Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/ZgxWN_VkYQzzGI8Kzif20B8wFdM.roa
File: ZgxWN_VkYQzzGI8Kzif20B8wFdM.roa (raw, json)
Hash identifier: 8BNUBDcP3c3/j4+44yngs6WLxUjpTfEnRH4ftayiewE=
Subject key identifier: 66:0C:56:37:F5:64:61:0C:F3:18:8F:0A:CE:27:F6:D0:1F:30:15:D3
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: C32FC7
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/ZgxWN_VkYQzzGI8Kzif20B8wFdM.roa
Signing time: Sat 01 Jan 2022 13:07:38 +0000
ROA not before: Sat 01 Jan 2022 13:07:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 45.15.18.0/24 maxlen: 24
2a0e:1c80:15::/48 maxlen: 48
2a0e:1c80:e::/48 maxlen: 48
2a0e:1c80:11::/48 maxlen: 48
2a0e:1c80:14::/48 maxlen: 48
2a0e:1c80:12::/48 maxlen: 48
2a0e:1c80:a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12791751 (0xc32fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 13:07:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=660c5637f564610cf3188f0ace27f6d01f3015d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ca:c7:08:7e:56:ac:25:e7:c4:5c:08:c2:48:
38:43:19:e3:e7:5e:6a:70:88:3b:4b:5d:b3:4d:08:
39:51:58:f8:1d:51:c3:1d:ef:99:4f:cb:df:81:d5:
ff:e9:3b:d2:98:32:64:a7:fc:f7:7d:0c:37:b9:0b:
39:c2:b0:a3:2a:94:6d:b4:96:89:bc:e3:22:52:51:
ab:cf:f6:f2:b8:26:96:20:bb:04:ae:13:10:45:e9:
d3:3c:eb:21:2e:2c:60:c4:a7:3b:e6:ba:5e:d0:24:
39:a6:0e:ba:85:4f:02:c4:b8:c1:54:98:a6:49:4f:
93:43:ca:9b:56:31:f5:6e:e9:eb:ee:b6:a1:74:8d:
fb:1a:3e:c1:f7:9a:25:5b:95:4c:bd:61:2b:96:b1:
fe:57:d8:8e:6b:be:d1:29:49:de:82:74:15:bf:4f:
1a:bf:32:f0:c2:07:ea:9f:c6:fb:d3:23:65:27:66:
02:87:e0:bb:dd:b6:96:8b:23:fc:be:e0:b5:35:7b:
3f:7b:93:8a:e3:cc:ae:f7:7f:ca:81:71:42:19:37:
22:cf:1e:e2:ef:2b:60:1b:53:c4:b7:de:e1:fa:c3:
6a:f8:89:54:e8:4a:7c:16:53:7f:49:de:74:fc:89:
ab:63:8c:7d:85:fa:7b:85:74:bb:44:f5:66:a0:ba:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0C:56:37:F5:64:61:0C:F3:18:8F:0A:CE:27:F6:D0:1F:30:15:D3
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/ZgxWN_VkYQzzGI8Kzif20B8wFdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.18.0/24
IPv6:
2a0e:1c80:a::/48
2a0e:1c80:e::/48
2a0e:1c80:11::-2a0e:1c80:12:ffff:ffff:ffff:ffff:ffff
2a0e:1c80:14::/47
Signature Algorithm: sha256WithRSAEncryption
9f:53:15:b6:be:d5:5b:3d:a2:13:8b:7e:e8:56:ba:5c:c9:6e:
c3:72:57:4e:df:29:c9:b4:0a:15:19:74:26:71:d1:c7:eb:ab:
9e:b1:3d:70:49:b2:9d:b3:7f:7e:c6:45:72:39:b4:d4:85:f8:
58:b1:f1:4e:04:a3:d0:2c:f2:07:a4:f7:3e:8e:22:1a:c1:be:
92:64:12:2d:9d:da:6f:0a:71:5b:27:12:7c:3f:8f:63:10:90:
ea:49:15:bb:d6:54:52:e4:a3:ca:80:60:d3:bc:97:26:c2:5b:
5f:96:5c:73:4b:8e:27:e4:c1:f9:c8:34:4b:41:8e:a8:45:2e:
3e:18:03:6d:b7:8d:a9:5f:3f:a5:df:6b:ff:80:00:b5:a5:1a:
41:00:a5:f4:94:b5:c4:37:3f:15:b9:45:c9:dc:19:d6:b0:05:
f2:1e:39:bb:4c:78:7b:ec:79:86:d5:be:3e:76:36:48:cd:19:
5c:e0:3b:76:f4:01:ea:51:46:f8:be:e6:ed:8f:83:15:a2:5d:
d4:76:ee:9f:3f:3f:38:b7:38:36:cd:00:be:e5:41:80:a6:43:
48:e0:b1:30:b5:96:16:8c:48:b9:d2:49:ab:a5:a3:e6:e2:b6:
de:3a:da:2a:40:32:c9:6e:18:5d:3d:24:f1:23:d9:db:1b:6e:
49:f4:77:83
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIEAMMvxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZmQ3MDNiNjBhYzY4NzMyNTZlNmI0ODI2YmEyN2E5ZGVlY2EyZjBhMB4XDTIyMDEw
MTEzMDczOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjYwYzU2MzdmNTY0
NjEwY2YzMTg4ZjBhY2UyN2Y2ZDAxZjMwMTVkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIHKxwh+Vqwl58RcCMJIOEMZ4+deanCIO0tds00IOVFY+B1R
wx3vmU/L34HV/+k70pgyZKf8930MN7kLOcKwoyqUbbSWibzjIlJRq8/28rgmliC7
BK4TEEXp0zzrIS4sYMSnO+a6XtAkOaYOuoVPAsS4wVSYpklPk0PKm1Yx9W7p6+62
oXSN+xo+wfeaJVuVTL1hK5ax/lfYjmu+0SlJ3oJ0Fb9PGr8y8MIH6p/G+9MjZSdm
Aofgu922losj/L7gtTV7P3uTiuPMrvd/yoFxQhk3Is8e4u8rYBtTxLfe4frDaviJ
VOhKfBZTf0nedPyJq2OMfYX6e4V0u0T1ZqC6qx0CAwEAAaOCAkAwggI8MB0GA1Ud
DgQWBBRmDFY39WRhDPMYjwrOJ/bQHzAV0zAfBgNVHSMEGDAWgBTf1wO2CsaHMlbm
tIJronqd7sovCjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzM5Y0R0Z3JHaHpKVzVyU0NhNko2bmU3S0x3by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjQvZjY3OGJkLTRmZTAtNGFlMC04MGQ3LTUzZjA3ODhlMWExYi8x
L1pneFdOX1ZrWVF6ekdJOEt6aWYyMEI4d0ZkTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQv
ZjY3OGJkLTRmZTAtNGFlMC04MGQ3LTUzZjA3ODhlMWExYi8xLzM5Y0R0Z3JHaHpK
VzVyU0NhNko2bmU3S0x3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBW
BggrBgEFBQcBBwEB/wRHMEUwDAQCAAEwBgMEAC0PEjA1BAIAAjAvAwcAKg4cgAAK
AwcAKg4cgAAOMBIDBwAqDhyAABEDBwAqDhyAABIDBwEqDhyAABQwDQYJKoZIhvcN
AQELBQADggEBAJ9TFba+1Vs9ohOLfuhWulzJbsNyV07fKcm0ChUZdCZx0cfrq56x
PXBJsp2zf37GRXI5tNSF+Fix8U4Eo9As8gek9z6OIhrBvpJkEi2d2m8KcVsnEnw/
j2MQkOpJFbvWVFLko8qAYNO8lybCW1+WXHNLjifkwfnINEtBjqhFLj4YA223jalf
P6Xfa/+AALWlGkEApfSUtcQ3PxW5RcncGdawBfIeObtMeHvseYbVvj52NkjNGVzg
O3b0AepRRvi+5u2PgxWiXdR27p8/Pzi3ODbNAL7lQYCmQ0jgsTC1lhaMSLnSSaul
o+bitt462ipAMsluGF09JPEj2dsbbkn0d4M=
-----END CERTIFICATE-----
Generated at Wed Jun 18 10:16:39 2025 by rpki-client