Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa
File: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (raw, json)
Hash identifier: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=
Subject key identifier: 67:9A:61:85:5C:15:7E:92:BA:76:47:39:0B:5F:AF:62:68:5C:61:45
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0195140E17ACD8AEA4F73AB977DD969837E9
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa
Signing time: Mon 17 Feb 2025 13:17:02 +0000
ROA not before: Mon 17 Feb 2025 13:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199270
IP address blocks: 141.226.249.0/24 maxlen: 24
185.23.172.0/23 maxlen: 24
185.23.172.0/24 maxlen: 24
185.23.174.0/24 maxlen: 24
2a00:66a0::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:0e:17:ac:d8:ae:a4:f7:3a:b9:77:dd:96:98:37:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Feb 17 13:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=679a61855c157e92ba7647390b5faf62685c6145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:5d:f9:70:49:44:e1:72:18:71:66:07:87:
da:5f:a8:97:64:88:03:db:9d:8c:b0:09:d7:da:de:
89:16:d2:8d:f4:ab:62:7b:dc:c4:04:ef:c7:1b:5d:
03:82:cc:d2:9f:2c:44:7b:5b:64:cd:f2:e2:fb:2f:
99:44:7a:c4:88:14:a9:27:39:20:71:fe:3b:c3:fe:
b0:dc:d5:b0:2b:0e:08:36:fb:fe:98:84:f1:53:01:
79:8c:39:49:7a:75:08:f1:1d:bd:0c:29:b8:a6:58:
b7:4f:8f:7b:e0:17:30:0a:20:26:57:35:ff:ef:fa:
8b:48:45:d7:94:09:03:5a:38:f6:8c:c0:de:7c:5a:
ce:51:e0:98:06:ce:ba:c3:80:9c:40:01:ba:eb:2d:
70:5c:fa:7d:17:dc:eb:69:99:07:52:ab:32:0b:27:
50:cc:05:6f:37:99:b8:3c:b2:ac:a3:50:ab:e1:5e:
5b:29:4f:21:60:be:da:4f:b4:32:39:c0:43:de:34:
f3:00:96:1c:3f:2d:4c:77:4e:a3:dd:66:17:44:bd:
b2:bc:41:31:ac:5d:cf:07:32:6d:d9:34:08:44:05:
2c:0e:82:a5:eb:6b:f7:c3:cb:9a:6a:77:04:41:3d:
46:e2:2d:67:d3:84:02:2f:1b:8f:6e:2e:79:62:40:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9A:61:85:5C:15:7E:92:BA:76:47:39:0B:5F:AF:62:68:5C:61:45
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.249.0/24
185.23.172.0-185.23.174.255
IPv6:
2a00:66a0::/35
Signature Algorithm: sha256WithRSAEncryption
08:fc:49:3e:3d:8f:1f:ee:0d:88:41:ef:69:a2:23:6b:47:40:
e7:08:5f:f4:fe:33:3e:b6:6f:1d:6d:b4:b0:6f:bc:6a:9a:7a:
71:79:bf:7d:72:19:7c:2d:f4:84:8c:3a:83:52:7b:38:1b:25:
a5:dd:15:dc:0a:ae:ed:8d:46:36:78:af:71:af:77:c4:b0:3f:
00:be:31:00:d3:ae:9a:0e:72:8d:65:9c:f4:a5:b8:62:e5:bd:
a7:54:3d:5d:1b:48:c3:5a:4c:eb:73:70:11:25:83:f5:96:47:
fa:18:74:3c:03:1f:df:dd:96:66:36:fa:57:cd:f4:dc:63:37:
a8:ca:a2:d5:a8:6e:f3:60:34:2c:c8:49:6c:e5:ae:f2:20:21:
7a:f8:4f:49:fc:0d:99:1b:bc:c0:93:d7:5a:63:b0:b6:db:ca:
36:64:40:b7:9e:71:d5:74:20:92:92:d7:47:69:7d:c2:47:98:
52:8e:61:18:c7:67:8e:a4:ab:10:4e:85:cb:a1:ef:f9:4c:58:
50:60:1d:2d:a8:ca:f2:18:d2:01:f0:07:3e:71:32:9c:22:ec:
2f:7b:8a:77:49:9e:2a:d5:46:e0:75:8d:91:c9:29:04:d8:e0:
9b:b3:23:4c:64:79:3d:95:b3:11:95:56:0f:a8:ef:7c:bb:dd:
06:ed:77:a8
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZUUDhes2K6k9zq5d92WmDfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjUwMjE3MTMxNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzlhNjE4NTVjMTU3ZTkyYmE3NjQ3MzkwYjVmYWY2MjY4NWM2MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuld+XBJROFyGHFmB4faX6iXZIgD
252MsAnX2t6JFtKN9Ktie9zEBO/HG10DgszSnyxEe1tkzfLi+y+ZRHrEiBSpJzkg
cf47w/6w3NWwKw4INvv+mITxUwF5jDlJenUI8R29DCm4pli3T4974BcwCiAmVzX/
7/qLSEXXlAkDWjj2jMDefFrOUeCYBs66w4CcQAG66y1wXPp9F9zraZkHUqsyCydQ
zAVvN5m4PLKso1Cr4V5bKU8hYL7aT7QyOcBD3jTzAJYcPy1Md06j3WYXRL2yvEEx
rF3PBzJt2TQIRAUsDoKl62v3w8uaancEQT1G4i1n04QCLxuPbi55YkDJ0QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGeaYYVcFX6SunZHOQtfr2JoXGFFMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvWjVwaGhWd1ZmcEs2ZGtjNUMxLXZZbWhjWVVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUAwQAjeL5MAwD
BAK5F6wDBAC5F64wDgQCAAIwCAMGBSoAZqAAMA0GCSqGSIb3DQEBCwUAA4IBAQAI
/Ek+PY8f7g2IQe9poiNrR0DnCF/0/jM+tm8dbbSwb7xqmnpxeb99chl8LfSEjDqD
Uns4GyWl3RXcCq7tjUY2eK9xr3fEsD8AvjEA066aDnKNZZz0pbhi5b2nVD1dG0jD
Wkzrc3ARJYP1lkf6GHQ8Ax/f3ZZmNvpXzfTcYzeoyqLVqG7zYDQsyEls5a7yICF6
+E9J/A2ZG7zAk9daY7C228o2ZEC3nnHVdCCSktdHaX3CR5hSjmEYx2eOpKsQToXL
oe/5TFhQYB0tqMryGNIB8Ac+cTKcIuwve4p3SZ4q1UbgdY2RySkE2OCbsyNMZHk9
lbMRlVYPqO98u90G7Xeo
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net