Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/ZqZPTRKencKUKOh03tTzDHOZPN4.roa
File: ZqZPTRKencKUKOh03tTzDHOZPN4.roa (raw, json)
Hash identifier: wRSdvqDoWJErm2HDp9WKZpFHksq5i2uQw5sT6BQ0NC8=
Subject key identifier: 66:A6:4F:4D:12:9E:9D:C2:94:28:E8:74:DE:D4:F3:0C:73:99:3C:DE
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0399FB23
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/ZqZPTRKencKUKOh03tTzDHOZPN4.roa
Signing time: Mon 02 May 2022 19:19:05 +0000
ROA not before: Mon 02 May 2022 19:19:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 193.142.36.0/22 maxlen: 24
91.132.124.0/23 maxlen: 23
212.87.216.0/24 maxlen: 24
212.87.219.0/24 maxlen: 24
212.87.218.0/24 maxlen: 24
93.177.94.0/23 maxlen: 24
93.177.94.0/24 maxlen: 24
93.177.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60422947 (0x399fb23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: May 2 19:19:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66a64f4d129e9dc29428e874ded4f30c73993cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:5b:a9:50:73:61:d4:6d:50:e1:26:17:38:
75:75:ec:e1:26:ff:36:e9:46:fb:ac:c2:ec:58:8a:
5d:df:98:5a:45:f9:ba:c1:80:84:32:fb:f1:11:a2:
db:fb:74:b3:5e:c9:c0:53:0d:43:19:31:fb:ea:91:
34:75:9a:23:9f:00:80:c1:1a:8a:94:e1:8e:4d:31:
c5:70:0b:57:33:fa:2a:da:34:d7:68:1e:20:26:bc:
a8:bc:7e:2b:1a:2b:f9:f0:ae:ec:f1:38:2d:0a:90:
45:6d:b9:80:8c:0c:a8:f3:0d:f4:e6:1f:b4:04:d7:
d5:5b:ed:fa:6e:54:10:e9:41:7c:20:4f:fe:d9:85:
04:a6:2d:24:00:68:51:27:b2:e1:ff:b6:34:53:03:
f0:ce:a6:d3:84:64:1d:95:e1:03:35:d2:61:ea:eb:
56:39:b8:0b:45:9a:79:57:07:8b:cc:30:fd:6d:15:
c8:71:dc:fa:8c:07:dc:af:7f:ff:4e:8c:d0:1a:dd:
14:db:e2:18:fa:96:56:48:52:70:04:1a:29:73:2d:
93:32:d5:0f:24:e4:0e:32:8e:11:84:39:1b:1d:5b:
c3:24:e2:ea:63:99:8f:22:2c:d4:ba:85:13:12:3d:
cc:bb:e3:af:f1:3f:96:df:d4:9b:c9:d6:12:12:13:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A6:4F:4D:12:9E:9D:C2:94:28:E8:74:DE:D4:F3:0C:73:99:3C:DE
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/ZqZPTRKencKUKOh03tTzDHOZPN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.124.0/23
93.177.94.0/23
193.142.36.0/22
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:77:06:36:b0:78:a8:3b:ea:ad:c5:a7:09:cf:c4:3b:72:3e:
dd:1c:9c:d9:f3:01:15:b6:9b:82:c2:31:05:9f:3b:fc:f9:d8:
7c:28:22:ca:ba:1c:4e:4f:47:76:31:e6:da:a5:da:49:5d:02:
d8:ec:34:fe:7e:ed:0a:b4:df:59:8b:88:1e:f4:28:8b:77:02:
c2:0a:0f:a6:4c:1b:6a:c6:c1:02:7c:43:a6:d9:24:a9:89:99:
7e:f5:3e:18:4b:36:33:ee:53:ea:b8:87:94:68:de:2c:7f:5d:
e3:bf:16:f4:0c:d4:7f:12:8f:06:6b:93:e8:70:3a:12:8d:ed:
14:e7:b0:ed:2a:28:e0:e8:12:c2:9a:95:6c:37:c2:ca:91:f5:
e4:03:cf:2c:22:e7:96:c8:66:f6:9c:89:b7:a2:22:51:1a:51:
39:42:af:07:af:46:c4:5f:77:81:c1:72:3c:91:0c:97:f7:88:
ee:9f:50:1b:b3:7d:2d:72:ab:a5:68:e1:ca:3e:87:fd:76:98:
67:5f:be:42:c7:dd:fc:1b:a8:53:49:2d:9b:b7:12:54:84:4b:
1e:28:60:1e:2d:c2:90:53:26:53:15:3b:90:e0:75:dd:85:77:
a8:54:7d:a8:2c:f7:db:75:c9:fb:0f:94:db:c0:d0:09:80:a9:
58:34:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:56:54 2025 by rpki-client