Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZDFRs1iWHNXp58rhEVetn2HBG9I.roa
File: ZDFRs1iWHNXp58rhEVetn2HBG9I.roa (raw, json)
Hash identifier: IofOik5tBGsOVU0yDMpVHI8wacPl1I7Rl99X3s860gQ=
Subject key identifier: 64:31:51:B3:58:96:1C:D5:E9:E7:CA:E1:11:57:AD:9F:61:C1:1B:D2
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C9405838CD761A032BB1094A0B2B56551
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZDFRs1iWHNXp58rhEVetn2HBG9I.roa
Signing time: Sat 23 Dec 2023 00:13:58 +0000
ROA not before: Sat 23 Dec 2023 00:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:94:05:83:8c:d7:61:a0:32:bb:10:94:a0:b2:b5:65:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 00:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=643151b358961cd5e9e7cae11157ad9f61c11bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:7d:fc:1a:46:f4:79:d2:64:25:4e:c2:fa:
4d:5d:9c:64:92:20:f8:33:28:99:6a:a6:0b:1f:76:
71:1a:3c:55:43:9e:29:c7:2d:dd:fd:41:bb:10:94:
03:9f:86:c3:a2:df:d9:a5:cf:37:e4:ff:86:38:8c:
30:07:01:c7:44:a8:95:f2:5f:41:37:85:35:a0:2b:
95:a8:2f:24:16:c0:bf:77:a9:10:22:6c:76:41:77:
04:a0:0f:f6:8d:0f:a9:31:ba:95:a3:bb:69:7c:50:
2a:3f:bf:1e:cd:2a:0d:d8:ee:a1:00:fe:3e:fe:c7:
7d:fe:4b:32:9b:15:b2:c0:9e:0f:88:58:4e:ea:d0:
b7:6e:b3:81:c9:87:bd:bc:1b:88:3e:b1:03:98:f3:
19:b9:dc:44:13:c2:86:16:6c:23:67:ec:b3:43:1a:
1e:0d:62:fe:46:d6:f5:43:56:a6:fe:4a:07:de:f0:
b9:dc:14:31:60:a6:88:1e:8e:a6:93:e6:55:80:30:
6a:47:4f:d8:db:cd:93:99:b3:c3:b1:dd:03:16:cf:
7a:65:f6:c9:8e:6a:dc:14:fb:4d:ad:ca:88:a8:8d:
7f:cb:39:d9:87:9a:a4:99:73:bd:9d:59:49:0f:34:
aa:9a:d2:4f:7d:1a:97:f8:d3:2e:75:f0:52:bc:1f:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:51:B3:58:96:1C:D5:E9:E7:CA:E1:11:57:AD:9F:61:C1:1B:D2
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZDFRs1iWHNXp58rhEVetn2HBG9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:08:77:c4:0a:ef:7a:2e:b2:4d:2e:ec:37:c8:0d:46:6b:89:
ae:45:4d:5b:58:df:82:2d:ea:44:ac:17:16:48:53:18:4d:ea:
28:ff:08:6e:01:1e:08:a2:6d:25:f9:bf:f5:ab:b9:58:d0:9d:
47:57:d9:a5:bc:86:c5:01:fd:11:41:1a:66:52:8d:81:75:47:
4a:b5:76:60:1f:e8:c8:ba:5a:3f:45:85:fe:f5:2b:4a:3f:a1:
7e:22:f1:55:16:d2:f6:d5:1a:b1:aa:86:14:24:63:2f:b3:39:
f1:bd:db:38:83:f2:07:57:24:93:72:70:6b:f6:43:bf:0e:e5:
39:c2:9c:5d:b0:10:a9:b7:f2:2d:36:90:92:93:7c:78:4f:26:
ff:11:9f:fc:41:4d:60:55:db:59:b8:d3:d3:26:e5:08:89:40:
4b:dc:5e:bb:d3:49:85:ff:b9:ff:40:0e:5d:fd:38:2c:7c:ac:
24:a1:d7:a4:20:f3:9d:d7:c3:f1:fa:a9:6e:f7:96:e5:c6:e5:
7c:2d:9e:cd:58:f4:4a:a5:6c:41:31:51:24:e8:8c:53:7f:47:
26:e5:99:be:02:32:77:62:fa:53:1a:19:84:52:62:0b:bf:b5:
44:f8:a4:27:89:58:ab:91:a1:57:ce:2a:e2:6b:56:90:8a:be:
91:ca:a4:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyUBYOM12GgMrsQlKCytWVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjMxMjIzMDAxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDMxNTFiMzU4OTYxY2Q1ZTllN2NhZTExMTU3YWQ5ZjYxYzExYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugh9/BpG9HnSZCVOwvpNXZxkkiD4
MyiZaqYLH3ZxGjxVQ54pxy3d/UG7EJQDn4bDot/Zpc835P+GOIwwBwHHRKiV8l9B
N4U1oCuVqC8kFsC/d6kQImx2QXcEoA/2jQ+pMbqVo7tpfFAqP78ezSoN2O6hAP4+
/sd9/ksymxWywJ4PiFhO6tC3brOByYe9vBuIPrEDmPMZudxEE8KGFmwjZ+yzQxoe
DWL+Rtb1Q1am/koH3vC53BQxYKaIHo6mk+ZVgDBqR0/Y282TmbPDsd0DFs96ZfbJ
jmrcFPtNrcqIqI1/yznZh5qkmXO9nVlJDzSqmtJPfRqX+NMudfBSvB8lTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGQxUbNYlhzV6efK4RFXrZ9hwRvSMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvWkRGUnMxaVdITlhwNThyaEVWZXRuMkhCRzlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIwId8QK73ousk0u7DfI
DUZria5FTVtY34It6kSsFxZIUxhN6ij/CG4BHgiibSX5v/WruVjQnUdX2aW8hsUB
/RFBGmZSjYF1R0q1dmAf6Mi6Wj9Fhf71K0o/oX4i8VUW0vbVGrGqhhQkYy+zOfG9
2ziD8gdXJJNycGv2Q78O5TnCnF2wEKm38i02kJKTfHhPJv8Rn/xBTWBV21m409Mm
5QiJQEvcXrvTSYX/uf9ADl39OCx8rCSh16Qg853Xw/H6qW73luXG5Xwtns1Y9Eql
bEExUSTojFN/Ryblmb4CMndi+lMaGYRSYgu/tUT4pCeJWKuRoVfOKuJrVpCKvpHK
pKw=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:13 2025 by rpki-client