Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa
File: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (raw, json)
Hash identifier: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=
Subject key identifier: 66:46:30:01:7F:2C:15:4D:2D:C7:B3:25:9B:31:56:0E:E4:5E:36:8A
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 01942068513C4DA9B960C1319E5981742D15
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2259
IP address blocks: 147.100.144.0/23 maxlen: 23
147.100.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:51:3c:4d:a9:b9:60:c1:31:9e:59:81:74:2d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=664630017f2c154d2dc7b3259b31560ee45e368a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:42:52:80:58:06:bc:c5:73:23:77:37:e8:
65:16:92:2a:21:4c:f5:93:3a:9c:c9:aa:df:4a:27:
ca:f8:e1:6a:72:a8:79:d8:ad:e2:72:0c:ed:25:ad:
75:42:c2:fd:16:ba:86:a5:73:57:18:b0:fe:7d:e3:
4a:17:12:9b:bd:8f:ea:57:ec:03:05:b6:38:93:a4:
94:e2:86:85:91:b8:8c:95:52:7f:1f:7e:be:92:a1:
72:3b:4a:f4:b0:81:d7:f1:0e:2d:3b:0d:ad:ee:a3:
cc:51:9d:15:58:8a:52:db:7f:f3:6a:a1:e9:a7:5d:
c9:8e:82:7d:61:c5:2e:69:3f:e7:1b:b8:9e:eb:62:
0a:d5:f4:89:aa:63:9a:b2:85:ce:21:03:14:48:39:
50:75:65:5a:d9:bf:66:7e:e0:6c:21:fc:82:0b:ab:
16:29:9e:97:b2:98:1b:f7:6a:51:f8:c0:de:d4:a8:
52:97:ee:a5:e5:bc:e8:37:a5:f5:8c:71:3e:4f:fe:
72:01:6b:b2:0c:32:90:c7:26:43:7b:f9:27:40:95:
4c:83:6d:6a:d7:d2:18:12:7d:3a:9b:83:7f:77:3c:
85:67:64:4f:5b:e8:a5:2e:4a:a5:24:bf:26:9a:93:
91:78:42:92:3d:d2:78:f6:ac:66:7a:b7:42:02:db:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:46:30:01:7F:2C:15:4D:2D:C7:B3:25:9B:31:56:0E:E4:5E:36:8A
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.100.144.0/23
147.100.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ce:71:fb:a3:f2:89:ad:5d:71:5b:0a:63:54:a8:30:23:14:
29:70:64:e4:45:3d:54:17:08:96:59:e4:3b:16:ca:29:15:d9:
47:eb:6b:a1:4b:08:b5:06:34:cf:19:f5:64:d3:cc:ad:df:87:
98:b5:dc:23:8a:6d:d2:68:f9:98:f6:32:90:5b:57:49:eb:ce:
15:64:5b:7a:24:6a:35:84:e0:be:8d:a9:be:93:90:fc:d2:2f:
71:57:b9:b5:d5:3a:18:29:bc:55:ca:7a:6c:f2:cc:36:cb:c1:
c2:ae:a5:49:45:6f:5f:44:ec:d1:88:12:76:97:5e:f0:8d:bb:
db:51:8e:97:09:f9:01:48:54:ff:25:fc:5c:6a:c0:49:b6:82:
34:fe:ec:7e:b0:5a:2c:a4:63:06:29:c6:75:d4:23:2b:a9:20:
4c:00:ab:eb:58:0a:89:e6:18:67:d5:7c:67:90:88:6f:69:88:
12:63:9d:9a:17:af:22:0c:af:eb:01:7a:59:26:41:3d:7e:ed:
d0:5a:6b:f9:8e:94:cb:f7:d9:a1:59:13:99:8c:a7:e7:8d:19:
ec:bd:2a:ae:34:17:9d:23:fe:fe:77:71:1d:fc:07:05:61:12:
46:88:49:b9:e9:a7:f9:2c:b7:de:d7:6a:f8:08:ef:fa:74:93:
a0:ec:5a:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgaFE8Tam5YMExnlmBdC0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjA2YjhhYWQ1NTNmMDk0OGM3YTg5NGQ2ODY3MTg3MGVi
ODJjYjAwHhcNMjUwMTAxMDU0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjQ2MzAwMTdmMmMxNTRkMmRjN2IzMjU5YjMxNTYwZWU0NWUzNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEJCUoBYBrzFcyN3N+hlFpIqIUz1
kzqcyarfSifK+OFqcqh52K3icgztJa11QsL9FrqGpXNXGLD+feNKFxKbvY/qV+wD
BbY4k6SU4oaFkbiMlVJ/H36+kqFyO0r0sIHX8Q4tOw2t7qPMUZ0VWIpS23/zaqHp
p13JjoJ9YcUuaT/nG7ie62IK1fSJqmOasoXOIQMUSDlQdWVa2b9mfuBsIfyCC6sW
KZ6Xspgb92pR+MDe1KhSl+6l5bzoN6X1jHE+T/5yAWuyDDKQxyZDe/knQJVMg21q
19IYEn06m4N/dzyFZ2RPW+ilLkqlJL8mmpOReEKSPdJ49qxmerdCAttqWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGZGMAF/LBVNLcezJZsxVg7kXjaKMB8GA1UdIwQY
MBaAFKBga4qtVT8JSMeolNaGcYcOuCywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYt
YmIzNDMxZmUwMjg1LzEvWmtZd0FYOHNGVTB0eDdNbG16RldEdVJlTm9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYtYmIzNDMxZmUwMjg1
LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBk2SQAwQA
k2S8MA0GCSqGSIb3DQEBCwUAA4IBAQCaznH7o/KJrV1xWwpjVKgwIxQpcGTkRT1U
FwiWWeQ7FsopFdlH62uhSwi1BjTPGfVk08yt34eYtdwjim3SaPmY9jKQW1dJ684V
ZFt6JGo1hOC+jam+k5D80i9xV7m11ToYKbxVynps8sw2y8HCrqVJRW9fROzRiBJ2
l17wjbvbUY6XCfkBSFT/JfxcasBJtoI0/ux+sFospGMGKcZ11CMrqSBMAKvrWAqJ
5hhn1XxnkIhvaYgSY52aF68iDK/rAXpZJkE9fu3QWmv5jpTL99mhWROZjKfnjRns
vSquNBedI/7+d3Ed/AcFYRJGiEm56af5LLfe12r4CO/6dJOg7FqE
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net