Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zdMyGoveYqbZSz8pQqGDlE3d6KQ.roa
File: zdMyGoveYqbZSz8pQqGDlE3d6KQ.roa (raw, json)
Hash identifier: IDoEgZT2S1sFAdN8hFEOweUEnKQ9X9aYTJlW4/sb964=
Subject key identifier: CD:D3:32:1A:8B:DE:62:A6:D9:4B:3F:29:42:A1:83:94:4D:DD:E8:A4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1DFB61BE2A65BE254BD6F9DACFACB6A8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zdMyGoveYqbZSz8pQqGDlE3d6KQ.roa
Signing time: Wed 11 Oct 2023 09:04:55 +0000
ROA not before: Wed 11 Oct 2023 09:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:1dfa:ca5c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:fb:61:be:2a:65:be:25:4b:d6:f9:da:cf:ac:b6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 09:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdd3321a8bde62a6d94b3f2942a183944ddde8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f4:fb:51:46:e3:86:02:c0:bd:38:82:ef:2c:
92:34:a5:da:58:da:2e:af:3a:07:8c:1c:46:43:04:
74:77:ec:90:79:20:21:06:72:df:54:bb:94:05:3c:
6a:ee:e2:22:6f:a1:77:f6:f5:71:cb:bc:e1:27:ca:
cd:0d:5c:a1:a6:c8:91:92:07:86:11:cc:86:9e:6f:
0f:ed:6d:9e:27:f1:38:21:a8:05:b3:9b:bf:44:74:
88:b1:2b:bd:7d:d6:52:ad:c9:27:55:3a:35:f5:76:
78:ba:ac:8e:aa:cb:0a:ee:d0:17:e7:50:85:ee:e6:
98:bc:f2:e5:fa:32:55:da:34:e4:e1:41:e9:26:83:
87:8e:bc:90:6f:7b:2e:40:cb:72:cf:a3:3f:e2:d6:
3a:c4:b5:b7:4c:ef:3a:fe:1c:c2:95:dc:65:77:4d:
9c:e0:35:b8:45:b3:2c:ec:20:94:ae:61:8d:59:da:
12:b9:0c:a6:51:b3:b5:45:52:ef:79:fd:8d:df:1e:
ff:c3:8b:46:ba:52:12:57:3f:ab:16:49:68:cc:ae:
e6:6e:be:f1:2c:64:65:2a:87:ed:ad:21:d5:9e:15:
8f:48:83:fb:24:08:65:45:21:6e:80:c5:68:1a:d9:
7f:b9:e8:e2:85:79:d1:a9:06:d6:0e:22:9f:d2:2e:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:32:1A:8B:DE:62:A6:D9:4B:3F:29:42:A1:83:94:4D:DD:E8:A4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zdMyGoveYqbZSz8pQqGDlE3d6KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:94:b4:ab:e9:35:cb:f2:70:04:e0:ad:28:8b:4c:7c:66:1c:
ba:54:a3:92:e8:0f:53:b7:60:3d:90:d7:2d:56:9d:86:84:a3:
23:3e:2f:a9:8d:0b:5c:de:31:5a:93:f8:93:9f:aa:d7:6a:03:
14:67:6d:6b:6a:02:5c:04:52:d7:fc:84:1c:b3:ef:8e:25:34:
1d:38:d4:03:1c:00:25:4f:c6:7c:52:15:2a:fd:68:03:54:52:
52:91:a2:14:8e:b2:b2:cd:6e:de:34:8d:dd:11:d4:db:49:fe:
19:69:ee:33:83:6c:52:27:96:4f:84:72:35:d0:7f:a6:32:87:
90:d2:85:e3:7c:f4:fb:f4:95:f7:4c:85:ff:68:99:6a:81:4e:
d7:35:f6:da:97:34:4b:3f:35:73:98:e1:31:cd:b4:6b:9f:ea:
b1:33:a2:82:d8:9d:ee:27:f6:4c:63:f9:94:10:15:92:cb:01:
7c:8a:14:9d:4c:e3:e3:bc:13:ac:14:ca:56:8a:03:04:9b:f9:
3e:70:3e:77:a4:05:3d:2e:06:82:8e:5f:02:5f:13:7e:28:8c:
0d:d4:4f:3b:3a:49:72:13:47:98:04:83:4e:34:ef:c0:02:56:
6c:a2:bc:60:08:fc:14:c3:ba:9d:f4:ca:80:56:f8:89:77:73:
e8:c8:6a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:59:18 2025 by rpki-client