Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/zYqhK_-lCxxHEmqpWhKtyQoq5_Q.roa
File: zYqhK_-lCxxHEmqpWhKtyQoq5_Q.roa (raw, json)
Hash identifier: AXZsvgOi3tBattJocgH+eVJ7syijTDvmECPiQPYAoAI=
Subject key identifier: CD:8A:A1:2B:FF:A5:0B:1C:47:12:6A:A9:5A:12:AD:C9:0A:2A:E7:F4
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F75029C309B618787CF9FF2829A5E
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/zYqhK_-lCxxHEmqpWhKtyQoq5_Q.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 45.67.37.0/24 maxlen: 24
89.34.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:75:02:9c:30:9b:61:87:87:cf:9f:f2:82:9a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd8aa12bffa50b1c47126aa95a12adc90a2ae7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:f7:2c:00:7e:b8:db:3f:30:8a:75:4f:80:
77:03:17:54:68:2d:9d:17:36:89:df:10:a1:76:f3:
5a:6e:4a:e6:97:2b:8f:e0:43:16:ef:3d:69:25:ed:
96:db:13:56:cd:cb:08:0c:f4:7a:f2:1f:f0:96:b2:
4c:d1:96:9b:30:a2:76:f3:47:3d:50:68:e6:be:81:
bc:78:3a:ec:64:76:37:d8:84:8a:3b:e4:f9:4d:19:
73:86:93:0e:23:76:a6:6c:91:2b:1a:90:7b:be:de:
5f:66:ca:15:e3:ae:8d:ac:56:16:ab:25:da:37:6b:
df:bb:1a:ac:be:fc:f9:6a:aa:d2:7b:2c:5c:8b:b8:
6d:aa:fb:54:25:05:81:e0:95:5c:0d:ed:84:15:7c:
f9:5f:cb:d2:66:3f:34:8d:e8:99:43:3c:b9:f3:dd:
28:3d:e4:33:5f:a1:9b:00:14:9b:49:01:ca:41:80:
19:45:84:3e:3d:db:6a:2f:9d:79:f6:98:63:5e:a3:
65:86:bf:a8:55:7d:70:01:27:e8:b0:2e:e9:5f:0e:
77:ac:9e:e4:77:44:18:86:fd:e3:11:3c:60:fa:db:
24:f2:d2:b4:6a:f5:df:ea:bd:27:d6:d2:b3:f9:ec:
a2:7c:5d:37:1f:7d:d4:cc:d0:a9:7c:67:5a:3f:69:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:A1:2B:FF:A5:0B:1C:47:12:6A:A9:5A:12:AD:C9:0A:2A:E7:F4
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/zYqhK_-lCxxHEmqpWhKtyQoq5_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.37.0/24
89.34.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0a:c3:ac:7a:a3:aa:1e:65:5f:90:fb:e8:d1:9b:b2:b2:98:
0f:e2:02:ad:24:0b:53:cb:7e:7a:83:8e:ee:47:bf:4e:dc:2b:
1c:a6:8f:95:90:db:ee:fa:d5:fc:e7:20:28:78:97:bd:4c:2c:
34:11:9e:9f:1a:f1:28:ea:28:23:57:f1:5b:fa:70:be:21:35:
f1:69:f1:fa:9f:3a:0d:30:6e:30:8b:c0:71:09:e8:e0:0f:ce:
34:02:f8:98:2e:3a:82:a5:e5:af:b4:61:82:d8:33:ef:3f:99:
99:80:d8:b0:dd:58:9c:04:57:dc:f0:4c:a0:bf:3b:3d:ee:6b:
ec:05:0d:1b:ec:c2:8d:ee:56:77:a3:24:9b:64:9c:0d:35:ca:
e1:66:0c:72:ab:5f:ed:09:b4:81:e6:05:b6:e7:f0:52:d6:3b:
72:c3:94:0d:4a:1a:3f:df:a7:6e:0f:a3:2a:2e:f6:f3:5f:d3:
11:df:77:e3:d1:8e:37:55:0a:6c:14:c5:cc:0e:20:db:d0:ea:
04:1a:f1:45:a2:1c:8d:8f:a2:3b:af:d9:b6:f4:f4:6a:24:84:
54:16:0a:2f:ee:e6:11:23:b1:1a:fe:57:dd:df:bf:6f:6e:f7:
c3:f7:e1:fe:48:da:d0:70:7a:95:99:7e:5f:ad:53:80:59:11:
c1:fa:bb:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiH3UCnDCbYYeHz5/ygppeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjUwMTAxMTM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDhhYTEyYmZmYTUwYjFjNDcxMjZhYTk1YTEyYWRjOTBhMmFlN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRX3LAB+uNs/MIp1T4B3AxdUaC2d
FzaJ3xChdvNabkrmlyuP4EMW7z1pJe2W2xNWzcsIDPR68h/wlrJM0ZabMKJ280c9
UGjmvoG8eDrsZHY32ISKO+T5TRlzhpMOI3ambJErGpB7vt5fZsoV466NrFYWqyXa
N2vfuxqsvvz5aqrSeyxci7htqvtUJQWB4JVcDe2EFXz5X8vSZj80jeiZQzy5890o
PeQzX6GbABSbSQHKQYAZRYQ+PdtqL5159phjXqNlhr+oVX1wASfosC7pXw53rJ7k
d0QYhv3jETxg+tsk8tK0avXf6r0n1tKz+eyifF03H33UzNCpfGdaP2lPWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM2KoSv/pQscRxJqqVoSrckKKuf0MB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvellxaEtfLWxDeHhIRW1xcFdoS3R5UW9xNV9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALUMlAwQA
WSJkMA0GCSqGSIb3DQEBCwUAA4IBAQCkCsOseqOqHmVfkPvo0ZuyspgP4gKtJAtT
y356g47uR79O3Cscpo+VkNvu+tX85yAoeJe9TCw0EZ6fGvEo6igjV/Fb+nC+ITXx
afH6nzoNMG4wi8BxCejgD840AviYLjqCpeWvtGGC2DPvP5mZgNiw3VicBFfc8Eyg
vzs97mvsBQ0b7MKN7lZ3oySbZJwNNcrhZgxyq1/tCbSB5gW25/BS1jtyw5QNSho/
36duD6MqLvbzX9MR33fj0Y43VQpsFMXMDiDb0OoEGvFFohyNj6I7r9m29PRqJIRU
Fgov7uYRI7Ea/lfd379vbvfD9+H+SNrQcHqVmX5frVOAWRHB+rsA
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:05 2025 by rpki-client on console.sobornost.net