Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZgfCzBlewQe3yItd_cYCcLQNCG0.roa
File: ZgfCzBlewQe3yItd_cYCcLQNCG0.roa (raw, json)
Hash identifier: 6mrmvp0X5aeq5KCaF5u5DZ4cKI4lj1N/k7CcAfE5WJU=
Subject key identifier: 66:07:C2:CC:19:5E:C1:07:B7:C8:8B:5D:FD:C6:02:70:B4:0D:08:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3F0AB23A9E0AAFA48BE4CFD5FBAD2DC8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZgfCzBlewQe3yItd_cYCcLQNCG0.roa
Signing time: Wed 06 Dec 2023 12:11:54 +0000
ROA not before: Wed 06 Dec 2023 12:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:0a:b2:3a:9e:0a:af:a4:8b:e4:cf:d5:fb:ad:2d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 12:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6607c2cc195ec107b7c88b5dfdc60270b40d086d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:c2:fb:83:fd:83:53:50:5c:cf:17:6f:3b:
ab:bf:13:09:cb:9c:b1:fb:18:d3:73:cc:c2:ec:ce:
f3:f2:d5:be:76:d3:55:b4:e8:a7:4a:a5:e7:c0:f5:
0b:84:7e:1c:50:14:c2:99:8d:1a:b1:fa:56:b4:6d:
61:d7:da:ad:07:fd:fa:23:3a:9c:e6:32:da:75:17:
4e:d2:32:47:90:0a:4a:f4:2e:38:6a:e5:b9:d7:b7:
1f:3b:9e:5d:62:02:a5:09:fd:bf:1c:9a:71:d0:b4:
6d:6d:7c:f7:af:ba:36:da:40:2e:59:ee:de:29:9e:
4b:60:0e:99:27:65:01:32:07:ce:58:a9:91:5c:77:
78:7d:5e:18:ba:a9:09:f1:b0:4c:b6:32:9c:6e:b5:
2b:96:34:7a:77:40:33:60:e4:f6:f8:3b:10:25:ba:
06:51:03:73:00:53:ef:d7:13:a3:2a:ae:31:fd:d9:
94:b5:a3:d1:28:64:2b:b5:79:9a:f9:6d:e1:f4:12:
1f:c4:97:41:e8:ec:37:68:fb:9c:dd:04:72:07:a8:
b5:6d:48:26:28:26:ae:39:e2:e0:0d:8a:44:86:6f:
d8:7d:04:cd:66:cb:e2:ab:23:94:ec:27:92:b8:a5:
33:a9:dd:81:db:37:54:3a:e8:a6:c9:b4:a9:85:6d:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:C2:CC:19:5E:C1:07:B7:C8:8B:5D:FD:C6:02:70:B4:0D:08:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZgfCzBlewQe3yItd_cYCcLQNCG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:85:45:1c:b1:7c:e7:78:13:09:c9:98:a4:2b:46:ca:53:b7:
50:06:39:fa:36:12:03:4d:cb:1a:ca:90:c3:1c:15:c5:7e:1a:
b1:22:86:6d:d2:32:4a:ad:a1:a1:99:87:f1:fb:f9:0e:8f:0d:
dc:6b:56:17:9d:78:7d:4e:ca:5f:3f:74:e6:f9:52:7b:31:e8:
b7:bc:49:a5:84:ff:98:22:9c:1c:28:5c:5e:f0:12:43:87:b0:
cd:aa:9e:90:84:c0:66:60:4b:26:a0:32:d0:eb:7c:c5:7b:a5:
e1:bc:5f:d5:c2:e4:05:5f:db:40:74:be:b4:e0:e6:a4:23:f6:
69:60:e4:96:90:85:eb:0c:64:be:c6:4b:9d:67:a9:43:4e:26:
29:bc:ae:06:28:d8:ef:c7:f0:33:bf:45:cd:26:81:24:29:f9:
2c:17:e0:02:87:c2:76:37:a0:60:fe:7f:6b:cc:93:53:78:af:
b9:bc:17:c3:11:82:00:16:b2:04:ce:53:d2:f9:c3:0c:4d:9d:
c4:e0:54:c8:0a:55:34:c2:10:1e:aa:1a:d6:71:a3:85:86:f9:
21:96:7c:7c:99:38:0f:4a:02:9d:e7:82:91:cf:25:fd:3e:42:
f8:3a:79:08:63:7a:d3:de:57:a6:2a:29:d7:6a:79:19:32:5b:
d9:85:0b:b9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYw/CrI6ngqvpIvkz9X7rS3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA2MTIxMTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjA3YzJjYzE5NWVjMTA3YjdjODhiNWRmZGM2MDI3MGI0MGQwODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH3C+4P9g1NQXM8XbzurvxMJy5yx
+xjTc8zC7M7z8tW+dtNVtOinSqXnwPULhH4cUBTCmY0asfpWtG1h19qtB/36Izqc
5jLadRdO0jJHkApK9C44auW517cfO55dYgKlCf2/HJpx0LRtbXz3r7o22kAuWe7e
KZ5LYA6ZJ2UBMgfOWKmRXHd4fV4YuqkJ8bBMtjKcbrUrljR6d0AzYOT2+DsQJboG
UQNzAFPv1xOjKq4x/dmUtaPRKGQrtXma+W3h9BIfxJdB6Ow3aPuc3QRyB6i1bUgm
KCauOeLgDYpEhm/YfQTNZsviqyOU7CeSuKUzqd2B2zdUOuimybSphW0VBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGYHwswZXsEHt8iLXf3GAnC0DQhtMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWmdmQ3pCbGV3UWUzeUl0ZF9jWUNjTFFOQ0cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA2FRRyxfOd4EwnJmKQr
RspTt1AGOfo2EgNNyxrKkMMcFcV+GrEihm3SMkqtoaGZh/H7+Q6PDdxrVhedeH1O
yl8/dOb5Unsx6Le8SaWE/5ginBwoXF7wEkOHsM2qnpCEwGZgSyagMtDrfMV7peG8
X9XC5AVf20B0vrTg5qQj9mlg5JaQhesMZL7GS51nqUNOJim8rgYo2O/H8DO/Rc0m
gSQp+SwX4AKHwnY3oGD+f2vMk1N4r7m8F8MRggAWsgTOU9L5wwxNncTgVMgKVTTC
EB6qGtZxo4WG+SGWfHyZOA9KAp3ngpHPJf0+Qvg6eQhjetPeV6YqKddqeRkyW9mF
C7k=
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:45:45 2025 by rpki-client