Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/ZnrqCTKVBOjchbZV_1SzTxtaItw.roa
File: ZnrqCTKVBOjchbZV_1SzTxtaItw.roa (raw, json)
Hash identifier: 04SK+sglM1eRaA8Tb+fmPa9teChKyUyfOZzUykskqwc=
Subject key identifier: 66:7A:EA:09:32:95:04:E8:DC:85:B6:55:FF:54:B3:4F:1B:5A:22:DC
Certificate issuer: /CN=f77c035ba70b47570188ac10ee9f396cabb2e8a9
Certificate serial: 01856D0ADC7BF3CE29611E9256149EAF33BF
Authority key identifier: F7:7C:03:5B:A7:0B:47:57:01:88:AC:10:EE:9F:39:6C:AB:B2:E8:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93wDW6cLR1cBiKwQ7p85bKuy6Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/ZnrqCTKVBOjchbZV_1SzTxtaItw.roa
Signing time: Sun 01 Jan 2023 11:15:06 +0000
ROA not before: Sun 01 Jan 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 2a0a:e2c5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:dc:7b:f3:ce:29:61:1e:92:56:14:9e:af:33:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77c035ba70b47570188ac10ee9f396cabb2e8a9
Validity
Not Before: Jan 1 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=667aea09329504e8dc85b655ff54b34f1b5a22dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:b6:2c:78:d5:a2:0b:37:bd:cc:d5:cd:c1:
8a:b0:ab:7f:3c:a4:49:38:b8:72:dc:d0:a3:ea:ed:
70:5b:35:15:06:de:7d:96:57:d5:d3:64:c4:27:39:
d0:2f:cd:c7:51:e1:21:28:80:bc:68:19:fa:4e:e9:
92:da:44:fb:0e:78:0d:a3:98:a1:d2:30:df:38:56:
91:1f:ca:0e:6b:bd:c4:2e:50:05:c1:32:c4:05:1a:
48:e8:9f:32:fd:8a:2a:72:35:bd:95:f4:a7:38:95:
17:4b:a7:df:d3:f8:8c:0d:c4:e9:31:c5:e4:65:98:
63:59:f5:4f:19:b2:fa:cd:24:85:88:04:dd:24:78:
e2:ef:1f:5c:c8:3a:1f:97:58:bb:36:2a:7a:46:8a:
3b:3c:86:14:08:55:ad:6e:fc:15:39:91:a5:b7:42:
7e:af:75:77:d9:26:bc:c7:12:84:78:78:dc:4a:41:
ae:5e:16:63:75:8a:1d:5b:f3:9c:81:17:59:ba:e7:
c0:8e:03:96:8a:e0:eb:ed:64:02:76:f9:72:d0:e0:
f9:ea:0d:1d:fe:a3:04:bd:a7:5e:a5:10:b5:56:f6:
cd:78:28:37:e3:74:19:6f:d6:4a:8b:9d:4c:34:96:
33:6e:3e:19:c7:7e:d2:9e:34:5c:b5:1b:c8:a2:a5:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:EA:09:32:95:04:E8:DC:85:B6:55:FF:54:B3:4F:1B:5A:22:DC
X509v3 Authority Key Identifier:
keyid:F7:7C:03:5B:A7:0B:47:57:01:88:AC:10:EE:9F:39:6C:AB:B2:E8:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93wDW6cLR1cBiKwQ7p85bKuy6Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/ZnrqCTKVBOjchbZV_1SzTxtaItw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/93wDW6cLR1cBiKwQ7p85bKuy6Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e2c5::/32
Signature Algorithm: sha256WithRSAEncryption
3e:21:13:6c:cf:f0:db:01:89:22:60:e3:d1:1c:5d:31:71:30:
c0:d4:88:81:43:e7:29:fb:fd:5e:6f:f2:dd:44:af:aa:f1:52:
55:b1:a4:2f:b1:ce:d7:69:8b:3a:5d:d9:c2:64:46:4f:3f:a8:
f9:8a:a9:2f:e2:18:09:1a:ad:ab:e3:9e:c1:bf:97:c7:b7:04:
a9:96:61:2d:6b:c8:29:6f:19:5e:a7:2a:b8:97:d6:e7:7b:d9:
6f:54:8b:4d:03:27:dd:1d:b6:12:0f:56:24:72:c9:94:12:4f:
07:a5:07:1e:1b:81:0f:a3:de:73:2c:47:0b:cd:66:f4:64:86:
a3:24:ca:64:49:37:3f:12:22:85:51:6f:ca:c6:2f:cb:a1:99:
7f:5d:c6:12:5a:81:0b:30:23:92:f2:21:0f:e7:7f:ae:ed:45:
71:c0:94:25:b1:11:ed:78:58:84:f5:5a:a5:e2:1f:3d:66:f6:
17:b7:45:e1:4f:8f:1d:57:6e:3f:f1:2f:4a:7f:91:96:aa:7c:
d1:79:c1:9d:d6:f3:31:74:86:83:98:48:fb:48:9e:4b:05:bb:
c5:dc:76:2d:57:36:b1:47:8b:81:ac:6f:fc:d6:d5:a8:36:5a:
82:f0:f0:2e:bd:2f:ae:10:2f:b7:87:f4:f1:31:1a:79:2e:6f:
4c:1f:ca:62
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVtCtx7884pYR6SVhSerzO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3N2MwMzViYTcwYjQ3NTcwMTg4YWMxMGVlOWYzOTZjYWJi
MmU4YTkwHhcNMjMwMTAxMTExNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjdhZWEwOTMyOTUwNGU4ZGM4NWI2NTVmZjU0YjM0ZjFiNWEyMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkG2LHjVogs3vczVzcGKsKt/PKRJ
OLhy3NCj6u1wWzUVBt59llfV02TEJznQL83HUeEhKIC8aBn6TumS2kT7DngNo5ih
0jDfOFaRH8oOa73ELlAFwTLEBRpI6J8y/YoqcjW9lfSnOJUXS6ff0/iMDcTpMcXk
ZZhjWfVPGbL6zSSFiATdJHji7x9cyDofl1i7Nip6Roo7PIYUCFWtbvwVOZGlt0J+
r3V32Sa8xxKEeHjcSkGuXhZjdYodW/OcgRdZuufAjgOWiuDr7WQCdvly0OD56g0d
/qMEvadepRC1VvbNeCg343QZb9ZKi51MNJYzbj4Zx37SnjRctRvIoqVDVwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGZ66gkylQTo3IW2Vf9Us08bWiLcMB8GA1UdIwQY
MBaAFPd8A1unC0dXAYisEO6fOWyrsuipMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTN3RFc2Y0xSMWNCaUt3UTdwODViS3V5NktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9hMzE4NTItODIxNi00NTcyLTk0OTUt
ZTMwMmZkNTgzMzU3LzEvWm5ycUNUS1ZCT2pjaGJaVl8xU3pUeHRhSXR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9hMzE4NTItODIxNi00NTcyLTk0OTUtZTMwMmZkNTgzMzU3
LzEvOTN3RFc2Y0xSMWNCaUt3UTdwODViS3V5NktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgrixTAN
BgkqhkiG9w0BAQsFAAOCAQEAPiETbM/w2wGJImDj0RxdMXEwwNSIgUPnKfv9Xm/y
3USvqvFSVbGkL7HO12mLOl3ZwmRGTz+o+YqpL+IYCRqtq+Oewb+Xx7cEqZZhLWvI
KW8ZXqcquJfW53vZb1SLTQMn3R22Eg9WJHLJlBJPB6UHHhuBD6PecyxHC81m9GSG
oyTKZEk3PxIihVFvysYvy6GZf13GElqBCzAjkvIhD+d/ru1FccCUJbER7XhYhPVa
peIfPWb2F7dF4U+PHVduP/EvSn+Rlqp80XnBndbzMXSGg5hI+0ieSwW7xdx2LVc2
sUeLgaxv/NbVqDZagvDwLr0vrhAvt4f08TEaeS5vTB/KYg==
-----END CERTIFICATE-----
Generated at Wed May 7 22:52:27 2025 by rpki-client