Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZJoP6Eyo-FPjbG6YCUC7bbPViHU.roa
File: ZJoP6Eyo-FPjbG6YCUC7bbPViHU.roa (raw, json)
Hash identifier: WO4yUOQnhMlV3qTdlEb8ZooMiOnhQDy/FMNDK7za4T4=
Subject key identifier: 64:9A:0F:E8:4C:A8:F8:53:E3:6C:6E:98:09:40:BB:6D:B3:D5:88:75
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194409A0AA11B313417E7C01E1C9B590FA9
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZJoP6Eyo-FPjbG6YCUC7bbPViHU.roa
Signing time: Tue 07 Jan 2025 11:50:24 +0000
ROA not before: Tue 07 Jan 2025 11:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216050
IP address blocks: 94.103.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:9a:0a:a1:1b:31:34:17:e7:c0:1e:1c:9b:59:0f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 7 11:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=649a0fe84ca8f853e36c6e980940bb6db3d58875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:dd:c1:4c:20:eb:66:34:ab:30:4c:59:93:f7:
1c:3b:02:b2:d2:9a:53:7e:d2:95:6c:97:d2:ac:d3:
03:e2:30:e2:a7:05:0b:d5:42:64:d6:3a:d6:5e:2d:
ff:5d:16:c4:2f:f1:67:e5:79:f1:ad:12:cd:68:67:
95:36:83:af:b3:2d:d7:8d:95:97:c0:e8:60:61:e6:
ed:76:25:01:9f:87:67:03:b3:c4:dd:aa:d0:4d:ca:
13:3b:56:16:c8:a8:aa:e0:ee:5f:45:f8:5a:0b:ea:
69:1c:91:ef:95:c9:b9:ab:20:74:b4:93:73:05:0d:
05:61:22:f8:2f:ae:1a:92:f4:c8:32:b1:8a:72:bb:
35:7d:cf:88:c7:cc:d3:f0:2c:a8:e2:9d:b7:af:ee:
d3:75:aa:8d:1d:5d:1c:e7:89:f1:a8:86:ad:04:4e:
76:4c:6b:ba:ca:f2:73:77:cd:1b:5a:64:d9:f1:cf:
b2:a2:76:18:5b:6d:0e:d8:ca:4e:c9:88:15:4b:af:
08:ec:cb:2c:9f:25:fc:43:3b:45:35:c3:ad:6b:13:
74:51:3b:73:d0:8d:98:5b:fc:65:3a:8f:6b:5d:e1:
0a:ba:1d:48:77:6e:ec:76:95:fd:7a:3f:36:4f:1a:
3a:fd:46:2a:09:35:76:0b:30:95:59:ad:c0:c3:6e:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:0F:E8:4C:A8:F8:53:E3:6C:6E:98:09:40:BB:6D:B3:D5:88:75
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZJoP6Eyo-FPjbG6YCUC7bbPViHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.56.0/22
Signature Algorithm: sha256WithRSAEncryption
19:17:be:e1:da:dc:b3:d7:d0:fb:bf:e7:68:fc:f6:da:e9:b5:
a8:6d:1c:b6:26:10:36:92:9a:50:66:5b:ad:4c:cc:20:36:d3:
25:3f:d6:8f:8c:0d:88:2d:9c:bc:bd:6c:4f:32:ae:5c:34:dd:
51:3f:f0:91:0c:75:a8:75:2d:8e:ff:b6:f9:bd:34:f9:10:c1:
28:d8:92:b4:b4:4f:56:2a:45:46:3d:01:2a:26:6e:49:b6:fd:
26:44:16:e7:1f:75:78:cf:2a:54:b9:92:ac:dd:2c:7f:2b:01:
c1:3d:a6:55:04:12:fa:fa:c0:b6:21:f5:8d:a8:71:9d:d2:0d:
20:d8:59:23:dd:59:e8:a6:1a:c4:8c:7e:c9:e1:a3:92:cf:36:
db:21:43:b6:05:82:01:1a:50:57:92:73:5a:b5:8b:e1:67:f4:
33:d7:65:f7:c3:de:24:6c:09:6a:c7:0a:97:c6:28:ef:7e:58:
2d:70:bc:38:86:0d:de:ac:4c:ca:ea:2a:eb:14:ee:b5:60:ba:
70:54:c7:ec:d5:21:d7:d4:ca:68:99:7c:6e:cc:43:ac:71:70:
84:46:a7:00:3e:2d:1f:d0:3c:46:8e:67:d0:07:f4:8a:f8:9f:
45:4c:48:da:95:54:b3:c5:c0:24:31:a0:b3:77:9c:fb:ac:e3:
93:5e:46:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRAmgqhGzE0F+fAHhybWQ+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjUwMTA3MTE1MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDlhMGZlODRjYThmODUzZTM2YzZlOTgwOTQwYmI2ZGIzZDU4ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+N3BTCDrZjSrMExZk/ccOwKy0ppT
ftKVbJfSrNMD4jDipwUL1UJk1jrWXi3/XRbEL/Fn5XnxrRLNaGeVNoOvsy3XjZWX
wOhgYebtdiUBn4dnA7PE3arQTcoTO1YWyKiq4O5fRfhaC+ppHJHvlcm5qyB0tJNz
BQ0FYSL4L64akvTIMrGKcrs1fc+Ix8zT8Cyo4p23r+7TdaqNHV0c54nxqIatBE52
TGu6yvJzd80bWmTZ8c+yonYYW20O2MpOyYgVS68I7MssnyX8QztFNcOtaxN0UTtz
0I2YW/xlOo9rXeEKuh1Id27sdpX9ej82Txo6/UYqCTV2CzCVWa3Aw265dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGSaD+hMqPhT42xumAlAu22z1Yh1MB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvWkpvUDZFeW8tRlBqYkc2WUNVQzdiYlBWaUhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXmc4MA0G
CSqGSIb3DQEBCwUAA4IBAQAZF77h2tyz19D7v+do/Pba6bWobRy2JhA2kppQZlut
TMwgNtMlP9aPjA2ILZy8vWxPMq5cNN1RP/CRDHWodS2O/7b5vTT5EMEo2JK0tE9W
KkVGPQEqJm5Jtv0mRBbnH3V4zypUuZKs3Sx/KwHBPaZVBBL6+sC2IfWNqHGd0g0g
2Fkj3VnophrEjH7J4aOSzzbbIUO2BYIBGlBXknNatYvhZ/Qz12X3w94kbAlqxwqX
xijvflgtcLw4hg3erEzK6irrFO61YLpwVMfs1SHX1MpomXxuzEOscXCERqcAPi0f
0DxGjmfQB/SK+J9FTEjalVSzxcAkMaCzd5z7rOOTXkbi
-----END CERTIFICATE-----
Generated at Thu Jan 23 15:55:47 2025 by rpki-client on console.sobornost.net