Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZOFL358R-Kq_XTYs0SLprq5BOko.roa
File: ZOFL358R-Kq_XTYs0SLprq5BOko.roa (raw, json)
Hash identifier: 6vQZF7uyz4Sip680C71Wjia8LdxiQBmKiLj6BupoM4Q=
Subject key identifier: 64:E1:4B:DF:9F:11:F8:AA:BF:5D:36:2C:D1:22:E9:AE:AE:41:3A:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C118645595166A70F93723E27E5A2EC07
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZOFL358R-Kq_XTYs0SLprq5BOko.roa
Signing time: Mon 27 Nov 2023 16:04:21 +0000
ROA not before: Mon 27 Nov 2023 16:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:1186:1d90/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:86:45:59:51:66:a7:0f:93:72:3e:27:e5:a2:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 16:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64e14bdf9f11f8aabf5d362cd122e9aeae413a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:de:05:59:bb:c9:08:6d:b0:2f:62:f4:11:
fb:af:14:0a:63:52:f9:7e:25:0e:5c:f3:30:4d:86:
49:c5:f7:d3:b7:89:76:19:21:e8:2f:37:3e:19:8f:
a4:d5:19:5e:96:11:36:88:bb:19:9c:7d:14:ca:f5:
6d:ff:67:50:4d:2a:09:5f:8f:12:75:ee:88:7d:7d:
45:ce:29:9a:4e:b9:0c:76:17:d3:fb:8a:58:90:cf:
7f:69:ec:40:35:f1:3c:38:c2:6d:fb:9a:a7:91:44:
5f:e9:0f:ea:ed:38:05:30:4e:ac:2e:bb:a7:78:6c:
86:92:31:e3:a7:07:28:fe:77:75:6b:7e:9f:ff:ae:
72:d0:af:b5:d8:1c:fb:14:7e:4a:74:4b:0e:80:d1:
3f:d2:68:9c:81:32:c1:3f:13:15:e7:74:e0:2b:a9:
78:48:03:a1:e7:82:95:93:61:87:a8:08:7f:77:47:
f0:fc:ab:99:bd:6f:c1:69:9a:b4:aa:f3:b9:ea:15:
ee:0c:54:df:17:77:5a:11:a7:a5:82:fc:d8:a8:af:
fa:08:13:e5:5d:25:cd:a4:a1:d6:83:f4:20:d8:54:
ae:df:41:16:1a:7d:81:82:5a:77:8f:6c:0b:4d:4d:
05:c7:24:e8:bf:18:71:51:ae:9c:bb:bf:2b:a9:22:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E1:4B:DF:9F:11:F8:AA:BF:5D:36:2C:D1:22:E9:AE:AE:41:3A:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZOFL358R-Kq_XTYs0SLprq5BOko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:8c:bd:ba:0d:47:c4:35:79:f7:58:7a:3c:4a:bf:bf:bc:da:
42:3c:38:57:0e:a4:b1:ac:88:aa:66:3d:03:2d:a0:49:0b:42:
f6:b0:1f:76:9c:2d:e9:d0:d5:36:b5:00:84:bb:52:70:1c:db:
c2:1a:36:43:a0:ef:f8:d2:48:d7:3a:40:17:71:e3:ef:e7:87:
7b:78:04:d4:81:e7:f6:21:0b:60:ca:a6:63:48:3f:5d:9e:9c:
2f:f0:dd:47:7a:38:96:49:fd:00:02:d4:fe:c7:33:24:db:5b:
0c:d5:30:30:87:c3:32:6c:29:32:f7:ad:65:ae:47:b5:29:19:
d4:06:07:85:dc:73:8b:d9:7c:a5:47:87:81:6d:e0:29:94:9f:
81:92:64:f7:3c:f6:cd:7c:2f:05:59:d7:ed:58:8c:fb:64:33:
ba:12:35:53:6e:f6:94:16:a7:3c:0f:57:8d:5e:ed:77:3c:94:
aa:7e:01:75:60:e8:57:08:96:0e:4b:fa:a4:90:7d:01:9e:e7:
ba:6e:da:f2:bd:35:b7:17:c3:da:8e:e2:07:59:06:f6:c2:b8:
3f:b0:85:0e:6c:f9:c5:5f:5a:a0:c3:2b:6e:a9:ff:96:fd:fe:
86:fd:b7:3c:a5:c9:03:00:42:38:32:98:0e:ad:21:33:a0:72:
ee:68:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:37:36 2025 by rpki-client