Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/CTZaBgAZqqGTerF-wQPiAgBwN_A.roa
File: CTZaBgAZqqGTerF-wQPiAgBwN_A.roa (raw, json)
Hash identifier: xZAdx9A1vNcgQD9CbZVBsQdKFCS5EyFGv2CViHt0aDI=
Subject key identifier: 09:36:5A:06:00:19:AA:A1:93:7A:B1:7E:C1:03:E2:02:00:70:37:F0
Certificate issuer: /CN=4ac5193d178a3ac7359c6e9cafcb3ca03129fd3a
Certificate serial: 01856FA6EF11F3FA943FD84A7331CFC505CF
Authority key identifier: 4A:C5:19:3D:17:8A:3A:C7:35:9C:6E:9C:AF:CB:3C:A0:31:29:FD:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsUZPReKOsc1nG6cr8s8oDEp_To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/CTZaBgAZqqGTerF-wQPiAgBwN_A.roa
Signing time: Sun 01 Jan 2023 23:24:49 +0000
ROA not before: Sun 01 Jan 2023 23:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 185.128.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:ef:11:f3:fa:94:3f:d8:4a:73:31:cf:c5:05:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5193d178a3ac7359c6e9cafcb3ca03129fd3a
Validity
Not Before: Jan 1 23:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09365a060019aaa1937ab17ec103e202007037f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:fc:23:7f:8c:38:5e:19:27:1d:7e:39:da:
f6:fa:8d:cd:34:de:97:c3:af:10:ed:34:53:5e:36:
a9:49:8b:82:c7:07:3d:1e:a9:ce:ee:9f:19:09:17:
ee:46:96:68:ae:73:2f:d9:ed:57:96:39:f9:d1:8f:
5b:64:5a:cd:10:2a:84:55:06:3d:1c:1b:8b:96:ab:
a7:28:2e:e1:56:ab:3c:54:f9:ad:70:9d:14:4c:98:
60:ab:5e:1c:ca:e2:6c:92:76:e6:2c:a8:26:4c:d5:
80:75:96:79:a0:20:9f:05:bf:cd:8f:de:58:56:d1:
e1:eb:28:49:90:bb:ad:ae:65:88:ed:fc:cb:e3:14:
cc:9d:0b:35:f1:db:30:02:40:f0:a2:c7:81:f3:84:
fa:e8:d4:7a:80:5a:17:ef:28:76:52:9c:7d:ae:b5:
6b:3b:c6:2b:19:22:bb:c0:8b:07:6a:9f:d7:40:6a:
37:8d:fd:9a:55:9c:9f:bd:df:8c:0d:7b:25:24:44:
1f:7c:6d:1c:dd:b8:a5:3d:33:41:7d:14:c7:fe:bb:
fe:86:a0:30:39:47:cb:56:03:91:b6:bd:c6:0c:5d:
9e:03:af:41:89:92:c5:b7:7d:67:e8:d7:85:28:6d:
a2:2b:19:d8:df:bf:81:a7:3d:17:47:8d:87:ac:9d:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:36:5A:06:00:19:AA:A1:93:7A:B1:7E:C1:03:E2:02:00:70:37:F0
X509v3 Authority Key Identifier:
keyid:4A:C5:19:3D:17:8A:3A:C7:35:9C:6E:9C:AF:CB:3C:A0:31:29:FD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsUZPReKOsc1nG6cr8s8oDEp_To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/CTZaBgAZqqGTerF-wQPiAgBwN_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/429506-cc55-4c7f-a756-416a61c3d234/1/SsUZPReKOsc1nG6cr8s8oDEp_To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c7:f8:36:7d:8a:ae:81:1d:43:fc:03:2a:d1:d2:39:0d:30:
9a:46:f2:e3:f3:bd:ba:94:5d:e1:e7:c1:85:e5:54:8f:96:0a:
5f:03:0b:b1:c8:02:82:6c:29:5d:92:e1:ef:44:a4:35:fc:a7:
9c:08:4f:6d:b5:18:c2:15:84:cc:69:ee:cb:cc:fa:06:1a:5f:
36:b4:e8:89:d5:d3:30:da:41:73:5d:20:ef:a9:db:1a:11:18:
60:96:a3:27:ea:70:45:b9:79:99:c1:c7:e3:f5:ed:94:a3:9a:
0b:3a:75:d7:c6:9e:4a:ca:3a:13:82:ea:d6:b3:b1:a5:c2:4e:
c5:57:12:af:7e:27:bb:e9:2d:b9:19:d9:05:fe:eb:51:29:89:
73:1e:ec:ea:f0:c0:52:ff:ca:3b:4c:74:e2:e8:4d:4c:64:60:
c5:2d:ac:81:b2:f1:a1:b3:9e:f7:3c:0e:b9:51:e8:81:f6:5a:
f9:64:96:6d:52:2c:d4:cf:dc:72:ef:13:ad:7f:41:cb:86:17:
5f:42:82:83:a7:25:3e:72:fa:13:22:8e:9e:98:8c:85:fe:fa:
c3:24:7a:72:62:5e:f9:98:fd:3a:03:c0:bc:8a:ec:0e:7c:c9:
03:74:97:3a:31:cf:e7:04:e1:7c:3c:54:50:c7:b3:01:05:29:
cb:1b:26:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvpu8R8/qUP9hKczHPxQXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYzUxOTNkMTc4YTNhYzczNTljNmU5Y2FmY2IzY2EwMzEy
OWZkM2EwHhcNMjMwMTAxMjMyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTM2NWEwNjAwMTlhYWExOTM3YWIxN2VjMTAzZTIwMjAwNzAzN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBP8I3+MOF4ZJx1+Odr2+o3NNN6X
w68Q7TRTXjapSYuCxwc9HqnO7p8ZCRfuRpZornMv2e1Xljn50Y9bZFrNECqEVQY9
HBuLlqunKC7hVqs8VPmtcJ0UTJhgq14cyuJsknbmLKgmTNWAdZZ5oCCfBb/Nj95Y
VtHh6yhJkLutrmWI7fzL4xTMnQs18dswAkDwoseB84T66NR6gFoX7yh2Upx9rrVr
O8YrGSK7wIsHap/XQGo3jf2aVZyfvd+MDXslJEQffG0c3bilPTNBfRTH/rv+hqAw
OUfLVgORtr3GDF2eA69BiZLFt31n6NeFKG2iKxnY37+Bpz0XR42HrJ0m/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAk2WgYAGaqhk3qxfsED4gIAcDfwMB8GA1UdIwQY
MBaAFErFGT0XijrHNZxunK/LPKAxKf06MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3NVWlBSZUtPc2Mxbkc2Y3I4czhvREVwX1RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80Mjk1MDYtY2M1NS00YzdmLWE3NTYt
NDE2YTYxYzNkMjM0LzEvQ1RaYUJnQVpxcUdUZXJGLXdRUGlBZ0J3Tl9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80Mjk1MDYtY2M1NS00YzdmLWE3NTYtNDE2YTYxYzNkMjM0
LzEvU3NVWlBSZUtPc2Mxbkc2Y3I4czhvREVwX1RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYAJMA0G
CSqGSIb3DQEBCwUAA4IBAQB+x/g2fYqugR1D/AMq0dI5DTCaRvLj8726lF3h58GF
5VSPlgpfAwuxyAKCbCldkuHvRKQ1/KecCE9ttRjCFYTMae7LzPoGGl82tOiJ1dMw
2kFzXSDvqdsaERhglqMn6nBFuXmZwcfj9e2Uo5oLOnXXxp5KyjoTgurWs7Glwk7F
VxKvfie76S25GdkF/utRKYlzHuzq8MBS/8o7THTi6E1MZGDFLayBsvGhs573PA65
UeiB9lr5ZJZtUizUz9xy7xOtf0HLhhdfQoKDpyU+cvoTIo6emIyF/vrDJHpyYl75
mP06A8C8iuwOfMkDdJc6Mc/nBOF8PFRQx7MBBSnLGyYs
-----END CERTIFICATE-----
Generated at Sun May 11 04:05:05 2025 by rpki-client