Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZF_qlrEpH7QTQiycTVRs6mGF2pA.roa
File: ZF_qlrEpH7QTQiycTVRs6mGF2pA.roa (raw, json)
Hash identifier: 2Juvh0QckGtrC+XbmRA8gq6W0XfhEAwWL8MYnBf8yb0=
Subject key identifier: 64:5F:EA:96:B1:29:1F:B4:13:42:2C:9C:4D:54:6C:EA:61:85:DA:90
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959E394B33DE9DC846F1271833F9302497
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZF_qlrEpH7QTQiycTVRs6mGF2pA.roa
Signing time: Sun 16 Mar 2025 09:11:49 +0000
ROA not before: Sun 16 Mar 2025 09:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9e:39:4b:33:de:9d:c8:46:f1:27:18:33:f9:30:24:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 16 09:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=645fea96b1291fb413422c9c4d546cea6185da90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:25:22:a8:d7:d6:da:28:a5:36:36:b5:a6:
c6:76:08:2a:10:ea:1d:55:2d:dd:93:6c:be:a6:b5:
a2:fd:ee:05:4c:d3:1b:80:41:54:44:94:55:10:07:
e7:1c:11:6c:5c:c5:53:a6:94:da:0f:fe:a9:49:cb:
4a:f7:3a:d8:40:fd:16:88:3d:15:71:75:dd:13:a9:
4d:4d:1b:09:e0:2d:8c:8d:33:af:92:ea:a0:7f:72:
b8:d4:59:9c:b8:8a:38:45:f1:9d:a1:b0:e8:b5:6a:
fd:21:71:97:a6:1f:2d:01:1f:c9:11:c1:36:39:4c:
6c:78:f1:40:9a:d1:b9:9d:ac:44:c7:27:ed:db:7d:
33:37:97:65:8a:99:c7:9e:f9:99:a1:e2:c2:8c:ef:
65:d3:b5:5b:c7:81:79:16:d2:a7:26:9b:b2:dc:9c:
d5:e1:e3:04:96:54:1e:be:04:96:55:8d:a4:b5:f4:
9b:3e:f3:a8:4c:57:f7:4e:3c:78:63:bd:fe:2d:ab:
be:b0:27:9c:3a:40:8d:9b:0c:b2:44:d8:0c:e7:92:
e3:52:cb:88:fa:9e:fa:81:74:ec:f7:32:f1:cd:05:
02:c7:ba:42:28:29:54:6a:35:40:e7:4c:4c:26:56:
89:bb:5b:b4:ea:35:d4:1d:fd:c4:69:56:3d:98:4d:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5F:EA:96:B1:29:1F:B4:13:42:2C:9C:4D:54:6C:EA:61:85:DA:90
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZF_qlrEpH7QTQiycTVRs6mGF2pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
74:c0:00:02:a4:c2:1c:4c:ff:2b:08:56:2d:48:85:cd:a0:44:
3e:98:ae:ff:8f:0c:9d:99:eb:2d:11:4c:70:9e:c6:42:c0:e3:
70:e4:cd:15:66:89:b2:52:f8:96:5d:1b:a9:35:20:3e:06:cf:
88:03:21:38:72:80:d3:67:8e:c0:e3:ba:f5:0d:1f:70:b7:54:
d2:fd:ca:27:94:60:6d:ab:31:6f:ee:46:f6:19:55:4f:7b:0e:
71:3c:87:5a:05:05:1f:e3:2c:fb:91:80:1f:f0:c6:df:13:af:
68:a2:59:9a:4a:52:6b:85:47:f4:4f:35:40:5e:8e:a4:e4:90:
13:57:34:f2:b7:ff:1a:61:4f:8b:87:17:e4:e7:8a:5b:8c:a9:
07:3c:41:d7:ab:a3:e0:e4:38:8e:c8:83:be:8d:ae:4a:c6:ac:
46:64:3c:f9:3d:30:9e:3f:61:f2:54:75:aa:8f:ab:d1:5f:51:
9e:1d:3a:08:78:a1:86:24:97:87:77:b4:6a:3e:4b:6c:07:21:
e1:fa:cc:5c:19:fc:09:9e:10:62:35:4e:4a:94:22:51:7a:c8:
bd:18:16:80:f8:b5:aa:75:db:72:d7:81:10:bd:a4:0c:45:50:
99:e3:6c:83:12:f2:52:59:1a:c1:bb:b4:b4:72:94:92:a9:9d:
d7:42:52:d0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWeOUsz3p3IRvEnGDP5MCSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzE2MDkxMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDVmZWE5NmIxMjkxZmI0MTM0MjJjOWM0ZDU0NmNlYTYxODVkYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCUlIqjX1toopTY2tabGdggqEOod
VS3dk2y+prWi/e4FTNMbgEFURJRVEAfnHBFsXMVTppTaD/6pSctK9zrYQP0WiD0V
cXXdE6lNTRsJ4C2MjTOvkuqgf3K41FmcuIo4RfGdobDotWr9IXGXph8tAR/JEcE2
OUxsePFAmtG5naxExyft230zN5dlipnHnvmZoeLCjO9l07Vbx4F5FtKnJpuy3JzV
4eMEllQevgSWVY2ktfSbPvOoTFf3Tjx4Y73+Lau+sCecOkCNmwyyRNgM55LjUsuI
+p76gXTs9zLxzQUCx7pCKClUajVA50xMJlaJu1u06jXUHf3EaVY9mE17KQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGRf6paxKR+0E0IsnE1UbOphhdqQMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvWkZfcWxyRXBIN1FUUWl5Y1RWUnM2bUdGMnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAdMAAAqTCHEz/KwhWLUiFzaBE
Ppiu/48MnZnrLRFMcJ7GQsDjcOTNFWaJslL4ll0bqTUgPgbPiAMhOHKA02eOwOO6
9Q0fcLdU0v3KJ5Rgbasxb+5G9hlVT3sOcTyHWgUFH+Ms+5GAH/DG3xOvaKJZmkpS
a4VH9E81QF6OpOSQE1c08rf/GmFPi4cX5OeKW4ypBzxB16uj4OQ4jsiDvo2uSsas
RmQ8+T0wnj9h8lR1qo+r0V9Rnh06CHihhiSXh3e0aj5LbAch4frMXBn8CZ4QYjVO
SpQiUXrIvRgWgPi1qnXbcteBEL2kDEVQmeNsgxLyUlkawbu0tHKUkqmd10JS0A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:22:10 2025 by rpki-client