Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa
File: ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa (raw, json)
Hash identifier: E10KwVeqHj4J7myzFFX6atSdaz21CXH8tahheXJigm0=
Subject key identifier: 65:6F:9B:2C:DE:E6:A7:05:C2:3D:34:90:D2:FE:5A:01:5A:13:BB:C8
Certificate issuer: /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial: 019427B3DF595D6955880A7272138EC29005
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa
Signing time: Thu 02 Jan 2025 15:48:07 +0000
ROA not before: Thu 02 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204649
IP address blocks: 80.73.208.0/21 maxlen: 24
80.73.216.0/23 maxlen: 23
185.244.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:df:59:5d:69:55:88:0a:72:72:13:8e:c2:90:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Validity
Not Before: Jan 2 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=656f9b2cdee6a705c23d3490d2fe5a015a13bbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:da:72:5f:64:5d:4b:89:1f:b9:12:2f:7b:
5b:d8:07:c3:b8:d6:f5:5d:62:69:c4:3d:33:62:c9:
de:75:e8:89:d7:81:63:93:96:14:0a:5a:5a:27:e1:
52:77:c1:a9:b8:d2:de:2d:f3:f5:31:1a:54:c4:25:
1d:9c:d9:8e:8a:fc:64:67:91:7a:0f:cc:e3:7a:bb:
78:52:0d:f2:94:fb:8b:a4:50:b9:e8:d8:cd:e2:fd:
38:7d:6a:04:2e:36:f8:8a:dc:89:94:8a:0a:b7:bf:
23:58:5f:27:b4:9c:6a:98:80:90:1a:e2:a6:95:56:
fe:be:ee:56:f7:89:07:1d:f4:99:2f:2f:1e:38:75:
f2:0f:cb:95:5a:19:da:32:c0:81:47:c0:82:8a:28:
d8:6c:23:10:e6:25:af:6e:d7:c3:35:e8:0f:6e:b2:
f7:68:f7:25:2c:b2:26:4e:ef:65:e8:8c:54:0d:71:
55:e5:66:2a:bc:5b:e1:1d:1a:a4:29:09:db:d6:0f:
9a:39:1e:f2:60:93:42:54:ce:f6:63:b8:4c:d2:b6:
11:f2:6a:85:f9:76:6e:b5:0b:fe:8f:c5:ff:37:b2:
41:95:1e:81:43:11:a1:85:6f:b9:55:fb:a7:e3:48:
f0:63:7d:de:92:02:c4:a8:4a:a2:fe:51:77:eb:51:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6F:9B:2C:DE:E6:A7:05:C2:3D:34:90:D2:FE:5A:01:5A:13:BB:C8
X509v3 Authority Key Identifier:
keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.208.0-80.73.217.255
185.244.12.0/22
Signature Algorithm: sha256WithRSAEncryption
36:82:87:44:e5:9f:32:de:ab:c2:61:a6:96:9f:ab:79:44:dc:
b5:0c:2e:db:64:e9:15:88:d8:e0:0c:b4:b5:3d:fc:ec:b7:47:
87:ed:da:c2:04:ef:b1:c1:cc:46:5b:37:d9:2e:6c:9e:af:6d:
8d:b0:8d:f7:44:ba:66:af:71:f9:a5:df:56:ee:ec:a8:f8:ef:
e7:c1:46:49:7d:57:2c:30:8b:04:64:37:eb:2d:8f:40:4c:58:
ea:29:8a:2e:41:1f:8c:d9:b2:bc:33:81:34:12:3b:d7:d8:b4:
59:ce:dc:25:3f:0d:32:84:1a:41:5b:b8:88:9e:85:a1:ca:93:
82:b8:ce:f9:b3:0e:be:4b:aa:0f:46:6b:9e:38:16:df:29:d5:
63:47:fc:29:5b:d9:26:8c:7e:6f:e7:bb:83:0b:c5:3a:9e:73:
13:ee:36:4a:24:ca:28:8e:ad:38:f5:3a:f1:02:76:74:61:f7:
9a:fc:e1:15:c8:64:24:89:a6:7e:66:c1:5a:24:fd:72:d2:ab:
65:51:18:86:89:29:0c:03:7d:59:4b:be:6b:88:3c:6a:91:ce:
7d:26:8c:37:9a:fc:ae:79:e9:42:63:3d:cd:9b:27:88:3e:f5:
8f:03:a6:6e:25:f4:f8:1c:ff:ad:51:b9:fb:f5:64:2b:03:e6:
74:8b:8b:0f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQns99ZXWlViApychOOwpAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZWU4ODA0ZmY3MDM3NmUyYWZlMjFhYmY5M2UyMjhkNWFm
ZGQ1MDkwHhcNMjUwMTAyMTU0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTZmOWIyY2RlZTZhNzA1YzIzZDM0OTBkMmZlNWEwMTVhMTNiYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/7acl9kXUuJH7kSL3tb2AfDuNb1
XWJpxD0zYsnedeiJ14Fjk5YUClpaJ+FSd8GpuNLeLfP1MRpUxCUdnNmOivxkZ5F6
D8zjert4Ug3ylPuLpFC56NjN4v04fWoELjb4ityJlIoKt78jWF8ntJxqmICQGuKm
lVb+vu5W94kHHfSZLy8eOHXyD8uVWhnaMsCBR8CCiijYbCMQ5iWvbtfDNegPbrL3
aPclLLImTu9l6IxUDXFV5WYqvFvhHRqkKQnb1g+aOR7yYJNCVM72Y7hM0rYR8mqF
+XZutQv+j8X/N7JBlR6BQxGhhW+5Vfun40jwY33ekgLEqEqi/lF361HpGQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGVvmyze5qcFwj00kNL+WgFaE7vIMB8GA1UdIwQY
MBaAFIzuiAT/cDduKv4hq/k+Io1a/dUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzIt
OTJkOTRjZDdiMDI0LzEvWlctYkxON21wd1hDUFRTUTB2NWFBVm9UdThnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzItOTJkOTRjZDdiMDI0
LzEvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARQSdAD
BAFQSdgDBAK59AwwDQYJKoZIhvcNAQELBQADggEBADaCh0TlnzLeq8Jhppafq3lE
3LUMLttk6RWI2OAMtLU9/Oy3R4ft2sIE77HBzEZbN9kubJ6vbY2wjfdEumavcfml
31bu7Kj47+fBRkl9VywwiwRkN+stj0BMWOopii5BH4zZsrwzgTQSO9fYtFnO3CU/
DTKEGkFbuIiehaHKk4K4zvmzDr5Lqg9Ga544Ft8p1WNH/Clb2SaMfm/nu4MLxTqe
cxPuNkokyiiOrTj1OvECdnRh95r84RXIZCSJpn5mwVok/XLSq2VRGIaJKQwDfVlL
vmuIPGqRzn0mjDea/K556UJjPc2bJ4g+9Y8Dpm4l9Pgc/61Rufv1ZCsD5nSLiw8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net