Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3da2e8-e973-478d-8ea1-22586b7053f4/1/zKOiO0xJX6WDZ5pKlTCAoN2Nvmg.roa
File: zKOiO0xJX6WDZ5pKlTCAoN2Nvmg.roa (raw, json)
Hash identifier: kke2BSkHQGqmU4zfHVPdh+Qq8zc4u9ckVlMDcFS5ly4=
Subject key identifier: CC:A3:A2:3B:4C:49:5F:A5:83:67:9A:4A:95:30:80:A0:DD:8D:BE:68
Certificate issuer: /CN=597525161438d5a88f7b74dc115ba182be2ec955
Certificate serial: 02FF88BE
Authority key identifier: 59:75:25:16:14:38:D5:A8:8F:7B:74:DC:11:5B:A1:82:BE:2E:C9:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXUlFhQ41aiPe3TcEVuhgr4uyVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3da2e8-e973-478d-8ea1-22586b7053f4/1/zKOiO0xJX6WDZ5pKlTCAoN2Nvmg.roa
Signing time: Sat 01 Jan 2022 15:57:41 +0000
ROA not before: Sat 01 Jan 2022 15:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200738
IP address blocks: 193.31.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50301118 (0x2ff88be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597525161438d5a88f7b74dc115ba182be2ec955
Validity
Not Before: Jan 1 15:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cca3a23b4c495fa583679a4a953080a0dd8dbe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:dc:c7:0c:66:83:fa:d3:52:be:d0:e3:9f:
34:f5:68:1f:89:26:5c:b9:9b:d0:22:8c:63:f3:fa:
5c:51:2a:e8:06:82:45:a6:07:c1:6d:64:e9:d0:96:
30:85:14:a4:c6:f1:c7:1b:9e:f5:25:8a:87:89:91:
93:f6:99:e0:df:5a:bc:68:a4:62:b4:4e:11:49:17:
25:38:0d:6b:48:b6:b3:e6:cd:fd:b5:78:b1:98:60:
56:2f:fd:98:0a:5f:bf:92:e2:f6:f8:d5:2d:2c:14:
f1:ee:b3:41:d0:23:0b:46:72:02:08:d0:7e:4a:87:
1f:64:24:29:1a:62:a3:e9:ef:69:7d:0a:62:bc:32:
f2:0c:9e:89:b8:b1:5a:19:fc:0b:ec:ae:87:a0:61:
55:ac:c8:2f:90:15:39:c1:8b:18:c2:ce:a3:dc:69:
a2:24:78:d6:14:75:d9:d4:a5:a8:25:e2:b4:c0:eb:
5c:25:a9:4f:fc:2d:76:9b:ab:31:bc:a8:f4:fb:4e:
48:3d:ba:12:03:12:19:81:a4:91:05:77:26:6b:bb:
9d:95:29:41:6a:90:bb:5e:99:d8:59:7d:22:51:4b:
14:d9:ba:93:e1:d5:90:73:c6:5e:c2:c0:63:a0:bb:
6b:28:ff:5e:97:b2:03:c4:10:b6:36:22:fd:5b:26:
f8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A3:A2:3B:4C:49:5F:A5:83:67:9A:4A:95:30:80:A0:DD:8D:BE:68
X509v3 Authority Key Identifier:
keyid:59:75:25:16:14:38:D5:A8:8F:7B:74:DC:11:5B:A1:82:BE:2E:C9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXUlFhQ41aiPe3TcEVuhgr4uyVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3da2e8-e973-478d-8ea1-22586b7053f4/1/zKOiO0xJX6WDZ5pKlTCAoN2Nvmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3da2e8-e973-478d-8ea1-22586b7053f4/1/WXUlFhQ41aiPe3TcEVuhgr4uyVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.36.0/22
Signature Algorithm: sha256WithRSAEncryption
29:51:9a:51:ce:52:91:a6:a8:fa:cf:65:dd:30:c3:b2:8f:57:
b0:03:6f:26:23:ab:41:d0:6c:6f:7d:1f:ce:20:51:04:dc:79:
3e:99:5c:9d:ce:95:68:3e:0d:61:96:49:86:e2:49:8f:ef:82:
fe:74:54:95:b9:8a:99:10:c2:b8:29:ac:f8:65:69:12:8b:f0:
e4:03:4c:0d:0d:7f:fe:3d:4e:fb:3c:b8:cf:85:b4:9f:a6:a0:
60:18:8f:a0:7e:01:19:df:6f:07:83:0e:41:c3:c4:97:64:0c:
02:a8:f1:b4:b5:1c:fb:1c:72:41:94:3a:9a:3d:4f:60:90:30:
9c:ff:06:94:dc:8f:af:91:60:db:35:2b:d2:b5:d3:d4:65:91:
ba:29:cd:ae:d5:6e:9f:37:68:5d:12:a1:10:fd:cb:eb:6e:d6:
4d:33:1e:42:40:44:52:2a:3d:90:60:12:dd:27:b8:fd:8b:b4:
33:a2:de:99:e3:b6:84:2e:d8:b3:11:f6:52:f1:f0:ff:b6:26:
0e:4a:25:b2:a5:8a:ff:0b:14:67:d3:c7:07:d5:64:94:ce:a9:
07:95:c5:c1:05:41:34:95:a9:ff:e6:df:d5:45:40:ad:62:54:
4e:de:06:39:62:21:09:8c:5c:30:c0:d7:dc:af:d9:f3:dd:ec:
ed:33:aa:6c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAv+IvjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
OTc1MjUxNjE0MzhkNWE4OGY3Yjc0ZGMxMTViYTE4MmJlMmVjOTU1MB4XDTIyMDEw
MTE1NTc0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2NhM2EyM2I0YzQ5
NWZhNTgzNjc5YTRhOTUzMDgwYTBkZDhkYmU2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALbz3McMZoP601K+0OOfNPVoH4kmXLmb0CKMY/P6XFEq6AaC
RaYHwW1k6dCWMIUUpMbxxxue9SWKh4mRk/aZ4N9avGikYrROEUkXJTgNa0i2s+bN
/bV4sZhgVi/9mApfv5Li9vjVLSwU8e6zQdAjC0ZyAgjQfkqHH2QkKRpio+nvaX0K
Yrwy8gyeibixWhn8C+yuh6BhVazIL5AVOcGLGMLOo9xpoiR41hR12dSlqCXitMDr
XCWpT/wtdpurMbyo9PtOSD26EgMSGYGkkQV3Jmu7nZUpQWqQu16Z2Fl9IlFLFNm6
k+HVkHPGXsLAY6C7ayj/XpeyA8QQtjYi/Vsm+NsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTMo6I7TElfpYNnmkqVMICg3Y2+aDAfBgNVHSMEGDAWgBRZdSUWFDjVqI97
dNwRW6GCvi7JVTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dYVWxGaFE0MWFpUGUzVGNFVnVoZ3I0dXlWVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvM2RhMmU4LWU5NzMtNDc4ZC04ZWExLTIyNTg2YjcwNTNmNC8x
L3pLT2lPMHhKWDZXRFo1cEtsVENBb04yTnZtZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
M2RhMmU4LWU5NzMtNDc4ZC04ZWExLTIyNTg2YjcwNTNmNC8xL1dYVWxGaFE0MWFp
UGUzVGNFVnVoZ3I0dXlWVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsEfJDANBgkqhkiG9w0BAQsFAAOC
AQEAKVGaUc5Skaao+s9l3TDDso9XsANvJiOrQdBsb30fziBRBNx5Pplcnc6VaD4N
YZZJhuJJj++C/nRUlbmKmRDCuCms+GVpEovw5ANMDQ1//j1O+zy4z4W0n6agYBiP
oH4BGd9vB4MOQcPEl2QMAqjxtLUc+xxyQZQ6mj1PYJAwnP8GlNyPr5Fg2zUr0rXT
1GWRuinNrtVunzdoXRKhEP3L627WTTMeQkBEUio9kGAS3Se4/Yu0M6LemeO2hC7Y
sxH2UvHw/7YmDkolsqWK/wsUZ9PHB9VklM6pB5XFwQVBNJWp/+bf1UVArWJUTt4G
OWIhCYxcMMDX3K/Z893s7TOqbA==
-----END CERTIFICATE-----
Generated at Sun May 11 22:09:25 2025 by rpki-client