Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZlJEWGguwvHDGBkm7uRW7_ZpbzI.roa
File: ZlJEWGguwvHDGBkm7uRW7_ZpbzI.roa (raw, json)
Hash identifier: g3M6fkMd0DV1/eLj9YHrIpIXlczvqzCWvvlwXeW1JCQ=
Subject key identifier: 66:52:44:58:68:2E:C2:F1:C3:18:19:26:EE:E4:56:EF:F6:69:6F:32
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CCCA339046C35C3F75410BFFF32588C55
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZlJEWGguwvHDGBkm7uRW7_ZpbzI.roa
Signing time: Wed 03 Jan 2024 00:04:58 +0000
ROA not before: Wed 03 Jan 2024 00:04:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:cca3:27de/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cc:a3:39:04:6c:35:c3:f7:54:10:bf:ff:32:58:8c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 3 00:04:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66524458682ec2f1c3181926eee456eff6696f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:26:9f:2e:6e:b3:a5:9b:0e:b9:8b:47:21:
1f:c2:63:e5:81:06:8f:0d:0b:e9:12:62:76:8c:eb:
8d:26:f4:38:64:53:77:4a:41:a1:43:a4:42:98:04:
8b:e4:12:a3:14:9b:ba:08:2d:0a:db:d4:92:30:15:
71:ca:e3:25:36:cb:6b:88:05:1a:b0:81:23:ab:a2:
72:47:6a:50:cc:1b:db:b7:4b:47:f4:73:97:f5:38:
c0:aa:8b:58:14:3c:5c:cc:c8:98:8e:21:ae:7f:bc:
c3:9e:b4:3c:f1:90:4a:90:33:34:0d:4e:e9:89:4d:
13:52:0d:b0:bb:20:ba:74:0a:6f:66:04:54:64:3a:
d4:8f:02:18:83:73:25:47:cb:5b:6e:ec:8a:5a:39:
70:19:08:88:62:e3:8c:2c:9c:70:a4:fa:10:b0:86:
92:26:17:7a:a5:49:ac:3c:ab:fc:b0:d8:31:7e:85:
c4:58:ff:c7:07:7b:d4:1c:87:42:55:b6:7d:fa:7f:
d6:01:26:b7:7a:22:04:bc:14:20:34:24:c6:6a:76:
10:60:2d:fb:99:12:64:e7:d8:7f:66:92:7e:aa:29:
dc:18:fd:37:f3:76:92:cf:3f:fd:87:7e:f5:74:d1:
cd:08:5b:b3:eb:f8:fa:d6:7c:cd:85:d1:ac:b8:05:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:52:44:58:68:2E:C2:F1:C3:18:19:26:EE:E4:56:EF:F6:69:6F:32
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZlJEWGguwvHDGBkm7uRW7_ZpbzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:46:61:92:b8:f9:b0:54:e4:21:64:53:92:b4:e0:f5:10:e6:
a6:fc:c0:f0:7d:6d:71:91:91:d3:66:ab:5b:62:ae:ff:f0:c7:
0f:f8:02:6e:e1:93:8a:9a:67:28:a6:ec:51:7e:ea:6e:7c:f2:
0e:09:bb:72:ce:9a:9d:6a:4d:05:9a:e7:9e:4e:c5:34:a3:b5:
a8:84:ec:65:5b:0b:04:7c:04:b2:90:9b:33:d7:90:60:a5:d7:
f5:c0:37:d2:fc:1f:cd:ec:24:33:f1:55:5f:ce:83:2d:38:46:
ac:49:fd:33:c0:1f:51:24:e3:a3:33:e4:d5:6e:ce:b2:89:69:
c2:b2:f6:d6:57:42:5d:94:6f:c2:c3:2c:b8:06:54:11:4b:44:
c1:81:f8:2b:29:a7:67:9c:26:84:8d:e5:70:77:6a:ef:16:64:
d3:bb:ba:62:e4:73:52:ec:8f:53:71:1b:96:79:a4:b0:7a:1d:
b1:d0:62:18:86:74:25:2e:99:d3:54:af:68:de:95:08:57:6d:
f4:97:d8:1c:d4:aa:50:cc:88:c4:d0:19:de:00:3b:7a:ac:d0:
d8:7a:f6:60:60:0d:5c:cc:10:20:c7:f7:2b:69:ae:ec:53:74:
f9:45:ac:10:91:4e:28:34:28:1a:e1:0a:f9:ff:e4:2b:18:10:
95:ef:ad:72
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzMozkEbDXD91QQv/8yWIxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTAzMDAwNDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjUyNDQ1ODY4MmVjMmYxYzMxODE5MjZlZWU0NTZlZmY2Njk2ZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9Emny5us6WbDrmLRyEfwmPlgQaP
DQvpEmJ2jOuNJvQ4ZFN3SkGhQ6RCmASL5BKjFJu6CC0K29SSMBVxyuMlNstriAUa
sIEjq6JyR2pQzBvbt0tH9HOX9TjAqotYFDxczMiYjiGuf7zDnrQ88ZBKkDM0DU7p
iU0TUg2wuyC6dApvZgRUZDrUjwIYg3MlR8tbbuyKWjlwGQiIYuOMLJxwpPoQsIaS
Jhd6pUmsPKv8sNgxfoXEWP/HB3vUHIdCVbZ9+n/WASa3eiIEvBQgNCTGanYQYC37
mRJk59h/ZpJ+qincGP0383aSzz/9h371dNHNCFuz6/j61nzNhdGsuAXcYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGZSRFhoLsLxwxgZJu7kVu/2aW8yMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvWmxKRVdHZ3V3dkhER0JrbTd1Ulc3X1pwYnpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHpGYZK4+bBU5CFkU5K0
4PUQ5qb8wPB9bXGRkdNmq1tirv/wxw/4Am7hk4qaZyim7FF+6m588g4Ju3LOmp1q
TQWa555OxTSjtaiE7GVbCwR8BLKQmzPXkGCl1/XAN9L8H83sJDPxVV/Ogy04RqxJ
/TPAH1Ek46Mz5NVuzrKJacKy9tZXQl2Ub8LDLLgGVBFLRMGB+Cspp2ecJoSN5XB3
au8WZNO7umLkc1Lsj1NxG5Z5pLB6HbHQYhiGdCUumdNUr2jelQhXbfSX2BzUqlDM
iMTQGd4AO3qs0Nh69mBgDVzMECDH9ytpruxTdPlFrBCRTig0KBrhCvn/5CsYEJXv
rXI=
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:45:02 2025 by rpki-client