Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa
File: ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa (raw, json)
Hash identifier: 0aNwIJcWE8BWdRRapb0b1h0he6NRcvrOvXa3hI/Nxv4=
Subject key identifier: CE:DC:C9:F5:69:15:B8:65:B6:29:46:7E:35:83:9F:7D:73:27:FA:65
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0194266BF570BA18205C407F7F6A86B25C8C
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204964
IP address blocks: 185.233.156.0/22 maxlen: 22
185.233.160.0/22 maxlen: 22
185.243.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f5:70:ba:18:20:5c:40:7f:7f:6a:86:b2:5c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cedcc9f56915b865b629467e35839f7d7327fa65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:a0:51:9a:a2:c2:ad:87:1a:62:69:f8:d3:
8d:78:59:4a:ad:56:f7:92:1b:d9:ce:30:37:40:2a:
a3:d0:de:1c:fb:dc:7a:7b:6e:dd:16:4b:ab:5f:fd:
60:2b:3b:43:26:36:03:6e:4e:07:7c:f2:08:b6:00:
37:8c:2d:94:cf:3b:bd:b1:b2:8e:71:7b:85:fa:46:
1e:a4:54:9c:ce:38:15:1c:3f:0e:e5:4b:d2:64:c0:
d7:d5:80:88:bf:cf:ad:4e:d4:94:bc:e2:fa:27:c2:
db:9c:20:1c:96:a2:0c:8b:7d:7d:30:b5:15:b1:17:
18:e8:a5:90:fc:95:c8:a6:cd:a8:7e:4e:8b:e3:d2:
0c:18:d4:a2:1f:ab:9e:61:a2:35:04:4e:2a:0e:22:
f0:c9:cb:9b:56:b7:7c:39:b5:e8:30:4f:8e:8c:93:
a4:9b:ab:37:f8:2b:ed:bb:31:3a:99:66:fa:7d:af:
3e:34:3f:68:fe:2d:60:c7:c9:11:4c:c1:0d:be:e1:
12:40:14:4b:84:e1:8b:c5:b9:b9:b8:9a:fe:16:fc:
d5:ae:d1:1f:fc:82:38:7d:b8:56:45:ba:6a:64:eb:
01:fc:b0:8e:ca:cc:0d:a7:3a:30:2c:0f:1b:2a:a5:
1c:0e:d0:76:be:06:11:20:68:93:8c:1d:a6:68:65:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DC:C9:F5:69:15:B8:65:B6:29:46:7E:35:83:9F:7D:73:27:FA:65
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.156.0-185.233.163.255
185.243.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:fc:3f:e9:92:89:33:e8:ba:32:63:99:ef:c8:f6:c2:67:a6:
90:d9:66:de:a7:07:26:f2:42:b6:17:04:d9:de:18:99:32:28:
3d:ed:e6:5f:26:c6:31:79:d0:de:90:e8:4d:1f:46:78:a3:c6:
2b:fd:9f:a8:fc:17:9e:a9:f4:bb:6a:dc:5c:ad:a1:f9:db:76:
7c:26:92:3e:20:49:09:78:e8:ac:97:f4:66:61:01:77:85:23:
dc:07:c3:cc:42:76:5e:cd:51:96:60:22:a2:d7:7a:01:f0:34:
40:7a:e9:5e:01:0b:c8:18:fa:dd:4d:70:b3:3f:6e:b5:2c:2e:
c7:89:06:4a:37:04:de:37:3d:80:8b:24:9c:6f:f8:1b:9c:a6:
42:a7:15:5b:03:e6:cd:cb:7d:16:b6:8c:0a:e8:3f:42:aa:03:
75:bf:de:33:ff:03:3a:6d:f9:c8:db:67:31:61:2b:02:f9:c0:
e9:76:07:b8:75:57:cc:d5:44:96:7f:1f:cd:cd:cf:a7:c7:5d:
73:83:0e:cf:48:eb:74:d8:4f:7f:c6:cd:a1:cf:84:ad:3d:2d:
1e:ac:4a:e3:96:58:34:9c:ba:79:2a:e7:34:c4:8b:2e:a9:28:
3f:64:c8:e5:29:6e:56:71:56:a2:52:3f:be:26:8c:fd:85:c2:
ce:0e:71:01
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQma/VwuhggXEB/f2qGslyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4
MWEyOWYwHhcNMjUwMTAyMDk0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWRjYzlmNTY5MTViODY1YjYyOTQ2N2UzNTgzOWY3ZDczMjdmYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWqgUZqiwq2HGmJp+NONeFlKrVb3
khvZzjA3QCqj0N4c+9x6e27dFkurX/1gKztDJjYDbk4HfPIItgA3jC2Uzzu9sbKO
cXuF+kYepFSczjgVHD8O5UvSZMDX1YCIv8+tTtSUvOL6J8LbnCAclqIMi319MLUV
sRcY6KWQ/JXIps2ofk6L49IMGNSiH6ueYaI1BE4qDiLwycubVrd8ObXoME+OjJOk
m6s3+CvtuzE6mWb6fa8+ND9o/i1gx8kRTMENvuESQBRLhOGLxbm5uJr+FvzVrtEf
/II4fbhWRbpqZOsB/LCOyswNpzowLA8bKqUcDtB2vgYRIGiTjB2maGVJCwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFM7cyfVpFbhltilGfjWDn31zJ/plMB8GA1UdIwQY
MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt
Mzc1NzUzOWMyYWM5LzEvenR6SjlXa1Z1R1cyS1VaLU5ZT2ZmWE1uLW1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5
LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK56ZwD
BAK56aADBAK58xwwDQYJKoZIhvcNAQELBQADggEBAKT8P+mSiTPoujJjme/I9sJn
ppDZZt6nBybyQrYXBNneGJkyKD3t5l8mxjF50N6Q6E0fRnijxiv9n6j8F56p9Ltq
3Fytofnbdnwmkj4gSQl46KyX9GZhAXeFI9wHw8xCdl7NUZZgIqLXegHwNEB66V4B
C8gY+t1NcLM/brUsLseJBko3BN43PYCLJJxv+BucpkKnFVsD5s3LfRa2jAroP0Kq
A3W/3jP/Azpt+cjbZzFhKwL5wOl2B7h1V8zVRJZ/H83Nz6fHXXODDs9I63TYT3/G
zaHPhK09LR6sSuOWWDScunkq5zTEiy6pKD9kyOUpblZxVqJSP74mjP2Fws4OcQE=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net