Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/zXCsm9SAAByjdh9cxrFixEv4QxU.roa
File: zXCsm9SAAByjdh9cxrFixEv4QxU.roa (raw, json)
Hash identifier: LUvS7mAwFZ6C/F9nm3WkyPABrI+5LNzyM7MV+k5m7w4=
Subject key identifier: CD:70:AC:9B:D4:80:00:1C:A3:76:1F:5C:C6:B1:62:C4:4B:F8:43:15
Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial: 0194228DDC6E4188530917A7FA91670A0B23
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/zXCsm9SAAByjdh9cxrFixEv4QxU.roa
Signing time: Wed 01 Jan 2025 15:48:29 +0000
ROA not before: Wed 01 Jan 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212889
IP address blocks: 185.164.20.0/24 maxlen: 24
185.164.22.0/24 maxlen: 24
185.164.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:dc:6e:41:88:53:09:17:a7:fa:91:67:0a:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd70ac9bd480001ca3761f5cc6b162c44bf84315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:6f:74:e4:1e:cf:61:51:17:94:c3:2c:77:
d3:f2:f6:f2:32:1c:5f:56:55:0a:61:9f:06:64:21:
55:01:25:41:bd:8a:18:16:a7:92:f3:41:39:fa:03:
89:b3:43:1f:47:ec:a3:03:18:cc:fd:8e:b7:23:af:
5c:87:88:49:cb:0f:24:a6:9a:d6:80:ad:23:13:24:
94:d3:35:0c:18:fa:43:9c:f5:dd:b4:8d:82:ab:fe:
e2:e1:2f:af:46:7c:8f:e7:a3:dd:40:e5:8e:1c:e9:
24:ae:a9:1d:c4:80:ed:2b:a3:b2:3d:96:b0:d4:19:
7f:7b:45:d4:86:71:a8:06:9d:00:7e:b8:bd:04:2a:
f7:39:39:40:7a:d6:65:f7:3b:d8:64:66:4b:06:d9:
99:bd:93:7e:93:58:93:c5:77:01:22:0a:78:63:f2:
ef:48:f5:ed:7a:43:35:a1:7f:21:0c:98:20:ce:61:
6d:cf:76:1f:fb:22:1d:e9:af:8c:25:63:20:be:5b:
e5:c5:99:92:dd:11:75:b4:6e:af:fc:22:66:34:a3:
09:40:2a:ab:b5:71:10:ec:c6:65:8d:89:24:d6:99:
77:d4:1e:71:d8:bf:d7:48:fd:e0:3c:dd:95:ea:fe:
96:6d:75:86:2f:7b:d1:c2:82:0b:c6:7e:3f:48:2e:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:70:AC:9B:D4:80:00:1C:A3:76:1F:5C:C6:B1:62:C4:4B:F8:43:15
X509v3 Authority Key Identifier:
keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/zXCsm9SAAByjdh9cxrFixEv4QxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.20.0/24
185.164.22.0/23
Signature Algorithm: sha256WithRSAEncryption
31:9a:bb:38:ca:25:bc:f9:04:b9:33:1a:12:5d:cc:ad:b3:3e:
49:dd:56:9a:88:b0:1f:53:74:15:28:e9:59:2f:bb:04:57:7b:
66:c9:48:47:ab:bb:c5:c4:56:98:8c:83:7b:51:10:99:fb:46:
6b:0d:5c:6a:a0:25:26:f6:cd:b2:6a:34:61:d8:d4:3d:63:34:
b7:43:39:5f:0e:2b:1d:df:92:90:03:85:df:02:5a:1e:36:34:
bc:43:2e:98:fa:17:d4:62:29:7c:4c:6f:d2:83:9f:7a:9b:e7:
ea:ed:8d:31:bb:28:46:54:b2:5d:7d:ec:dc:63:1a:ac:0f:6e:
9a:c2:cd:b6:58:41:a8:cd:ee:f8:cf:5a:e8:d3:c2:40:10:48:
d7:32:e7:10:9c:3a:98:19:97:5e:ec:12:98:72:22:e0:ab:33:
67:c3:3a:05:71:6a:12:de:c4:d6:eb:f7:a2:9e:40:33:4f:26:
43:a6:c8:c2:86:3c:7e:15:00:05:95:bd:18:f5:63:3a:c5:bf:
b8:82:c3:9d:43:34:50:49:ec:0b:1e:ec:ff:03:e0:c8:00:84:
82:e9:da:c3:44:da:43:41:cb:e6:f7:d9:e6:7e:ed:84:d0:08:
35:ac:05:64:23:9a:6e:98:62:6f:89:11:80:c1:48:1f:ed:22:
78:99:22:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijdxuQYhTCRen+pFnCgsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2RmZTRiNjhiMjA4OTVlZGVkZjNhMDAzMjMyYTk3OWUx
N2MzOGMwHhcNMjUwMTAxMTU0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDcwYWM5YmQ0ODAwMDFjYTM3NjFmNWNjNmIxNjJjNDRiZjg0MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojpvdOQez2FRF5TDLHfT8vbyMhxf
VlUKYZ8GZCFVASVBvYoYFqeS80E5+gOJs0MfR+yjAxjM/Y63I69ch4hJyw8kpprW
gK0jEySU0zUMGPpDnPXdtI2Cq/7i4S+vRnyP56PdQOWOHOkkrqkdxIDtK6OyPZaw
1Bl/e0XUhnGoBp0Afri9BCr3OTlAetZl9zvYZGZLBtmZvZN+k1iTxXcBIgp4Y/Lv
SPXtekM1oX8hDJggzmFtz3Yf+yId6a+MJWMgvlvlxZmS3RF1tG6v/CJmNKMJQCqr
tXEQ7MZljYkk1pl31B5x2L/XSP3gPN2V6v6WbXWGL3vRwoILxn4/SC4aLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM1wrJvUgAAco3YfXMaxYsRL+EMVMB8GA1UdIwQY
MBaAFGt9/ktosgiV7e3zoAMjKpeeF8OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAt
OWM3NmQxMGVjNTMyLzEvelhDc205U0FBQnlqZGg5Y3hyRml4RXY0UXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAtOWM3NmQxMGVjNTMy
LzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuaQUAwQB
uaQWMA0GCSqGSIb3DQEBCwUAA4IBAQAxmrs4yiW8+QS5MxoSXcytsz5J3VaaiLAf
U3QVKOlZL7sEV3tmyUhHq7vFxFaYjIN7URCZ+0ZrDVxqoCUm9s2yajRh2NQ9YzS3
QzlfDisd35KQA4XfAloeNjS8Qy6Y+hfUYil8TG/Sg596m+fq7Y0xuyhGVLJdfezc
YxqsD26aws22WEGoze74z1ro08JAEEjXMucQnDqYGZde7BKYciLgqzNnwzoFcWoS
3sTW6/einkAzTyZDpsjChjx+FQAFlb0Y9WM6xb+4gsOdQzRQSewLHuz/A+DIAISC
6drDRNpDQcvm99nmfu2E0Ag1rAVkI5pumGJviRGAwUgf7SJ4mSKn
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net