Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Zgk9NNt7Zq_uQimaP_gyEyT5Xu0.roa
File: Zgk9NNt7Zq_uQimaP_gyEyT5Xu0.roa (raw, json)
Hash identifier: dzzOxOA3gFloESE9Qa/4DxYHDQbypuEzzbNAMZooyCE=
Subject key identifier: 66:09:3D:34:DB:7B:66:AF:EE:42:29:9A:3F:F8:32:13:24:F9:5E:ED
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F1E7FA8A88058FD821B980F46409E0D0
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Zgk9NNt7Zq_uQimaP_gyEyT5Xu0.roa
Signing time: Wed 21 May 2025 08:13:54 +0000
ROA not before: Wed 21 May 2025 08:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:e7:fa:8a:88:05:8f:d8:21:b9:80:f4:64:09:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 08:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66093d34db7b66afee42299a3ff8321324f95eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:ca:7b:e9:a5:ba:3d:3b:45:3e:8a:66:9d:
0c:e8:50:b9:95:9c:d5:ae:4c:57:c9:4c:d4:21:97:
73:cc:46:e1:46:8b:c8:54:e7:ff:8b:67:d7:33:e7:
10:2c:3b:24:1e:e8:8d:10:39:a7:46:10:27:88:7d:
61:3f:9f:b4:f5:77:0c:ca:21:58:ee:4d:86:93:7d:
dc:34:76:db:0e:77:b4:8f:34:fe:66:26:a4:b6:a5:
44:10:49:66:3d:8a:71:22:00:98:dc:98:9d:90:42:
cc:5f:12:b2:28:f8:78:e9:a5:b2:8c:69:f9:a4:28:
e1:19:92:5d:47:69:20:fc:a9:49:c1:cd:a4:33:52:
78:0f:7c:33:3e:78:a1:55:ef:9d:a6:98:d9:d1:55:
10:a3:90:7d:22:22:99:bf:ff:1b:b9:89:ec:84:20:
e3:88:06:d4:bb:23:a5:be:90:6c:dd:d7:2c:9e:f0:
d8:6e:fa:4a:93:d8:b7:37:8b:b9:9a:d8:bf:9d:ed:
8f:d6:41:d7:83:1b:b0:fe:d2:dd:80:27:5d:f3:16:
86:a3:8f:44:13:bc:d0:8b:89:70:33:0b:37:d4:a1:
81:23:2f:7e:f8:38:cc:80:06:b5:a0:c3:72:07:e7:
f2:52:d4:a1:9b:02:0e:ab:c2:40:cf:0e:c3:c5:8b:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:09:3D:34:DB:7B:66:AF:EE:42:29:9A:3F:F8:32:13:24:F9:5E:ED
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Zgk9NNt7Zq_uQimaP_gyEyT5Xu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
95:e0:6d:51:aa:8d:21:bc:b3:65:f1:4e:50:7f:27:5d:cc:c6:
fe:f0:93:34:0d:f7:47:4e:e4:80:10:0e:73:b8:0a:86:b7:aa:
a6:26:db:31:d8:f0:4c:a0:d0:5b:cc:b9:f7:16:df:0c:39:a0:
93:ea:76:09:d9:5b:17:35:f9:f0:7a:6b:b4:ea:5b:c0:ef:a0:
fa:e5:2d:94:09:23:71:62:25:ff:1b:38:aa:0d:51:fd:66:ff:
3c:3c:0a:fc:ee:d8:c4:80:6d:37:91:48:2b:bb:f6:5f:b8:d6:
ab:6f:f8:63:00:56:14:d6:01:e1:8a:a2:c0:0f:59:4c:d2:a8:
bb:3c:89:c0:0b:28:2e:41:2f:3e:ae:75:4a:a3:96:e1:13:99:
80:52:74:31:9e:46:94:28:a2:77:32:7e:e7:f7:4f:9c:94:85:
af:db:9f:25:eb:c0:1b:f8:bf:29:0e:db:dd:ff:74:63:f0:8d:
4f:51:0d:a1:44:d5:23:6d:34:fd:f9:ac:d6:3c:fe:99:85:b1:
48:60:57:33:96:19:b3:7c:0f:fd:0e:3f:7e:19:9f:cf:bf:56:
39:32:77:52:33:40:56:3e:e8:a0:8d:4f:66:cc:ef:b3:80:e6:
15:25:73:c4:cc:0a:04:67:30:fb:ca:30:89:bf:c7:2b:92:20:
49:f9:b9:66
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZbx5/qKiAWP2CG5gPRkCeDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNTIxMDgxMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjA5M2QzNGRiN2I2NmFmZWU0MjI5OWEzZmY4MzIxMzI0Zjk1ZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLLKe+mluj07RT6KZp0M6FC5lZzV
rkxXyUzUIZdzzEbhRovIVOf/i2fXM+cQLDskHuiNEDmnRhAniH1hP5+09XcMyiFY
7k2Gk33cNHbbDne0jzT+ZiaktqVEEElmPYpxIgCY3JidkELMXxKyKPh46aWyjGn5
pCjhGZJdR2kg/KlJwc2kM1J4D3wzPnihVe+dppjZ0VUQo5B9IiKZv/8buYnshCDj
iAbUuyOlvpBs3dcsnvDYbvpKk9i3N4u5mti/ne2P1kHXgxuw/tLdgCdd8xaGo49E
E7zQi4lwMws31KGBIy9++DjMgAa1oMNyB+fyUtShmwIOq8JAzw7DxYueLwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGYJPTTbe2av7kIpmj/4MhMk+V7tMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvWmdrOU5OdDdacV91UWltYVBfZ3lFeVQ1WHUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGW7V2MKDANBgkqhkiG9w0BAQsFAAOCAQEAleBtUaqNIbyzZfFOUH8nXczG
/vCTNA33R07kgBAOc7gKhreqpibbMdjwTKDQW8y59xbfDDmgk+p2CdlbFzX58Hpr
tOpbwO+g+uUtlAkjcWIl/xs4qg1R/Wb/PDwK/O7YxIBtN5FIK7v2X7jWq2/4YwBW
FNYB4YqiwA9ZTNKouzyJwAsoLkEvPq51SqOW4ROZgFJ0MZ5GlCiidzJ+5/dPnJSF
r9ufJevAG/i/KQ7b3f90Y/CNT1ENoUTVI200/fms1jz+mYWxSGBXM5YZs3wP/Q4/
fhmfz79WOTJ3UjNAVj7ooI1PZszvs4DmFSVzxMwKBGcw+8owib/HK5IgSfm5Zg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:47 2025 by rpki-client