Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZUi1g1ZSoPyNBSWUWYwP7fzIJIQ.roa
File: ZUi1g1ZSoPyNBSWUWYwP7fzIJIQ.roa (raw, json)
Hash identifier: wn4zKBEj9mwxSD2OprqM9YECacU8Jt26V8+136hKG24=
Subject key identifier: 65:48:B5:83:56:52:A0:FC:8D:05:25:94:59:8C:0F:ED:FC:C8:24:84
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA4B20A6D1B4630F159BC04F0E59C0D39
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZUi1g1ZSoPyNBSWUWYwP7fzIJIQ.roa
Signing time: Thu 23 May 2024 09:04:42 +0000
ROA not before: Thu 23 May 2024 09:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
2001:67c:64:ffff:0:18f:a4b1:99a1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:b2:0a:6d:1b:46:30:f1:59:bc:04:f0:e5:9c:0d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 23 09:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6548b5835652a0fc8d052594598c0fedfcc82484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:af:24:5a:12:ce:81:18:c5:1b:a6:c0:58:
ef:5c:34:42:20:66:6e:16:46:32:30:f2:2f:f4:35:
6b:04:7c:3f:ce:47:ac:9b:35:1c:e7:e9:93:67:8a:
94:95:8f:b1:f4:b3:79:c2:8c:26:d8:7b:71:ae:f7:
d3:e6:4a:00:cd:6e:ee:be:ed:ad:39:b8:ae:53:f1:
9b:7f:44:27:17:fa:f6:e2:b7:bc:b7:01:d7:5e:8f:
ba:f1:31:35:c8:24:f0:5e:54:aa:5a:29:cc:03:94:
90:ac:cc:28:bc:82:bd:9b:a6:88:b6:f8:43:4f:17:
e7:94:91:2a:76:76:9f:69:94:a1:ff:45:47:37:55:
ee:a7:64:dd:f6:c3:1e:28:e0:87:b8:60:97:9d:45:
55:dc:55:77:45:e6:7b:0a:21:ef:ba:b9:32:a2:05:
a5:a3:6a:d1:19:f8:13:4e:4c:2f:b9:b4:9e:78:c4:
95:d5:68:7d:96:47:43:6a:bc:f6:56:7d:33:23:3f:
cd:1e:84:3c:ee:34:c8:76:59:90:93:36:05:6e:5e:
37:ec:ae:fd:dc:97:2e:07:3b:b4:15:69:88:f1:02:
0b:c6:fa:65:86:ed:7b:fd:f6:eb:2d:6d:33:ab:44:
6d:93:4d:10:c6:29:ae:c8:b8:84:5a:4d:0a:46:25:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:48:B5:83:56:52:A0:FC:8D:05:25:94:59:8C:0F:ED:FC:C8:24:84
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZUi1g1ZSoPyNBSWUWYwP7fzIJIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:11:85:fb:3a:56:df:5d:78:24:50:50:90:75:de:d6:c7:bd:
9b:8e:b0:78:56:6b:4a:61:8e:5b:cd:0e:2a:09:21:0c:37:74:
43:44:01:5c:57:84:09:b1:1f:57:6f:77:52:76:48:6d:02:f5:
7a:77:9c:66:7e:ca:47:de:de:80:81:dd:f8:7c:34:bb:bb:67:
7a:52:31:4b:e7:b8:d6:84:0d:74:d2:70:51:0f:34:f5:e6:1b:
d9:41:f5:d5:24:86:6c:50:fa:a1:9a:80:74:e8:10:8e:aa:11:
f7:60:ad:9e:2b:f6:51:f3:55:7f:bc:38:cd:2a:dd:64:ca:5c:
31:43:71:92:8f:83:40:0c:b0:5d:b5:af:62:55:4d:f9:c8:33:
a3:bb:59:22:8d:4c:ff:be:d4:90:28:5c:59:ec:2a:3e:cb:db:
37:b4:1a:85:a7:db:ce:b1:f7:97:d9:5f:6d:cc:84:0a:c2:f6:
10:b4:ac:3a:44:5e:22:7a:b5:3a:ab:82:53:68:a9:1a:a2:ce:
f0:7c:53:3b:1c:00:f2:e1:24:9f:e5:e2:3b:1b:14:0f:be:a0:
94:1c:a5:3e:32:7a:c6:58:b7:4d:11:9c:a2:e5:e8:b3:cb:4f:
21:6a:c5:ad:ef:7c:41:cb:90:16:66:33:64:f8:33:8b:98:48:
a1:2c:5e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:30:23 2025 by rpki-client