Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Z31WjdQFDmrm3H3vpTgCYNrTNJU.roa
File: Z31WjdQFDmrm3H3vpTgCYNrTNJU.roa (raw, json)
Hash identifier: +gbB7qFdsZ9xFXoII4KgpUuO3N5IwHlojgzUCF3L91o=
Subject key identifier: 67:7D:56:8D:D4:05:0E:6A:E6:DC:7D:EF:A5:38:02:60:DA:D3:34:95
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B2268A0508FB221AF2A3B9A5C8EBC2
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Z31WjdQFDmrm3H3vpTgCYNrTNJU.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8643
IP address blocks: 195.130.64.0/23 maxlen: 23
195.130.123.0/24 maxlen: 24
2001:648:2010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:26:8a:05:08:fb:22:1a:f2:a3:b9:a5:c8:eb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=677d568dd4050e6ae6dc7defa5380260dad33495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:ed:62:fa:07:e0:b7:63:d6:59:a2:1f:2c:
37:23:78:da:34:cb:63:17:d0:36:52:f1:38:1f:e4:
b8:1f:97:c9:9b:b0:cf:2f:11:07:2a:c3:ba:84:09:
22:07:4b:41:97:24:e1:36:c7:27:9e:2b:4e:18:9a:
4b:c2:a6:87:5f:45:f7:95:b5:51:c6:b1:d6:2b:3b:
57:d3:0e:56:92:b9:df:9b:29:ca:1c:be:b4:23:52:
97:4a:15:3f:98:f7:de:6a:4f:a4:16:fe:8a:29:74:
69:8b:e8:3b:d9:81:bc:56:74:49:8a:26:2c:0e:e4:
f1:e4:d8:59:80:44:18:95:1d:a3:16:81:c2:3b:46:
c3:0b:04:ae:bc:e9:06:ca:53:cd:2a:b8:6c:c9:3d:
c9:80:fb:f1:68:83:97:94:e2:0e:ac:5d:6b:78:11:
3b:ee:ea:54:a5:80:38:38:2c:06:4b:75:7b:07:1c:
80:cb:87:7d:ff:6b:f5:6d:78:b1:6c:94:f6:62:b1:
3d:3d:7d:39:f5:4f:12:b7:1b:ad:5b:0d:89:e4:d2:
44:dc:a2:9d:c9:fb:d2:d3:3a:ab:0c:67:bc:aa:c2:
f4:f9:f4:8b:aa:2d:27:6e:06:0d:9c:08:31:44:ed:
72:8b:ff:83:5a:fa:de:a8:d6:54:ae:5c:a1:38:0f:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:56:8D:D4:05:0E:6A:E6:DC:7D:EF:A5:38:02:60:DA:D3:34:95
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Z31WjdQFDmrm3H3vpTgCYNrTNJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.64.0/23
195.130.123.0/24
IPv6:
2001:648:2010::/48
Signature Algorithm: sha256WithRSAEncryption
11:0a:95:67:02:01:67:a6:15:38:9f:2a:d0:e2:df:9a:d4:29:
50:90:65:b9:a6:89:89:93:6b:b5:e1:8d:06:cf:90:c1:35:27:
18:89:51:40:6b:0e:2f:c9:f3:63:fc:24:e0:8b:46:88:62:49:
a0:c8:cb:e8:28:37:e2:a0:ca:81:47:b4:bb:4e:0a:14:96:aa:
a2:35:fe:e4:f5:42:ae:b3:84:29:d0:28:f5:d9:d7:03:4b:c5:
a2:3b:6f:e7:72:21:5d:c9:59:ab:15:f4:77:b2:9e:b2:3b:8d:
44:d7:30:97:5c:b9:05:ea:8e:14:97:9e:db:30:ed:2a:38:35:
d6:31:7f:6e:eb:a1:1e:3b:ce:78:e0:34:57:01:7b:b9:be:c5:
b5:9e:a2:9e:92:b3:45:c6:2f:8a:dd:41:c9:98:97:af:da:f8:
24:2e:50:d5:5a:b7:6d:2e:6a:6a:af:4e:66:18:e5:25:a2:10:
8e:5e:c5:77:73:8a:ff:29:11:64:af:6d:6e:05:32:55:e7:67:
30:d8:4a:5c:88:2c:d2:3a:f0:e7:2e:b4:df:ed:53:07:4e:b2:
9c:52:83:6d:aa:a1:75:3c:18:2e:d3:4c:e1:ee:0c:89:b4:ff:
bd:c0:e4:3d:58:6d:b2:b4:50:81:5e:f3:8e:13:16:4a:5d:a0:
13:47:d9:c0
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQhsiaKBQj7Ihryo7mlyOvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjUwMTAxMTE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzdkNTY4ZGQ0MDUwZTZhZTZkYzdkZWZhNTM4MDI2MGRhZDMzNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+LtYvoH4Ldj1lmiHyw3I3jaNMtj
F9A2UvE4H+S4H5fJm7DPLxEHKsO6hAkiB0tBlyThNscnnitOGJpLwqaHX0X3lbVR
xrHWKztX0w5WkrnfmynKHL60I1KXShU/mPfeak+kFv6KKXRpi+g72YG8VnRJiiYs
DuTx5NhZgEQYlR2jFoHCO0bDCwSuvOkGylPNKrhsyT3JgPvxaIOXlOIOrF1reBE7
7upUpYA4OCwGS3V7BxyAy4d9/2v1bXixbJT2YrE9PX059U8StxutWw2J5NJE3KKd
yfvS0zqrDGe8qsL0+fSLqi0nbgYNnAgxRO1yi/+DWvreqNZUrlyhOA/BwQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFGd9Vo3UBQ5q5tx976U4AmDa0zSVMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvWjMxV2pkUUZEbXJtM0gzdnBUZ0NZTnJUTkpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBw4JAAwQA
w4J7MA8EAgACMAkDBwAgAQZIIBAwDQYJKoZIhvcNAQELBQADggEBABEKlWcCAWem
FTifKtDi35rUKVCQZbmmiYmTa7XhjQbPkME1JxiJUUBrDi/J82P8JOCLRohiSaDI
y+goN+KgyoFHtLtOChSWqqI1/uT1Qq6zhCnQKPXZ1wNLxaI7b+dyIV3JWasV9Hey
nrI7jUTXMJdcuQXqjhSXntsw7So4NdYxf27roR47znjgNFcBe7m+xbWeop6Ss0XG
L4rdQcmYl6/a+CQuUNVat20uamqvTmYY5SWiEI5exXdziv8pEWSvbW4FMlXnZzDY
SlyILNI68OcutN/tUwdOspxSg22qoXU8GC7TTOHuDIm0/73A5D1YbbK0UIFe844T
FkpdoBNH2cA=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net