Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZCTTBX0JfyRbFE-jCct_f7F4Zgo.roa
File: ZCTTBX0JfyRbFE-jCct_f7F4Zgo.roa (raw, json)
Hash identifier: 88/vrRUfRUg9K1Zwr6ufOfaAmSfOaO9HjKTyR11ObaI=
Subject key identifier: 64:24:D3:05:7D:09:7F:24:5B:14:4F:A3:09:CB:7F:7F:B1:78:66:0A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CAEA01E59738BD468809A7E2828AEE0B5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZCTTBX0JfyRbFE-jCct_f7F4Zgo.roa
Signing time: Thu 28 Dec 2023 04:12:58 +0000
ROA not before: Thu 28 Dec 2023 04:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ae:a0:1e:59:73:8b:d4:68:80:9a:7e:28:28:ae:e0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 28 04:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6424d3057d097f245b144fa309cb7f7fb178660a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:45:6d:e8:d7:1e:3b:06:a9:b3:47:9d:e0:1c:
e1:cc:ba:b4:d9:44:8d:b1:f1:69:4e:cb:d5:72:eb:
2f:64:72:5b:f7:ce:3e:ec:e3:f3:55:46:aa:9a:32:
ef:c1:eb:50:79:a8:0f:68:be:17:15:df:73:93:b0:
42:42:7b:31:a6:93:77:94:06:f0:f9:a8:3b:1f:dd:
98:d8:d7:ee:4c:be:04:ac:30:45:25:80:82:0e:5e:
2d:d0:8f:7e:70:d8:be:37:90:b3:aa:5b:c1:f8:da:
98:1a:68:b2:90:78:8c:6e:21:eb:82:f0:de:b1:a7:
ef:aa:11:db:b6:c3:36:32:e9:00:1a:2e:79:12:4b:
f8:20:45:7e:98:7a:39:eb:90:62:fe:d3:00:f0:6f:
1a:2f:2d:f8:50:49:ee:b7:80:07:88:28:83:fd:fd:
03:77:18:37:98:33:a8:4c:af:54:9a:f9:9c:9b:2f:
44:45:14:e8:0b:c2:17:03:7b:0d:bf:e8:fb:65:fb:
5f:41:44:d1:b7:51:87:bd:e8:d8:fc:55:a4:d1:32:
74:2a:ad:39:d4:7c:80:af:1e:39:a5:43:f1:8f:72:
cc:01:f4:8c:3d:f4:04:9b:be:4e:50:b9:12:c0:66:
81:34:ed:a6:51:96:6e:58:62:99:28:94:64:2d:51:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:24:D3:05:7D:09:7F:24:5B:14:4F:A3:09:CB:7F:7F:B1:78:66:0A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZCTTBX0JfyRbFE-jCct_f7F4Zgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:24:7a:0f:86:5b:52:84:2c:2d:f2:32:64:cb:91:e8:d7:89:
b2:bd:80:62:0c:f0:1d:bf:8f:df:45:54:47:ce:f0:f8:61:a7:
76:71:ee:5b:46:a2:51:e7:b8:b8:d0:33:3a:65:b8:10:00:54:
78:ce:31:3d:b7:f1:d0:30:7b:d1:d0:cd:04:42:f9:5c:9d:3c:
6e:ac:54:9d:bf:bc:fa:da:cf:e5:e7:c0:cd:0f:05:a5:40:c0:
b6:37:33:86:33:14:9f:2a:ab:6a:3d:cd:8a:b5:96:5f:de:12:
71:ff:27:3d:65:40:4e:42:07:8e:13:09:dd:e9:66:ac:6c:0d:
20:00:c3:8c:01:d8:6e:3e:f3:ae:ee:58:89:f7:a8:cc:12:cc:
c7:68:e4:a4:df:f7:60:af:97:05:b9:8f:e1:60:c7:23:81:53:
d9:2f:25:5a:25:d5:bf:ba:12:a0:96:6e:7b:51:42:a2:b6:85:
59:41:dc:8d:6e:63:d0:93:99:3d:cb:6e:da:4a:b1:8e:4e:9b:
c0:2e:65:9a:00:d2:34:f9:c6:fb:95:02:7a:f5:23:45:55:9c:
ad:c6:11:e0:d8:40:67:0c:05:35:e9:bf:18:f4:5d:8d:29:9c:
03:c2:b3:96:f9:10:2a:50:c6:f5:ff:a5:a6:0f:c9:93:46:06:
71:96:57:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyuoB5Zc4vUaICafigoruC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjI4MDQxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDI0ZDMwNTdkMDk3ZjI0NWIxNDRmYTMwOWNiN2Y3ZmIxNzg2NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEVt6NceOwaps0ed4BzhzLq02USN
sfFpTsvVcusvZHJb984+7OPzVUaqmjLvwetQeagPaL4XFd9zk7BCQnsxppN3lAbw
+ag7H92Y2NfuTL4ErDBFJYCCDl4t0I9+cNi+N5CzqlvB+NqYGmiykHiMbiHrgvDe
safvqhHbtsM2MukAGi55Ekv4IEV+mHo565Bi/tMA8G8aLy34UEnut4AHiCiD/f0D
dxg3mDOoTK9Umvmcmy9ERRToC8IXA3sNv+j7ZftfQUTRt1GHvejY/FWk0TJ0Kq05
1HyArx45pUPxj3LMAfSMPfQEm75OULkSwGaBNO2mUZZuWGKZKJRkLVF/HwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGQk0wV9CX8kWxRPownLf3+xeGYKMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvWkNUVEJYMEpmeVJiRkUtakNjdF9mN0Y0WmdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAMkeg+GW1KELC3yMmTL
kejXibK9gGIM8B2/j99FVEfO8Phhp3Zx7ltGolHnuLjQMzpluBAAVHjOMT238dAw
e9HQzQRC+VydPG6sVJ2/vPraz+XnwM0PBaVAwLY3M4YzFJ8qq2o9zYq1ll/eEnH/
Jz1lQE5CB44TCd3pZqxsDSAAw4wB2G4+867uWIn3qMwSzMdo5KTf92CvlwW5j+Fg
xyOBU9kvJVol1b+6EqCWbntRQqK2hVlB3I1uY9CTmT3LbtpKsY5Om8AuZZoA0jT5
xvuVAnr1I0VVnK3GEeDYQGcMBTXpvxj0XY0pnAPCs5b5ECpQxvX/paYPyZNGBnGW
V4g=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:13 2025 by rpki-client