Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/ZobxiROg1-GkiBXFARtEezPM_z8.roa
File: ZobxiROg1-GkiBXFARtEezPM_z8.roa (raw, json)
Hash identifier: BIGExweVB1y4EbbG2Qn538fyHAdIwqd6x14IhgSUKYw=
Subject key identifier: 66:86:F1:89:13:A0:D7:E1:A4:88:15:C5:01:1B:44:7B:33:CC:FF:3F
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 0194228E1DEB18CD4FF9BC0C09F37631BBC5
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/ZobxiROg1-GkiBXFARtEezPM_z8.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207056
IP address blocks: 185.167.120.0/24 maxlen: 24
185.167.121.0/24 maxlen: 24
185.167.122.0/24 maxlen: 24
185.167.123.0/24 maxlen: 24
2a0b:6a00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1d:eb:18:cd:4f:f9:bc:0c:09:f3:76:31:bb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6686f18913a0d7e1a48815c5011b447b33ccff3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:63:fb:93:14:12:7b:2c:a9:9b:74:f2:ab:
1a:10:05:64:b3:b7:12:ca:7e:6c:00:5b:3d:9e:e6:
06:2b:c2:3a:79:d5:31:19:57:01:cb:f4:69:21:77:
d2:4c:02:87:d5:5e:ac:08:e7:cf:28:f8:f5:c3:a1:
99:3d:26:95:ea:1e:14:64:ca:15:c8:aa:a7:19:c7:
fa:bb:ef:30:f2:35:3f:56:c6:41:fd:15:a1:40:b9:
b9:c5:61:44:af:e5:f0:d8:c6:68:fe:e0:51:14:99:
df:3b:8e:3d:c7:4b:84:53:dc:3b:8b:b6:4c:b2:f3:
62:fe:c7:d7:b6:47:60:09:c2:31:b1:39:7c:c3:c4:
0d:5f:05:af:6a:16:62:15:e3:78:3c:6d:6f:71:71:
31:79:6c:46:b3:dd:3f:a1:43:af:fd:6f:b8:6c:12:
3e:fe:18:f3:40:be:42:36:ac:39:b7:f5:99:05:f3:
b9:3d:d3:17:f5:f7:f8:a0:80:3a:29:9e:d1:e3:51:
93:4a:7e:88:fd:ab:97:73:53:0b:ad:57:1a:eb:dc:
20:76:0d:e8:6c:04:8f:38:e0:3d:bd:5e:27:64:c0:
51:b6:be:19:b9:40:a8:68:cf:07:df:57:7e:e2:55:
4b:6a:34:f1:83:11:7d:89:c0:c6:c3:ac:92:c0:2c:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:F1:89:13:A0:D7:E1:A4:88:15:C5:01:1B:44:7B:33:CC:FF:3F
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/ZobxiROg1-GkiBXFARtEezPM_z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.120.0/22
IPv6:
2a0b:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
1b:53:23:b1:e7:39:f5:c9:57:3b:6c:e7:b8:1d:fa:ad:73:7c:
73:9c:7b:ba:88:66:ca:24:bc:18:c6:18:7a:86:4a:4f:b8:bd:
f9:74:09:0a:ea:e0:4c:01:ac:f0:47:96:b2:75:d2:14:fb:4f:
6a:26:e4:e1:16:63:70:63:a0:51:69:79:40:cf:ed:8d:7e:e6:
1a:d3:48:3f:e3:fd:05:4f:0a:b4:df:af:e1:58:80:86:a8:f6:
ec:7c:0c:7c:29:c7:cd:a4:e6:91:31:3f:07:e2:9f:3f:9d:1e:
65:57:0f:bf:c7:73:eb:d9:b0:2f:7f:61:e8:88:75:f9:b3:6f:
be:34:50:6d:15:7e:e2:ec:fa:3c:80:fe:9d:7b:76:72:74:32:
1e:5a:15:96:6d:12:67:fa:6c:57:ef:0d:ad:ce:4f:07:65:ef:
75:0b:40:30:73:d6:b4:bb:06:1e:2c:7f:8a:9f:f8:23:01:e8:
cf:00:63:70:ee:59:fe:a5:5f:36:63:db:9b:51:de:8a:53:bd:
ec:bc:da:8b:47:51:dd:ee:c0:3d:fb:41:6c:3c:10:84:ff:d6:
48:70:4a:75:9c:c0:b3:36:d1:82:ad:88:3a:e9:cc:d6:fa:34:
11:48:b4:df:75:71:e8:45:77:a0:61:7b:c4:a9:a6:d9:9a:2c:
66:d5:9e:11
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijh3rGM1P+bwMCfN2MbvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMWEzMTMxZmU4YmVhOWM4MjU4MzEzYTBmMjRiYTJhNTYw
YjU4ZDMwHhcNMjUwMTAxMTU0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Njg2ZjE4OTEzYTBkN2UxYTQ4ODE1YzUwMTFiNDQ3YjMzY2NmZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1Fj+5MUEnssqZt08qsaEAVks7cS
yn5sAFs9nuYGK8I6edUxGVcBy/RpIXfSTAKH1V6sCOfPKPj1w6GZPSaV6h4UZMoV
yKqnGcf6u+8w8jU/VsZB/RWhQLm5xWFEr+Xw2MZo/uBRFJnfO449x0uEU9w7i7ZM
svNi/sfXtkdgCcIxsTl8w8QNXwWvahZiFeN4PG1vcXExeWxGs90/oUOv/W+4bBI+
/hjzQL5CNqw5t/WZBfO5PdMX9ff4oIA6KZ7R41GTSn6I/auXc1MLrVca69wgdg3o
bASPOOA9vV4nZMBRtr4ZuUCoaM8H31d+4lVLajTxgxF9icDGw6ySwCxBnQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGaG8YkToNfhpIgVxQEbRHszzP8/MB8GA1UdIwQY
MBaAFA0aMTH+i+qcglgxOg8kuipWC1jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQt
YmJmN2M3MGVmNGIzLzEvWm9ieGlST2cxLUdraUJYRkFSdEVlelBNX3o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQtYmJmN2M3MGVmNGIz
LzEvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuad4MA0E
AgACMAcDBQMqC2oAMA0GCSqGSIb3DQEBCwUAA4IBAQAbUyOx5zn1yVc7bOe4Hfqt
c3xznHu6iGbKJLwYxhh6hkpPuL35dAkK6uBMAazwR5ayddIU+09qJuThFmNwY6BR
aXlAz+2NfuYa00g/4/0FTwq036/hWICGqPbsfAx8KcfNpOaRMT8H4p8/nR5lVw+/
x3Pr2bAvf2HoiHX5s2++NFBtFX7i7Po8gP6de3ZydDIeWhWWbRJn+mxX7w2tzk8H
Ze91C0Awc9a0uwYeLH+Kn/gjAejPAGNw7ln+pV82Y9ubUd6KU73svNqLR1Hd7sA9
+0FsPBCE/9ZIcEp1nMCzNtGCrYg66czW+jQRSLTfdXHoRXegYXvEqabZmixm1Z4R
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net