3:87:94:1a:96:
71:bc:af:ef:06:dd:38:04:f7:42:c5:75:d2:0b:f0:2b:c9:b4:
ca:86:2f:9f:67:ca:cf:e2:6e:37:36:10:e7:c3:93:ce:cc:e3:
4c:86:d6:90:eb:c6:1a:d7:6c:c8:85:3f:7f:92:07:28:5f:4c:
50:7b:d2:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+qVp76rHGs+ZyaWlE5PoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDAzODg4YTQwNWU2MWI4N2QxNzA2ZjkzM2IzNjZhODZm
YjQyOTUwHhcNMjUwMTAxMDM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzJjM2VmNDA2NjMzZjZlYjEzMjJmMjI3ZTQ4N2E3MjU5NTczYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmkwFW/vUkR7iWi4xAWRndJjN4Uy
irL6wfcMtRPTf5flw1irNGtn9nRP2nzo6BhgsT6P2+6VXxhNvzKZemBxyZKCMQU9
puFnqt6bLzDGDxz9GiJ9IFp8QcBn5Z4Nj4G/ZetJQ8YVIfkWNyxSycA9nR1zQAVJ
IpF1QCFgzoXgWjvR7mxnqwusMms278UahKxPEQJGKUX6Pevo0d04c1CISsiOMYrk
4/dztMzwYqA/Q47o3GlKuVzLw8TTkPgHRD2N8ODvLH8v5pqLLEKzJ0b+cKhCsx1t
R/5dpQgOJQt2wUuGukeJyO/LlyYiUQ35TOEVriFSvdTiHinor1V6ZCxoNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMwsPvQGYz9usTIvIn5IenJZVzvbMB8GA1UdIwQY
MBaAFGLQOIikBeYbh9Fwb5M7NmqG+0KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUt
NGQ2ODVhY2E4Mjc5LzEvekN3LTlBWmpQMjZ4TWk4aWZraDZjbGxYTzlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUtNGQ2ODVhY2E4Mjc5
LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaTYMA0G
CSqGSIb3DQEBCwUAA4IBAQBCBgNbR/SRbu/ie5xWfIK83qOgEbefREgguTGFyaZ/
GWj166gnzZjXvIwfLVmdTZvx6dm51o947xYQ2ImRHizvLtHMWGS6QUWvMbecuJ4C
whbrCcKtxrrfXhE+0lOSWkTE5ea0xtUZr6jM6KHMuw5XcMlAxD5CXyF6k+4R0cnl
Ibn2P98TEWTm3e04nYdfJIUdfwq9gjVquE7vCPViyMsyo9+CU8Jd4WufCkhkUUCq
XDgUA9UvJZXxPXQLzslSmajV44eUGpZxvK/vBt04BPdCxXXSC/ArybTKhi+fZ8rP
4m43NhDnw5POzONMhtaQ68Ya12zIhT9/kgcoX0xQe9JO
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:43:10 2025 by rpki-client