Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ZGP9eCtCV31QLIA1jKjCP-UnLJA.roa
File: ZGP9eCtCV31QLIA1jKjCP-UnLJA.roa (raw, json)
Hash identifier: ThZpBa/dbX/4aDwW37DqOPooo/+vhQuEeGPD+8Yi2wk=
Subject key identifier: 64:63:FD:78:2B:42:57:7D:50:2C:80:35:8C:A8:C2:3F:E5:27:2C:90
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A9D733F5A009C8508B7D03BAF52E7D460
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ZGP9eCtCV31QLIA1jKjCP-UnLJA.roa
Signing time: Sat 16 Sep 2023 10:04:50 +0000
ROA not before: Sat 16 Sep 2023 10:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:9d72:d868/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9d:73:3f:5a:00:9c:85:08:b7:d0:3b:af:52:e7:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 16 10:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6463fd782b42577d502c80358ca8c23fe5272c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:4b:92:01:c0:09:28:98:e0:81:4f:37:36:
3d:86:5f:a5:99:c9:5b:5c:00:bb:05:15:7c:16:ee:
e3:ad:82:1b:cd:bf:42:c0:7a:c5:37:f0:11:2e:25:
f6:8b:52:09:89:97:cf:e7:8f:7e:fa:fb:34:02:59:
0c:68:01:6b:59:74:63:99:2f:9d:1a:46:b7:af:28:
c5:d0:16:86:2c:b3:41:21:cb:b9:7f:1e:8c:8e:f2:
c0:6e:35:91:ee:87:b2:10:88:01:eb:b8:29:82:79:
00:dd:73:21:8c:ef:52:48:32:66:dc:88:d7:f3:a1:
87:1e:28:32:de:a5:e2:e0:28:f7:cc:9a:e3:9e:94:
c3:d2:e0:93:e1:d2:09:98:8a:27:42:9c:37:98:65:
00:19:5a:44:49:6e:bb:a7:c8:91:d9:a1:08:63:0f:
00:a3:c6:4c:2c:a4:40:23:d7:db:ba:ef:f8:37:2c:
18:5b:96:41:9d:98:44:f5:d5:e5:38:15:d8:e1:b2:
37:b6:a2:1f:36:e5:78:1f:07:1a:aa:36:b5:b8:30:
d7:c9:e2:c0:ee:df:18:9f:b1:7d:85:7a:d5:b0:51:
90:92:49:5a:c4:12:06:96:e3:a8:4c:cb:1e:09:97:
00:e5:2c:65:26:df:1a:8f:c7:49:32:14:e2:b2:64:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:63:FD:78:2B:42:57:7D:50:2C:80:35:8C:A8:C2:3F:E5:27:2C:90
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ZGP9eCtCV31QLIA1jKjCP-UnLJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:bf:3e:57:a2:78:2a:fa:d8:72:f1:e6:da:ac:88:37:09:20:
7b:d4:49:2f:38:93:6c:c6:63:e4:f0:e0:fb:8e:e2:38:e5:f5:
76:a1:3b:b0:2f:8d:6d:aa:5e:5e:08:ea:5a:e9:42:0c:56:f5:
f9:c1:67:08:f2:0a:13:53:70:5f:c9:95:a7:f7:4e:40:c7:8c:
50:1c:04:4b:bb:ad:42:ef:6d:af:39:99:b3:62:c4:b9:c9:4c:
df:af:d8:3a:1a:bd:79:9e:cb:41:f1:16:55:9e:4e:41:5a:e4:
55:bc:5d:69:c2:76:44:91:af:cc:56:7f:4a:d1:42:af:2b:9a:
43:a9:2e:e8:3b:fa:97:7b:9c:a1:a7:ad:af:4c:1a:f1:ff:24:
33:5a:2e:d1:68:c9:23:4c:03:32:95:85:b2:07:ee:96:a5:27:
30:2a:09:54:2e:5a:46:33:ca:cd:b2:d0:33:bf:cc:26:9a:f2:
df:4d:ed:ce:0d:b5:bc:7c:33:83:29:f2:4f:c7:5b:5c:38:6e:
af:c7:27:06:d8:8f:54:9e:d7:54:3e:06:ad:6c:4f:48:7c:e0:
bb:8a:9c:55:ec:62:17:dc:41:c0:8f:34:2b:31:8f:40:b5:f3:
28:1a:67:af:bb:7c:46:62:b6:b8:23:b5:bb:5c:14:13:76:72:
07:34:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:59:52 2025 by rpki-client