Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa
File: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (raw, json)
Hash identifier: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=
Subject key identifier: 65:4D:2D:34:E0:BC:B1:0F:23:53:87:E8:6F:13:68:18:C3:35:D1:FD
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 0194228D80969320A65C6F203F21E99A519B
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa
Signing time: Wed 01 Jan 2025 15:48:06 +0000
ROA not before: Wed 01 Jan 2025 15:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42808
IP address blocks: 194.26.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:80:96:93:20:a6:5c:6f:20:3f:21:e9:9a:51:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Jan 1 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=654d2d34e0bcb10f235387e86f136818c335d1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:be:a0:70:20:50:a5:ae:9f:b0:f6:75:b8:
bf:6e:ae:af:78:35:8e:0a:27:f7:a8:21:cf:54:53:
3f:7b:70:7d:95:7f:26:d5:77:47:b8:35:98:89:40:
3f:5f:5e:54:fb:d3:5c:c2:99:3f:60:e1:31:f7:84:
22:61:cb:07:d5:e9:e0:0e:28:38:8e:61:e4:05:83:
c0:85:40:0c:8e:27:b6:71:6d:70:6b:7e:61:2d:cc:
95:cb:80:6a:c6:bf:aa:5f:b6:22:3f:5c:7f:7f:68:
9d:95:55:81:07:12:fd:04:4b:da:0f:f6:2c:c2:f1:
b2:a4:21:62:2a:0a:80:f7:b7:d6:ab:c8:0c:db:fe:
20:06:80:66:d1:af:cf:97:7c:0d:6b:10:5d:35:d7:
1f:5b:14:a5:54:fe:ce:e9:63:a2:20:8d:80:cb:7c:
53:86:25:00:b2:ce:66:19:b6:10:a5:8a:3b:dc:e4:
95:96:84:fe:4d:f2:5a:d6:23:e4:5f:f9:d5:04:c7:
24:ca:4b:3b:b5:cc:dd:96:9f:a0:41:9f:af:a1:05:
14:fe:62:29:38:5b:0e:1c:87:23:d0:d6:d3:a7:ab:
50:4c:77:8b:fe:99:2f:3f:05:b5:86:9d:e7:ce:70:
77:a8:78:1a:b4:d7:e2:9e:22:65:46:df:c1:59:6c:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4D:2D:34:E0:BC:B1:0F:23:53:87:E8:6F:13:68:18:C3:35:D1:FD
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.118.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f5:69:a3:0c:fd:5e:4c:53:1f:b7:4a:29:b5:3b:15:67:09:
af:f6:1b:23:22:97:e3:6a:82:f7:93:24:ae:5d:f3:89:2a:8d:
55:5c:22:1a:a3:0f:3d:ed:1a:98:a9:a1:2f:63:a9:55:51:5d:
b7:a0:cd:92:70:77:ec:bd:9e:a6:e0:f7:d1:68:19:64:be:07:
0c:af:c8:08:ea:29:99:8d:49:89:a4:03:46:70:30:d5:f5:00:
b4:aa:5c:fe:38:49:26:69:65:e3:77:eb:69:23:f7:9d:31:95:
25:08:9a:c3:32:41:26:e6:53:53:e6:58:6b:ee:8d:01:60:35:
ad:a0:6c:f6:f7:7f:ba:b4:c5:5a:87:61:a9:28:a8:9b:4c:27:
de:27:74:9c:36:88:7e:d1:e1:2a:24:a1:c1:23:86:40:9d:f9:
27:3f:35:00:b1:53:df:4e:49:05:24:7a:90:b9:17:40:31:4d:
26:70:2f:0c:7c:e6:1d:bd:54:65:01:6c:9a:c1:9d:7f:45:ff:
ac:93:d7:c0:a0:3f:63:1d:4d:59:38:61:9b:9f:e3:84:e8:38:
a8:25:7e:19:3e:59:3a:80:5d:87:eb:79:06:e4:0b:b7:ee:8b:
9d:45:4c:9f:0c:40:56:c8:10:51:28:13:01:45:fc:2a:49:15:
9f:ab:55:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijYCWkyCmXG8gPyHpmlGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOGE4ZDQwZTQzN2FkZjRhY2Q3Y2RiMzhlMDQwMjQ3N2Ey
ZTUxYTYwHhcNMjUwMTAxMTU0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTRkMmQzNGUwYmNiMTBmMjM1Mzg3ZTg2ZjEzNjgxOGMzMzVkMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn96+oHAgUKWun7D2dbi/bq6veDWO
Cif3qCHPVFM/e3B9lX8m1XdHuDWYiUA/X15U+9Ncwpk/YOEx94QiYcsH1engDig4
jmHkBYPAhUAMjie2cW1wa35hLcyVy4Bqxr+qX7YiP1x/f2idlVWBBxL9BEvaD/Ys
wvGypCFiKgqA97fWq8gM2/4gBoBm0a/Pl3wNaxBdNdcfWxSlVP7O6WOiII2Ay3xT
hiUAss5mGbYQpYo73OSVloT+TfJa1iPkX/nVBMckyks7tczdlp+gQZ+voQUU/mIp
OFsOHIcj0NbTp6tQTHeL/pkvPwW1hp3nznB3qHgatNfiniJlRt/BWWwkPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVNLTTgvLEPI1OH6G8TaBjDNdH9MB8GA1UdIwQY
MBaAFM6KjUDkN630rNfNs44EAkd6LlGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMt
MzQ1YjJhYjBkYjE4LzEvWlUwdE5PQzhzUThqVTRmb2J4Tm9HTU0xMGYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMtMzQ1YjJhYjBkYjE4
LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhp2MA0G
CSqGSIb3DQEBCwUAA4IBAQA19WmjDP1eTFMft0optTsVZwmv9hsjIpfjaoL3kySu
XfOJKo1VXCIaow897RqYqaEvY6lVUV23oM2ScHfsvZ6m4PfRaBlkvgcMr8gI6imZ
jUmJpANGcDDV9QC0qlz+OEkmaWXjd+tpI/edMZUlCJrDMkEm5lNT5lhr7o0BYDWt
oGz293+6tMVah2GpKKibTCfeJ3ScNoh+0eEqJKHBI4ZAnfknPzUAsVPfTkkFJHqQ
uRdAMU0mcC8MfOYdvVRlAWyawZ1/Rf+sk9fAoD9jHU1ZOGGbn+OE6DioJX4ZPlk6
gF2H63kG5Au37oudRUyfDEBWyBBRKBMBRfwqSRWfq1XL
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net