Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/zTop8kv04M-CPRutWJMmw5M7s5M.roa
File: zTop8kv04M-CPRutWJMmw5M7s5M.roa (raw, json)
Hash identifier: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=
Subject key identifier: CD:3A:29:F2:4B:F4:E0:CF:82:3D:1B:AD:58:93:26:C3:93:3B:B3:93
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 0194221F4D2F57462098EC25E808851CBB23
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/zTop8kv04M-CPRutWJMmw5M7s5M.roa
Signing time: Wed 01 Jan 2025 13:47:44 +0000
ROA not before: Wed 01 Jan 2025 13:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209291
IP address blocks: 193.162.252.0/23 maxlen: 23
193.162.252.0/24 maxlen: 24
193.162.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:4d:2f:57:46:20:98:ec:25:e8:08:85:1c:bb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Jan 1 13:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd3a29f24bf4e0cf823d1bad589326c3933bb393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:c6:92:e7:75:56:b2:97:49:99:ea:be:38:
4e:5f:be:4f:2c:2f:a0:d3:b5:52:05:70:86:90:cf:
d8:d0:de:5e:22:4b:68:c2:2d:ab:d9:ba:1c:97:7f:
d9:b8:97:2f:c1:bb:9d:a4:53:74:7c:5b:6c:07:fb:
1f:e6:7e:ee:bb:8e:d1:b1:db:96:a4:76:df:b4:d6:
9f:a4:9d:ee:2f:b7:45:30:ef:1a:a8:88:a0:b1:37:
e4:1e:ea:7e:49:1c:70:ab:f7:a0:87:b6:2f:73:be:
8e:05:0b:b7:78:2b:04:b1:67:4e:12:93:4a:98:fc:
28:48:07:b4:d6:0c:2b:ed:a3:d0:ee:ec:22:61:98:
f5:e1:ca:61:1e:17:84:e3:1e:4b:91:74:e4:29:9f:
18:2f:8b:b3:de:18:c7:1b:32:64:ae:83:7f:5a:21:
44:dc:4e:2d:6f:fd:29:1f:8d:be:2d:2d:2f:b8:1d:
52:0a:fa:db:10:97:13:d2:ad:cb:b7:fc:45:a9:89:
7c:85:41:32:7e:db:39:1f:15:d5:5c:97:a1:ce:69:
e3:44:41:8d:27:84:94:4f:ba:b7:fd:84:39:64:9a:
60:53:fd:9b:49:f8:62:6e:38:b1:4d:35:ec:40:fc:
d4:09:5f:8e:a7:d8:f5:ab:ec:05:4e:5b:42:5d:f5:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:29:F2:4B:F4:E0:CF:82:3D:1B:AD:58:93:26:C3:93:3B:B3:93
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/zTop8kv04M-CPRutWJMmw5M7s5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.252.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:55:4c:05:fb:95:0a:bb:e1:1c:b2:8d:01:79:29:32:3c:d3:
82:80:33:04:a0:68:68:ed:a1:7f:95:ba:8d:3e:d3:b3:7c:69:
1d:1e:f7:be:e1:ed:07:8d:50:ed:0c:17:60:7b:a5:f8:c3:c6:
cd:94:88:26:4a:fd:18:13:c2:b8:60:5a:09:4a:4e:82:1e:13:
de:f2:34:aa:d0:fa:c0:98:20:38:29:63:82:cd:8f:32:20:38:
7f:66:54:f5:1e:13:37:f5:e2:53:d9:ec:60:e6:33:fe:ed:1a:
af:61:23:7d:99:fe:2d:f1:58:36:52:27:57:3d:18:2c:94:b9:
bd:a8:34:01:9f:ed:d7:1d:d5:49:03:8d:90:b3:ad:71:65:6a:
a3:9c:6b:40:ff:31:7b:b4:6f:60:0e:9b:3f:a3:fe:2c:5c:b8:
dc:a5:37:a3:9a:fa:c6:01:31:3f:45:b0:c2:84:59:a5:93:45:
31:6b:2f:18:78:9d:6b:57:e4:8d:f5:49:9c:31:d1:99:e7:f0:
ab:78:61:66:a0:c4:b9:26:28:46:3a:b5:13:dc:29:4e:b2:e2:
8f:a8:5e:9a:dc:5b:9b:8e:16:9b:c7:b5:5d:85:f4:1d:44:bf:
61:e7:92:56:d7:95:20:d8:11:f5:55:69:ac:7b:a9:b4:08:2e:
d7:d3:6a:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH00vV0YgmOwl6AiFHLsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjY4YjExMjQ0M2E0OTZlOTY2NTFkNTgyYjZjYzY0MTNm
YjVjNzYwHhcNMjUwMTAxMTM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDNhMjlmMjRiZjRlMGNmODIzZDFiYWQ1ODkzMjZjMzkzM2JiMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLzGkud1VrKXSZnqvjhOX75PLC+g
07VSBXCGkM/Y0N5eIktowi2r2bocl3/ZuJcvwbudpFN0fFtsB/sf5n7uu47RsduW
pHbftNafpJ3uL7dFMO8aqIigsTfkHup+SRxwq/egh7Yvc76OBQu3eCsEsWdOEpNK
mPwoSAe01gwr7aPQ7uwiYZj14cphHheE4x5LkXTkKZ8YL4uz3hjHGzJkroN/WiFE
3E4tb/0pH42+LS0vuB1SCvrbEJcT0q3Lt/xFqYl8hUEyfts5HxXVXJehzmnjREGN
J4SUT7q3/YQ5ZJpgU/2bSfhibjixTTXsQPzUCV+Op9j1q+wFTltCXfWoiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM06KfJL9ODPgj0brViTJsOTO7OTMB8GA1UdIwQY
MBaAFPFmixEkQ6SW6WZR1YK2zGQT+1x2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDkt
MWZiNjY4NWE4ZDk3LzEvelRvcDhrdjA0TS1DUFJ1dFdKTW13NU03czVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDktMWZiNjY4NWE4ZDk3
LzEvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwaL8MA0G
CSqGSIb3DQEBCwUAA4IBAQDIVUwF+5UKu+Ecso0BeSkyPNOCgDMEoGho7aF/lbqN
PtOzfGkdHve+4e0HjVDtDBdge6X4w8bNlIgmSv0YE8K4YFoJSk6CHhPe8jSq0PrA
mCA4KWOCzY8yIDh/ZlT1HhM39eJT2exg5jP+7RqvYSN9mf4t8Vg2UidXPRgslLm9
qDQBn+3XHdVJA42Qs61xZWqjnGtA/zF7tG9gDps/o/4sXLjcpTejmvrGATE/RbDC
hFmlk0Uxay8YeJ1rV+SN9UmcMdGZ5/CreGFmoMS5JihGOrUT3ClOsuKPqF6a3Fub
jhabx7VdhfQdRL9h55JW15Ug2BH1VWmse6m0CC7X02pk
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net