Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Zsfzw4cgEBsLJuL_MWODScFJ-fY.roa
File: Zsfzw4cgEBsLJuL_MWODScFJ-fY.roa (raw, json)
Hash identifier: 802IvX5+wEHJLy+Pcy5Xs0aN1Nu3jLH33GKun3GGmJU=
Subject key identifier: 66:C7:F3:C3:87:20:10:1B:0B:26:E2:FF:31:63:83:49:C1:49:F9:F6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5673861B07BE3B52B171D2051F0198E2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Zsfzw4cgEBsLJuL_MWODScFJ-fY.roa
Signing time: Mon 11 Dec 2023 01:17:40 +0000
ROA not before: Mon 11 Dec 2023 01:17:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:56:73:86:1b:07:be:3b:52:b1:71:d2:05:1f:01:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 01:17:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66c7f3c38720101b0b26e2ff31638349c149f9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f2:5e:50:9c:19:60:9e:5c:86:5b:f0:72:d6:
50:07:57:f6:ea:46:b8:87:91:68:bb:0a:0f:d4:a0:
ca:ff:28:f7:da:33:cf:1a:21:48:09:8a:88:71:73:
c4:3e:e5:d1:54:59:96:a6:91:78:15:8b:3e:02:eb:
50:10:5e:ab:98:ef:cf:db:d1:4c:a1:80:92:8a:f5:
fb:7f:71:d2:84:e7:cb:f2:0e:2d:13:ed:0e:a6:3d:
e7:e1:a5:50:c2:b1:bc:07:e7:9e:76:e9:45:e9:da:
0e:b6:d7:16:cd:a3:01:31:7f:a4:98:30:b4:9c:78:
82:1b:8b:2c:29:1a:92:fb:c6:92:20:cf:ff:ff:7e:
35:f5:24:5a:97:28:9e:69:fc:f9:7a:f7:b3:94:c0:
c2:29:4b:7d:2f:b6:c4:b3:be:78:33:a6:17:37:3b:
64:05:66:ed:30:f8:70:7c:7f:50:64:f3:f2:e0:c7:
11:e8:37:93:f1:cc:a3:ef:53:61:bd:79:ff:fb:3c:
e1:80:56:fe:6e:5a:1e:08:df:59:24:dc:99:18:eb:
70:75:db:d8:d6:5b:b1:05:51:66:d5:f2:e6:57:71:
e3:3b:ba:d5:52:1d:8b:bf:45:b0:06:3c:20:17:17:
39:00:73:23:1f:6c:16:78:96:b9:03:fd:73:bb:9a:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C7:F3:C3:87:20:10:1B:0B:26:E2:FF:31:63:83:49:C1:49:F9:F6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Zsfzw4cgEBsLJuL_MWODScFJ-fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:75:ff:0f:88:56:a7:2c:d8:47:cc:c4:cf:49:29:21:00:1b:
6f:0c:db:1d:c9:dc:57:9a:3a:29:0f:a8:08:f1:78:35:bc:86:
dc:fa:b4:ff:52:34:99:a6:f9:0f:60:8d:54:d6:97:54:fa:ce:
61:8b:19:bc:67:ab:c9:8d:97:23:8a:c0:65:a9:82:ef:36:fa:
f0:68:b3:f1:91:b4:f8:df:e8:53:e4:96:a0:24:fd:80:81:90:
ed:f4:ac:76:de:66:dc:7d:95:25:72:76:43:79:73:fe:ad:13:
bd:5a:99:48:68:cb:af:4e:12:0a:32:d9:f7:bf:24:65:89:0a:
ef:fa:98:da:e4:0e:56:68:fe:e0:2b:51:b3:80:19:28:ba:f4:
e5:97:87:c4:31:49:d4:e6:34:09:63:c8:b7:9e:b8:94:66:19:
00:e5:12:8c:ca:8d:da:2a:c5:54:bf:c4:81:6a:6f:98:d4:4c:
a8:8a:b3:26:f4:c8:97:23:23:d5:80:5b:97:54:c5:6b:b6:7b:
a4:1f:ee:3c:a5:e5:95:71:54:ce:be:f0:7f:63:3f:d4:f0:0f:
0f:fd:7e:3d:7d:db:7c:46:28:e3:10:64:c4:7f:de:4c:74:4b:
c9:cd:be:8f:57:3c:02:77:ec:e6:13:1a:aa:de:c2:48:e1:e6:
ea:84:26:d7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxWc4YbB747UrFx0gUfAZjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjExMDExNzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmM3ZjNjMzg3MjAxMDFiMGIyNmUyZmYzMTYzODM0OWMxNDlmOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPJeUJwZYJ5chlvwctZQB1f26ka4
h5FouwoP1KDK/yj32jPPGiFICYqIcXPEPuXRVFmWppF4FYs+AutQEF6rmO/P29FM
oYCSivX7f3HShOfL8g4tE+0Opj3n4aVQwrG8B+eedulF6doOttcWzaMBMX+kmDC0
nHiCG4ssKRqS+8aSIM///3419SRalyieafz5evezlMDCKUt9L7bEs754M6YXNztk
BWbtMPhwfH9QZPPy4McR6DeT8cyj71NhvXn/+zzhgFb+bloeCN9ZJNyZGOtwddvY
1luxBVFm1fLmV3HjO7rVUh2Lv0WwBjwgFxc5AHMjH2wWeJa5A/1zu5oLiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGbH88OHIBAbCybi/zFjg0nBSfn2MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWnNmenc0Y2dFQnNMSnVMX01XT0RTY0ZKLWZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAx1/w+IVqcs2EfMxM9J
KSEAG28M2x3J3FeaOikPqAjxeDW8htz6tP9SNJmm+Q9gjVTWl1T6zmGLGbxnq8mN
lyOKwGWpgu82+vBos/GRtPjf6FPklqAk/YCBkO30rHbeZtx9lSVydkN5c/6tE71a
mUhoy69OEgoy2fe/JGWJCu/6mNrkDlZo/uArUbOAGSi69OWXh8QxSdTmNAljyLee
uJRmGQDlEozKjdoqxVS/xIFqb5jUTKiKsyb0yJcjI9WAW5dUxWu2e6Qf7jyl5ZVx
VM6+8H9jP9TwDw/9fj1923xGKOMQZMR/3kx0S8nNvo9XPAJ37OYTGqrewkjh5uqE
Jtc=
-----END CERTIFICATE-----
Generated at Mon May 12 22:14:45 2025 by rpki-client