Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZsPox8u1f7UG2csVeAyMw8ZMiys.roa
File: ZsPox8u1f7UG2csVeAyMw8ZMiys.roa (raw, json)
Hash identifier: ndfCqATHy7ISOVfl7lyLYQLnQT2JoivC9EGWAzFXAj8=
Subject key identifier: 66:C3:E8:C7:CB:B5:7F:B5:06:D9:CB:15:78:0C:8C:C3:C6:4C:8B:2B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019479BB50BD830D7800CA6A9522B94FB562
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZsPox8u1f7UG2csVeAyMw8ZMiys.roa
Signing time: Sat 18 Jan 2025 14:05:06 +0000
ROA not before: Sat 18 Jan 2025 14:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:79ba:aba0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:bb:50:bd:83:0d:78:00:ca:6a:95:22:b9:4f:b5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 18 14:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66c3e8c7cbb57fb506d9cb15780c8cc3c64c8b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:68:98:74:09:50:ac:d9:da:21:63:4a:81:
39:3e:38:bd:93:37:b2:1b:49:c2:55:d7:76:1e:fb:
3c:32:43:13:7f:ce:b2:9f:18:50:46:3e:94:08:64:
ab:fd:d0:16:36:95:8d:9d:4c:c0:73:82:26:90:53:
c5:73:a1:ca:56:62:e8:bb:1b:10:04:c8:9c:7d:9d:
49:6f:ec:66:c8:39:e1:dc:2d:a1:5c:cb:ec:98:b9:
6c:14:d2:ea:96:75:bb:1e:c8:32:3f:61:6a:de:09:
bf:95:c3:0e:71:ff:3d:81:98:00:f4:40:c6:56:43:
51:e4:42:2c:b5:b3:4a:2e:57:ed:63:c2:ec:cc:b6:
38:ca:a6:18:9b:0f:85:a2:b0:d7:f6:54:e8:35:be:
14:74:62:8e:08:14:df:3a:9a:fc:af:96:dd:8b:d4:
ec:c3:76:b5:32:e1:4a:55:3d:cd:5e:2e:cf:44:17:
52:ff:11:0e:83:7e:0a:af:ed:70:47:eb:5e:5c:1b:
22:4f:4b:21:73:05:a7:73:85:7f:62:8a:0d:56:9a:
1e:62:12:c5:49:4c:95:fa:36:5b:ea:0e:e1:90:21:
2d:14:5e:96:8e:d0:32:3e:4d:c5:9c:4b:c1:0f:7c:
3d:c7:c8:31:a3:dc:ab:68:f8:c5:56:00:a6:08:97:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C3:E8:C7:CB:B5:7F:B5:06:D9:CB:15:78:0C:8C:C3:C6:4C:8B:2B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZsPox8u1f7UG2csVeAyMw8ZMiys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:79ba:aba0/128
Signature Algorithm: sha256WithRSAEncryption
49:12:7b:55:cb:22:0b:75:42:64:06:bf:f0:cc:27:ac:41:b6:
16:bd:70:a2:29:9c:32:4e:de:14:e8:1d:44:c4:dd:26:6d:e5:
a6:dc:e6:2b:fc:83:ad:78:1b:4d:ec:b7:bb:b7:b8:da:be:7a:
af:5f:f5:43:12:4f:03:68:60:3d:67:6f:86:7d:18:bf:8d:2b:
48:e3:9b:de:32:83:19:5b:b6:10:13:1d:0c:f5:5b:de:af:c0:
34:39:0b:68:86:15:30:c5:c5:91:9f:56:ab:37:c2:9c:46:b2:
46:de:2e:c4:a0:e1:b0:17:95:b3:14:56:ea:c9:75:3f:86:6e:
69:d4:38:84:e7:71:73:59:c4:4c:88:d6:ad:1b:1c:0b:c5:85:
c5:ba:c2:b0:0f:58:18:c1:35:93:8b:eb:29:91:c1:a6:c5:62:
78:bc:30:d7:44:7c:f7:9c:bc:30:f6:fd:73:28:46:51:71:85:
c7:32:85:07:12:68:ae:71:c2:39:0d:61:3b:01:87:67:57:3d:
12:8f:40:bc:28:07:ed:7f:2f:2c:23:eb:a8:72:09:ba:60:84:
a5:8e:d2:14:dc:10:0e:cb:90:2c:80:2f:ee:88:24:12:7b:89:
ca:db:46:07:ea:a6:ab:fa:c5:f6:5c:58:7e:28:56:fb:7f:3d:
d1:ed:93:dc
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZR5u1C9gw14AMpqlSK5T7ViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTE4MTQwNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmMzZThjN2NiYjU3ZmI1MDZkOWNiMTU3ODBjOGNjM2M2NGM4YjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2FomHQJUKzZ2iFjSoE5Pji9kzey
G0nCVdd2Hvs8MkMTf86ynxhQRj6UCGSr/dAWNpWNnUzAc4ImkFPFc6HKVmLouxsQ
BMicfZ1Jb+xmyDnh3C2hXMvsmLlsFNLqlnW7HsgyP2Fq3gm/lcMOcf89gZgA9EDG
VkNR5EIstbNKLlftY8LszLY4yqYYmw+ForDX9lToNb4UdGKOCBTfOpr8r5bdi9Ts
w3a1MuFKVT3NXi7PRBdS/xEOg34Kr+1wR+teXBsiT0shcwWnc4V/YooNVpoeYhLF
SUyV+jZb6g7hkCEtFF6WjtAyPk3FnEvBD3w9x8gxo9yraPjFVgCmCJcThQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGbD6MfLtX+1BtnLFXgMjMPGTIsrMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvWnNQb3g4dTFmN1VHMmNzVmVBeU13OFpNaXlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGULA1mgAMRACABBnwAZP//AAABlHm6q6AwDQYJKoZIhvcNAQELBQADggEB
AEkSe1XLIgt1QmQGv/DMJ6xBtha9cKIpnDJO3hToHUTE3SZt5abc5iv8g614G03s
t7u3uNq+eq9f9UMSTwNoYD1nb4Z9GL+NK0jjm94ygxlbthATHQz1W96vwDQ5C2iG
FTDFxZGfVqs3wpxGskbeLsSg4bAXlbMUVurJdT+GbmnUOITncXNZxEyI1q0bHAvF
hcW6wrAPWBjBNZOL6ymRwabFYni8MNdEfPecvDD2/XMoRlFxhccyhQcSaK5xwjkN
YTsBh2dXPRKPQLwoB+1/Lywj66hyCbpghKWO0hTcEA7LkCyAL+6IJBJ7icrbRgfq
pqv6xfZcWH4oVvt/PdHtk9w=
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:18 2025 by rpki-client