Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZalEED5H0vNaWbwQKPq8-nTserc.roa
File: ZalEED5H0vNaWbwQKPq8-nTserc.roa (raw, json)
Hash identifier: OgiH8dOIw+pGNNWYByS9T6FK1bfBdg59dBd9oE3WH/o=
Subject key identifier: 65:A9:44:10:3E:47:D2:F3:5A:59:BC:10:28:FA:BC:FA:74:EC:7A:B7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E69B8D7EEA759107FC1E9D9E1363684E0
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZalEED5H0vNaWbwQKPq8-nTserc.roa
Signing time: Sat 23 Mar 2024 05:11:45 +0000
ROA not before: Sat 23 Mar 2024 05:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:69:b8:d7:ee:a7:59:10:7f:c1:e9:d9:e1:36:36:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 05:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65a944103e47d2f35a59bc1028fabcfa74ec7ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:53:cf:b1:be:35:52:7d:d2:7d:61:eb:ef:
53:43:90:57:38:63:c6:db:a8:9f:a2:ff:de:23:90:
ec:e2:82:b9:a6:bd:27:18:f9:b9:82:ff:22:70:24:
0d:d1:67:7b:72:67:55:d4:a9:11:90:f3:d5:a5:53:
df:12:b9:d7:ec:bc:d1:01:98:4a:36:5d:4f:92:f2:
08:40:a0:57:f4:5b:de:c7:45:f1:0c:37:d9:f6:2c:
7c:8f:60:3f:93:72:fb:34:01:d8:2b:76:26:a7:9f:
a3:8d:4d:07:4b:46:92:25:fb:34:dc:c4:e5:fa:74:
e4:c7:2a:fc:ee:99:dc:94:ea:cc:c3:9b:7c:8d:4b:
84:79:be:a4:73:03:0c:99:76:41:dd:8c:50:0b:3e:
8b:09:84:57:7c:fa:7c:3d:1d:ff:e4:26:06:2e:55:
50:1e:c4:d6:f0:59:e3:19:71:54:21:fc:90:5a:0f:
bc:ae:ff:80:04:9d:ed:b3:4a:3b:b2:d0:22:3a:bb:
2d:be:e9:32:d5:74:0e:cb:c7:59:62:04:4e:34:eb:
2a:79:da:bd:28:96:06:76:de:c9:9f:23:4f:12:4d:
01:ad:29:6c:94:ae:77:d0:bd:59:be:be:eb:ec:3b:
13:6d:3f:15:2c:9c:b2:37:8c:4f:61:32:4c:6d:62:
3d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:44:10:3E:47:D2:F3:5A:59:BC:10:28:FA:BC:FA:74:EC:7A:B7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZalEED5H0vNaWbwQKPq8-nTserc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:74:20:bb:69:5f:ce:3b:94:b1:bb:f7:6d:87:37:70:4a:a4:
48:d2:39:70:bc:fd:1c:73:aa:35:7b:65:82:cd:5f:77:37:ac:
e7:f5:56:cc:47:79:64:34:77:f2:a3:2e:7f:85:cd:a8:7e:f4:
af:0b:f9:3e:fb:6c:a0:46:1d:8e:32:f3:fa:31:41:e6:13:b2:
1c:7b:89:18:7f:76:23:7b:bd:37:05:08:80:1d:4a:d9:25:91:
8f:52:10:56:60:fd:a5:60:b7:47:5b:31:53:42:27:61:a9:c1:
34:00:55:41:f1:af:6a:62:1d:d0:f1:7b:8f:59:77:77:14:3f:
ed:1d:8e:75:f3:3d:ab:88:c9:56:3c:de:4a:3f:90:19:21:cf:
bd:dc:fc:21:f0:e7:f5:55:3d:43:b3:ce:c6:f8:5f:c8:99:35:
97:cb:c4:95:8f:c3:d3:77:9a:a7:2e:1e:45:ae:3b:b4:12:0b:
f6:30:13:1b:f3:80:1b:1e:ba:74:44:4f:12:ec:96:4f:8d:ed:
33:34:d1:39:e4:99:1a:f9:d0:b1:f1:d4:0f:7c:9d:a4:f5:c5:
f1:02:92:a7:2d:9a:58:e5:83:e0:2c:d5:a4:bd:e1:52:86:56:
0f:96:16:71:d4:0f:91:96:9c:69:46:74:3e:2e:b7:f5:08:5e:
72:16:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:58:33 2025 by rpki-client