Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zZHj-ZcmM0DEoDPDQoqawCv_iag.roa
File: zZHj-ZcmM0DEoDPDQoqawCv_iag.roa (raw, json)
Hash identifier: /ROcFze4rRj4H+gKjHcCc//k0RaHMeSmwLvaeziuyL0=
Subject key identifier: CD:91:E3:F9:97:26:33:40:C4:A0:33:C3:42:8A:9A:C0:2B:FF:89:A8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE363F91F87C7E49EDAFF5A413ABC2C0E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zZHj-ZcmM0DEoDPDQoqawCv_iag.roa
Signing time: Sat 18 Nov 2023 17:04:21 +0000
ROA not before: Sat 18 Nov 2023 17:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:e363:e3da/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e3:63:f9:1f:87:c7:e4:9e:da:ff:5a:41:3a:bc:2c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 17:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd91e3f997263340c4a033c3428a9ac02bff89a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:91:4a:70:c3:86:8d:13:82:a6:75:f3:66:a0:
be:08:0a:bd:9a:39:0d:a8:ee:db:2d:f6:de:60:12:
01:43:dd:bb:5a:81:db:30:5e:74:ba:0a:a2:93:8d:
3e:cd:37:47:06:02:7d:18:6b:5e:6f:f1:01:9a:37:
87:87:3f:c2:b5:65:ef:38:06:bb:c3:55:a5:e7:01:
fb:85:5e:b5:98:ef:40:73:7f:f6:44:0a:d8:e9:d6:
6f:ee:e2:fe:bc:3b:b4:61:af:99:a8:99:86:58:de:
e7:84:00:37:2f:b4:e6:7f:8b:c0:a6:de:a1:0a:1c:
e3:c0:b1:be:a2:dd:bb:10:8a:b9:fc:48:d8:1f:16:
11:50:f9:e3:1f:c3:a4:95:d4:b4:21:18:dd:23:1f:
98:c1:d2:9b:ff:c6:50:cc:9d:32:b4:94:00:80:68:
d9:6c:2d:83:95:36:b2:cf:2b:69:aa:31:a9:eb:d0:
f1:98:6b:e7:74:c4:92:81:c6:e3:f6:8b:ef:a3:5c:
06:38:cb:01:8c:43:87:e6:d6:c4:36:c3:4c:ff:a2:
66:34:ed:78:25:d5:00:b0:6d:50:fe:47:de:d9:63:
4a:9d:2d:6b:1a:6b:82:95:29:43:9d:6a:43:f3:dd:
3c:6c:a4:52:97:19:0d:80:9f:2a:ec:95:f4:38:1a:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:91:E3:F9:97:26:33:40:C4:A0:33:C3:42:8A:9A:C0:2B:FF:89:A8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zZHj-ZcmM0DEoDPDQoqawCv_iag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:1b:bd:8e:58:29:34:08:2c:62:dd:49:61:33:7e:b1:41:7d:
f6:b2:da:b4:ba:ed:64:96:07:15:19:2b:31:0d:5b:6b:ad:02:
96:bd:4a:09:9c:98:ac:b1:f3:cf:77:33:ae:5c:22:5a:9d:d3:
31:b4:88:c1:d2:1d:6d:ff:b3:9e:79:52:c9:a6:d6:68:7c:e3:
e1:4f:4b:cb:e3:ed:f6:9e:d8:31:44:74:af:86:fb:a1:b0:67:
6c:31:09:2b:c9:bc:15:57:99:a6:c9:a4:f1:bc:06:74:38:47:
fb:91:87:f7:5d:3a:0b:ef:74:d6:54:f5:19:2e:56:4d:69:49:
3c:43:ef:a5:c7:d7:c4:04:81:94:a5:db:7c:21:7c:2e:86:77:
cc:8c:9a:82:eb:af:09:be:9e:c6:97:78:4d:ea:98:ce:89:31:
fc:b5:fe:65:18:44:f0:bd:70:17:a1:1f:07:ec:b8:8a:01:b8:
d8:6d:5d:0c:42:f0:c0:fc:5a:bc:54:8e:53:2a:76:db:d2:dc:
fd:c2:5e:9d:6e:f7:96:37:c4:c2:6b:92:ac:a1:c2:4a:78:ce:
7b:fe:b0:a8:43:4a:a1:2a:99:f1:f2:fb:0d:62:e0:4d:4d:ee:
f3:83:76:53:a0:4f:f4:7e:c4:d5:68:b2:25:bf:e1:a7:0c:d5:
24:34:dd:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvjY/kfh8fkntr/WkE6vCwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTE4MTcwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDkxZTNmOTk3MjYzMzQwYzRhMDMzYzM0MjhhOWFjMDJiZmY4OWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZFKcMOGjROCpnXzZqC+CAq9mjkN
qO7bLfbeYBIBQ927WoHbMF50ugqik40+zTdHBgJ9GGteb/EBmjeHhz/CtWXvOAa7
w1Wl5wH7hV61mO9Ac3/2RArY6dZv7uL+vDu0Ya+ZqJmGWN7nhAA3L7Tmf4vApt6h
ChzjwLG+ot27EIq5/EjYHxYRUPnjH8OkldS0IRjdIx+YwdKb/8ZQzJ0ytJQAgGjZ
bC2DlTayzytpqjGp69DxmGvndMSSgcbj9ovvo1wGOMsBjEOH5tbENsNM/6JmNO14
JdUAsG1Q/kfe2WNKnS1rGmuClSlDnWpD8908bKRSlxkNgJ8q7JX0OBpgJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM2R4/mXJjNAxKAzw0KKmsAr/4moMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvelpIai1aY21NMERFb0RQRFFvcWF3Q3ZfaWFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACAbvY5YKTQILGLdSWEz
frFBffay2rS67WSWBxUZKzENW2utApa9SgmcmKyx8893M65cIlqd0zG0iMHSHW3/
s555Usmm1mh84+FPS8vj7fae2DFEdK+G+6GwZ2wxCSvJvBVXmabJpPG8BnQ4R/uR
h/ddOgvvdNZU9RkuVk1pSTxD76XH18QEgZSl23whfC6Gd8yMmoLrrwm+nsaXeE3q
mM6JMfy1/mUYRPC9cBehHwfsuIoBuNhtXQxC8MD8WrxUjlMqdtvS3P3CXp1u95Y3
xMJrkqyhwkp4znv+sKhDSqEqmfHy+w1i4E1N7vODdlOgT/R+xNVosiW/4acM1SQ0
3VA=
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:03:48 2025 by rpki-client