Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zwzE_78hmVj7LhRYYtXMggjMAMs.roa
File: zwzE_78hmVj7LhRYYtXMggjMAMs.roa (raw, json)
Hash identifier: SuHq6OOY62B9zGTmblxqS7oylWyiLxACD1VI4UR4eoI=
Subject key identifier: CF:0C:C4:FF:BF:21:99:58:FB:2E:14:58:62:D5:CC:82:08:CC:00:CB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D8864AD862C232653D23E43C5BE9D045D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zwzE_78hmVj7LhRYYtXMggjMAMs.roa
Signing time: Thu 08 Feb 2024 11:05:15 +0000
ROA not before: Thu 08 Feb 2024 11:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:8864:2d8c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:64:ad:86:2c:23:26:53:d2:3e:43:c5:be:9d:04:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 8 11:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf0cc4ffbf219958fb2e145862d5cc8208cc00cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:b0:2d:26:61:39:af:80:a7:71:c2:42:f6:
f4:1d:54:bf:e6:6e:70:a2:eb:06:ff:3d:d6:42:74:
73:bb:27:ff:c3:14:9a:fe:8b:a7:0b:dd:8a:4b:06:
ac:d3:90:9d:e8:b9:71:35:2e:66:f3:db:36:75:25:
92:b4:a3:8f:26:2b:b2:03:f5:c5:7d:f7:99:92:84:
fe:1d:a1:27:9c:92:a1:2a:db:68:1c:55:1a:77:66:
e6:c9:56:28:7e:2a:eb:39:32:c6:09:60:00:b7:8e:
7f:97:35:fd:72:44:31:79:bf:69:a7:c0:1a:61:a3:
90:5b:72:f6:58:a4:79:cb:94:29:55:f8:3a:9e:dd:
15:d9:67:14:07:11:85:cc:de:5c:43:17:68:d4:9d:
07:60:58:d2:64:22:13:6c:e5:33:54:cf:d3:6f:2a:
28:c0:84:c7:01:16:14:71:90:5f:ad:e3:83:bd:0c:
32:bc:4d:12:4c:4a:7e:c3:83:4a:96:5d:0e:13:1f:
08:c6:8f:8c:fc:47:cc:19:0f:9c:2c:b2:80:92:f8:
d8:fe:8d:90:e7:98:46:d7:bc:7b:6a:fc:13:58:b3:
b3:77:65:b1:cb:21:98:6d:08:25:2d:1f:6b:51:ca:
b5:a4:e3:23:58:f7:4c:8c:c8:98:9a:99:e9:02:71:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0C:C4:FF:BF:21:99:58:FB:2E:14:58:62:D5:CC:82:08:CC:00:CB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/zwzE_78hmVj7LhRYYtXMggjMAMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:bf:c6:02:5a:c0:31:b7:fd:d7:e9:03:30:2c:a7:4f:cd:43:
15:d8:65:ac:d1:62:4a:67:8b:60:85:16:78:48:ef:69:62:8d:
0a:71:75:9d:bd:73:4e:a4:2a:f1:18:d3:72:af:49:60:c6:ba:
67:87:57:ca:28:b8:c6:25:ea:75:18:a2:41:b2:40:52:8d:60:
19:30:7e:5b:b1:ba:b6:c0:a6:18:b9:c8:1f:7a:a0:b2:f9:80:
ae:5b:d0:73:a5:26:aa:7e:80:f2:a5:07:38:42:71:29:28:90:
5c:ad:f8:26:fe:08:6d:05:92:65:69:67:2e:a8:6e:3e:a4:96:
db:63:3a:62:79:7d:e3:72:ba:21:73:35:35:22:88:83:c6:b4:
11:f1:59:47:c2:dd:7e:16:f9:19:bc:97:75:30:6b:51:d4:88:
62:33:b3:d1:0c:fe:79:d7:1b:c2:cf:78:1c:fa:8d:de:12:d4:
b1:9e:f1:3d:fa:15:f2:01:33:73:5e:30:e0:ef:31:15:61:04:
bd:c7:c2:d8:da:8b:b5:4c:a2:4d:bd:84:31:e3:1d:a7:0e:5e:
2a:13:d3:dc:d9:40:88:23:31:9d:bf:42:cb:58:be:04:a6:14:
b9:70:37:ae:6c:e0:76:2e:bc:54:78:ca:c4:09:52:88:52:8e:
b7:92:21:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY2IZK2GLCMmU9I+Q8W+nQRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjA4MTEwNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjBjYzRmZmJmMjE5OTU4ZmIyZTE0NTg2MmQ1Y2M4MjA4Y2MwMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFawLSZhOa+Ap3HCQvb0HVS/5m5w
ousG/z3WQnRzuyf/wxSa/ounC92KSwas05Cd6LlxNS5m89s2dSWStKOPJiuyA/XF
ffeZkoT+HaEnnJKhKttoHFUad2bmyVYofirrOTLGCWAAt45/lzX9ckQxeb9pp8Aa
YaOQW3L2WKR5y5QpVfg6nt0V2WcUBxGFzN5cQxdo1J0HYFjSZCITbOUzVM/Tbyoo
wITHARYUcZBfreODvQwyvE0STEp+w4NKll0OEx8Ixo+M/EfMGQ+cLLKAkvjY/o2Q
55hG17x7avwTWLOzd2WxyyGYbQglLR9rUcq1pOMjWPdMjMiYmpnpAnGT6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM8MxP+/IZlY+y4UWGLVzIIIzADLMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvend6RV83OGhtVmo3TGhSWVl0WE1nZ2pNQU1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC6/xgJawDG3/dfpAzAs
p0/NQxXYZazRYkpni2CFFnhI72lijQpxdZ29c06kKvEY03KvSWDGumeHV8oouMYl
6nUYokGyQFKNYBkwfluxurbAphi5yB96oLL5gK5b0HOlJqp+gPKlBzhCcSkokFyt
+Cb+CG0FkmVpZy6obj6klttjOmJ5feNyuiFzNTUiiIPGtBHxWUfC3X4W+Rm8l3Uw
a1HUiGIzs9EM/nnXG8LPeBz6jd4S1LGe8T36FfIBM3NeMODvMRVhBL3Hwtjai7VM
ok29hDHjHacOXioT09zZQIgjMZ2/QstYvgSmFLlwN65s4HYuvFR4ysQJUohSjreS
Ib0=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:40 2025 by rpki-client