Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/ZRax88V5p4U88t_b2oPo8_w8EVw.roa
File: ZRax88V5p4U88t_b2oPo8_w8EVw.roa (raw, json)
Hash identifier: wbdz2WKZbk8YP6i6XOpsIsE71ar5pDtmK77QBUlEFwg=
Subject key identifier: 65:16:B1:F3:C5:79:A7:85:3C:F2:DF:DB:DA:83:E8:F3:FC:3C:11:5C
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 0194252235CF9B8BE7CE4BF50448147754E8
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/ZRax88V5p4U88t_b2oPo8_w8EVw.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206892
IP address blocks: 91.206.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:35:cf:9b:8b:e7:ce:4b:f5:04:48:14:77:54:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6516b1f3c579a7853cf2dfdbda83e8f3fc3c115c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:9a:0a:9f:68:b5:8b:3a:75:37:a6:58:b6:
42:4f:93:59:7b:8d:56:97:f7:a2:55:9c:9a:86:43:
f0:98:b8:29:d0:c7:8d:a6:90:e0:6d:82:6c:e9:b9:
b6:88:02:df:71:cf:2c:4c:9a:02:b6:2c:fa:b4:ea:
81:7e:cb:88:72:50:09:29:65:de:d1:d5:9c:a0:d3:
96:57:35:ec:31:60:9a:f2:99:fa:ed:96:be:90:3a:
09:31:8f:0c:f9:a0:d1:0e:48:3c:8b:68:5a:1a:71:
52:f3:cc:1c:49:fa:ec:8c:83:0d:c8:85:1b:27:12:
a2:b6:4f:41:ac:d2:50:98:91:16:c2:eb:9d:3d:d6:
75:e6:11:02:7b:d4:ea:65:41:72:b0:28:bf:aa:fb:
85:b6:2c:b8:45:da:8e:51:4c:2a:7b:d0:32:74:e0:
8d:82:b2:7a:a0:20:8b:85:24:9c:cb:71:0c:51:71:
32:e0:f3:41:0e:e9:ba:a3:8a:ed:d8:e8:91:4e:3c:
80:ea:a5:87:1a:a8:ce:a9:3a:6d:d9:64:60:60:b6:
3c:bd:2b:fb:0a:da:af:95:93:0b:30:24:1e:88:6b:
61:3a:18:4d:35:bd:98:ad:fe:68:fa:11:5d:b5:54:
a5:eb:56:7e:c2:a0:75:f0:74:05:2f:de:81:ff:5b:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:B1:F3:C5:79:A7:85:3C:F2:DF:DB:DA:83:E8:F3:FC:3C:11:5C
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/ZRax88V5p4U88t_b2oPo8_w8EVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8e:bc:f1:9a:01:51:74:9a:71:8b:fd:0d:42:f4:02:7c:34:
d4:29:ce:f3:a3:34:74:a5:37:8b:75:c0:8a:e6:0e:51:b6:d6:
eb:7e:ec:12:46:1a:09:d4:ac:35:0a:79:d9:92:e6:b2:c2:b8:
5a:fc:b6:5c:7b:f2:7a:73:3e:f0:19:5c:a3:e3:fa:cf:4b:9c:
99:1e:fc:c9:6b:b5:82:7e:fa:5e:2d:f5:6b:48:35:a7:c3:dd:
0b:3e:dc:ea:c1:77:df:95:63:d6:b8:b8:87:01:a5:9d:58:85:
c7:ad:70:c9:c7:a5:fb:f6:c9:3a:f6:20:e1:fa:96:91:b4:81:
62:29:47:65:73:fc:86:df:d7:c6:91:f8:7f:29:79:e1:a7:43:
ff:36:2c:81:29:13:ec:b2:ef:4c:fd:98:67:2b:23:8d:03:8a:
be:c5:b6:6f:d1:2d:ab:cb:e0:30:b4:6a:8b:3d:d0:a2:4a:1d:
e9:c1:e5:81:c2:25:42:3f:8a:8d:d5:4e:83:d8:a7:4b:9b:d6:
8f:e3:a1:91:67:3f:7e:42:e7:ff:7a:67:c1:1a:9b:b9:a1:6e:
b8:38:15:1d:60:80:f0:73:08:87:1b:cf:66:0a:ec:f7:af:e8:
eb:86:33:f6:c2:0c:a5:94:74:4a:b6:c2:da:c9:db:81:b2:04:
51:94:a8:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIjXPm4vnzkv1BEgUd1ToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTM0OTY0NDMyMzMxNWY4MDZkYzY0Y2E0ZDllZDk1NTc3
NjI3NTcwHhcNMjUwMTAyMDM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTE2YjFmM2M1NzlhNzg1M2NmMmRmZGJkYTgzZThmM2ZjM2MxMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9KaCp9otYs6dTemWLZCT5NZe41W
l/eiVZyahkPwmLgp0MeNppDgbYJs6bm2iALfcc8sTJoCtiz6tOqBfsuIclAJKWXe
0dWcoNOWVzXsMWCa8pn67Za+kDoJMY8M+aDRDkg8i2haGnFS88wcSfrsjIMNyIUb
JxKitk9BrNJQmJEWwuudPdZ15hECe9TqZUFysCi/qvuFtiy4RdqOUUwqe9AydOCN
grJ6oCCLhSScy3EMUXEy4PNBDum6o4rt2OiRTjyA6qWHGqjOqTpt2WRgYLY8vSv7
CtqvlZMLMCQeiGthOhhNNb2Yrf5o+hFdtVSl61Z+wqB18HQFL96B/1uzYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUWsfPFeaeFPPLf29qD6PP8PBFcMB8GA1UdIwQY
MBaAFFWTSWRDIzFfgG3GTKTZ7ZVXdidXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTIt
NjA2NmQ4OWYwNWI4LzEvWlJheDg4VjVwNFU4OHRfYjJvUG84X3c4RVZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTItNjA2NmQ4OWYwNWI4
LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW85wMA0G
CSqGSIb3DQEBCwUAA4IBAQCjjrzxmgFRdJpxi/0NQvQCfDTUKc7zozR0pTeLdcCK
5g5RttbrfuwSRhoJ1Kw1CnnZkuaywrha/LZce/J6cz7wGVyj4/rPS5yZHvzJa7WC
fvpeLfVrSDWnw90LPtzqwXfflWPWuLiHAaWdWIXHrXDJx6X79sk69iDh+paRtIFi
KUdlc/yG39fGkfh/KXnhp0P/NiyBKRPssu9M/ZhnKyONA4q+xbZv0S2ry+AwtGqL
PdCiSh3pweWBwiVCP4qN1U6D2KdLm9aP46GRZz9+Quf/emfBGpu5oW64OBUdYIDw
cwiHG89mCuz3r+jrhjP2wgyllHRKtsLayduBsgRRlKgo
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:59:20 2025 by rpki-client