Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/Zw30iDu4jzobtmXOoRJnqyr607Y.roa
File: Zw30iDu4jzobtmXOoRJnqyr607Y.roa (raw, json)
Hash identifier: 4CedzSiaWJKzH9a7MTqU1eCaCh1zeNHdX5Usa6vZk+8=
Subject key identifier: 67:0D:F4:88:3B:B8:8F:3A:1B:B6:65:CE:A1:12:67:AB:2A:FA:D3:B6
Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial: 0194244547E7B6E8627C98F69B4540C1E4B4
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/Zw30iDu4jzobtmXOoRJnqyr607Y.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49636
IP address blocks: 91.213.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:47:e7:b6:e8:62:7c:98:f6:9b:45:40:c1:e4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=670df4883bb88f3a1bb665cea11267ab2afad3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:ad:11:5c:2c:f5:58:fd:fc:55:fc:d3:bc:
7c:30:bb:af:68:42:8f:17:f8:c5:bd:82:46:82:de:
a1:76:28:e8:8c:d4:92:d5:16:72:be:cd:85:f3:fc:
8a:33:ef:f2:d0:c2:ce:61:0d:b9:29:9a:db:d3:f1:
ad:c0:5a:b7:48:dd:47:95:42:68:db:f6:32:61:ef:
14:b4:c3:fc:e2:ab:b7:1f:c6:66:c8:54:fe:e6:1c:
d7:03:aa:4a:cd:e2:0f:e5:dd:92:0e:58:93:6d:0c:
1e:d6:fa:13:34:77:46:34:1f:bf:90:da:aa:f9:f6:
f7:f4:dd:38:ae:c9:e8:20:2a:2f:97:aa:68:cb:94:
26:ea:06:43:dc:d8:d1:14:2d:71:20:1f:94:de:9b:
07:2e:7e:98:89:36:ed:05:c9:40:e1:8d:89:7d:0b:
31:20:8d:5f:1f:96:60:57:48:2b:d1:9e:1e:fa:4c:
e8:f8:70:88:d5:60:89:0f:c8:4d:7e:18:f5:b2:05:
10:40:5c:0d:e6:9b:e4:be:de:22:3f:96:28:e7:ca:
9d:b9:c0:16:08:d5:a9:6f:e6:81:73:f6:51:16:e2:
5b:fa:03:b1:6b:23:45:6f:b3:4c:aa:2f:fd:9c:64:
da:0d:70:74:0d:d6:0c:19:ce:fc:cc:3b:82:33:35:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:F4:88:3B:B8:8F:3A:1B:B6:65:CE:A1:12:67:AB:2A:FA:D3:B6
X509v3 Authority Key Identifier:
keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/Zw30iDu4jzobtmXOoRJnqyr607Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:5b:a7:f1:c9:0a:db:a9:63:c8:b9:8b:b6:09:5d:f9:13:3d:
30:e5:7e:49:d4:14:d2:1e:38:3d:2a:23:9f:fe:af:ea:d6:d5:
19:bb:ee:8d:48:f4:40:dc:eb:c0:1c:7a:cf:c9:35:f7:61:f7:
23:34:7a:fb:05:59:d6:69:b2:fc:66:e3:ec:d0:03:5d:42:55:
77:ae:4c:b5:6b:4a:92:cf:5f:36:ed:7a:3c:3e:bc:78:f7:d4:
24:69:d7:49:a8:df:64:6a:ff:dc:a9:78:7c:8c:68:8e:23:1e:
ac:d1:9e:f7:09:d3:38:09:48:e7:59:c4:df:61:1b:4a:91:27:
5a:4f:8e:4b:3b:2c:6c:85:a3:4f:4b:e2:c3:68:38:bc:54:6b:
7e:20:74:0d:9b:f7:75:31:28:74:80:cc:c0:a3:b9:72:e6:40:
d3:ea:ba:03:ad:3a:2e:68:76:20:1c:ca:bf:58:ae:1f:c3:8a:
73:06:0d:8a:80:b4:ba:d3:33:d0:4e:56:35:66:c9:09:ec:c1:
06:02:11:aa:16:24:0d:66:11:0d:68:c3:ae:5d:ea:87:ac:94:
a8:88:bf:b5:5e:bf:53:26:24:32:28:b1:c9:41:13:7b:23:a3:
03:b4:36:94:f0:84:d1:e4:77:f8:30:87:fd:73:3b:3f:23:56:
b7:5c:05:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRUfntuhifJj2m0VAweS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOGY0YjAyOWUyOWVlZGYyN2Q0NWNkNGQzOTAxMDgzMjZi
ZTI2ZjAwHhcNMjUwMTAxMjM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzBkZjQ4ODNiYjg4ZjNhMWJiNjY1Y2VhMTEyNjdhYjJhZmFkM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFStEVws9Vj9/FX807x8MLuvaEKP
F/jFvYJGgt6hdijojNSS1RZyvs2F8/yKM+/y0MLOYQ25KZrb0/GtwFq3SN1HlUJo
2/YyYe8UtMP84qu3H8ZmyFT+5hzXA6pKzeIP5d2SDliTbQwe1voTNHdGNB+/kNqq
+fb39N04rsnoICovl6poy5Qm6gZD3NjRFC1xIB+U3psHLn6YiTbtBclA4Y2JfQsx
II1fH5ZgV0gr0Z4e+kzo+HCI1WCJD8hNfhj1sgUQQFwN5pvkvt4iP5Yo58qducAW
CNWpb+aBc/ZRFuJb+gOxayNFb7NMqi/9nGTaDXB0DdYMGc78zDuCMzVwzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcN9Ig7uI86G7ZlzqESZ6sq+tO2MB8GA1UdIwQY
MBaAFJqPSwKeKe7fJ9Rc1NOQEIMmvibwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xOTQ1ODktNmM2ZS00N2NlLTk3MzMt
MTM5NTI2NDNmMTE0LzEvWnczMGlEdTRqem9idG1YT29SSm5xeXI2MDdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xOTQ1ODktNmM2ZS00N2NlLTk3MzMtMTM5NTI2NDNmMTE0
LzEvbW85TEFwNHA3dDhuMUZ6VTA1QVFneWEtSnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9VQMA0G
CSqGSIb3DQEBCwUAA4IBAQChW6fxyQrbqWPIuYu2CV35Ez0w5X5J1BTSHjg9KiOf
/q/q1tUZu+6NSPRA3OvAHHrPyTX3YfcjNHr7BVnWabL8ZuPs0ANdQlV3rky1a0qS
z1827Xo8Prx499QkaddJqN9kav/cqXh8jGiOIx6s0Z73CdM4CUjnWcTfYRtKkSda
T45LOyxshaNPS+LDaDi8VGt+IHQNm/d1MSh0gMzAo7ly5kDT6roDrTouaHYgHMq/
WK4fw4pzBg2KgLS60zPQTlY1ZskJ7MEGAhGqFiQNZhENaMOuXeqHrJSoiL+1Xr9T
JiQyKLHJQRN7I6MDtDaU8ITR5Hf4MIf9czs/I1a3XAWD
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:57 2025 by rpki-client on console.sobornost.net