Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zLWsCbEkMe_NmkR-wGjDRhS-7so.roa
File: zLWsCbEkMe_NmkR-wGjDRhS-7so.roa (raw, json)
Hash identifier: IQptTqWs8erDIzgrxEfkz6LGOpG1RR/pc2XBTIPayrU=
Subject key identifier: CC:B5:AC:09:B1:24:31:EF:CD:9A:44:7E:C0:68:C3:46:14:BE:EE:CA
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5B5C84C3DA0A4A5DC930D62BEECEE239
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zLWsCbEkMe_NmkR-wGjDRhS-7so.roa
Signing time: Sun 03 Sep 2023 14:05:04 +0000
ROA not before: Sun 03 Sep 2023 14:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:5b5b:e484/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5b:5c:84:c3:da:0a:4a:5d:c9:30:d6:2b:ee:ce:e2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 14:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccb5ac09b12431efcd9a447ec068c34614beeeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:37:1a:e6:4e:4f:6b:b1:54:f5:ad:ad:af:
7b:9c:39:58:42:9d:ec:cf:65:da:35:33:1c:79:58:
75:8f:db:90:03:b8:e5:3e:2f:e7:9e:f2:eb:d5:56:
19:b9:d0:31:95:5e:1a:11:63:b2:66:45:0c:68:c4:
14:ea:c3:66:c4:c7:68:1b:84:fb:b0:73:89:05:29:
c1:7f:b0:5a:a9:bc:71:e9:19:ca:c4:ee:fc:a6:59:
be:bd:23:59:1c:a2:08:68:1d:3d:d6:0d:8a:51:e2:
fd:6f:f2:95:71:62:91:f9:e3:d8:e9:85:29:49:f4:
a4:8b:a6:54:c5:c8:16:77:59:59:f1:22:58:2a:ff:
54:fe:78:3a:5a:6a:51:72:01:57:b5:c5:a2:b2:19:
22:b1:ec:cb:f4:0e:cf:5f:51:4f:59:40:48:f4:14:
d8:a8:ca:80:60:fb:0b:53:41:1e:68:7c:e4:de:1f:
c1:2f:fe:4f:af:a5:64:43:7f:52:e9:4f:1b:56:b7:
0a:c6:2c:fc:9e:6f:b3:1c:c0:53:ff:f7:d4:4f:3a:
fd:76:55:15:a8:ba:ea:83:94:c3:77:fd:13:b8:58:
29:f1:ee:fa:ad:fa:b6:87:c8:ed:e2:e2:61:20:6e:
7c:0e:52:fb:55:e1:11:bf:57:99:da:e1:fd:4b:28:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B5:AC:09:B1:24:31:EF:CD:9A:44:7E:C0:68:C3:46:14:BE:EE:CA
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/zLWsCbEkMe_NmkR-wGjDRhS-7so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d3:57:82:53:71:55:21:65:57:ae:63:16:da:91:1d:e7:85:
f2:ed:53:f8:c7:e4:5c:81:53:9f:da:85:01:a4:0e:7b:02:96:
32:a3:23:f2:e2:53:17:47:27:34:34:0f:e8:8b:43:bc:43:af:
1c:37:52:a1:54:e6:17:79:69:42:63:5c:08:13:63:5c:dd:57:
66:3a:fd:17:d3:3e:4a:d1:22:e6:fa:a9:ad:c1:29:f1:63:17:
5d:5d:f5:e3:ef:75:fc:85:45:04:5d:93:1a:cf:fa:07:1b:8e:
5d:2d:36:f5:37:e3:bf:ae:5d:dd:69:31:08:de:26:46:c6:4f:
64:ff:a5:fa:ae:5e:a5:d8:da:68:28:77:b9:ba:16:c7:f2:9d:
17:b1:b9:72:2e:01:9f:e6:66:37:ee:85:88:ca:48:af:85:5b:
28:ac:ca:cc:32:86:bb:14:5f:e2:17:f6:2f:92:bd:cc:c8:8f:
a2:97:df:1e:90:e4:ea:8a:c2:b6:4d:94:e4:1c:ed:0c:5a:60:
43:d0:48:ec:c4:97:e8:88:e6:d9:3f:3c:43:97:22:4f:5a:b9:
e3:6e:a5:a7:85:2c:76:b7:62:66:2d:e8:1d:ea:38:90:82:de:
b0:58:ea:d3:2c:32:bb:ce:38:93:c4:d6:d8:2b:58:ac:a9:93:
55:db:55:9f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpbXITD2gpKXckw1ivuzuI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTAzMTQwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2I1YWMwOWIxMjQzMWVmY2Q5YTQ0N2VjMDY4YzM0NjE0YmVlZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbk3GuZOT2uxVPWtra97nDlYQp3s
z2XaNTMceVh1j9uQA7jlPi/nnvLr1VYZudAxlV4aEWOyZkUMaMQU6sNmxMdoG4T7
sHOJBSnBf7Baqbxx6RnKxO78plm+vSNZHKIIaB091g2KUeL9b/KVcWKR+ePY6YUp
SfSki6ZUxcgWd1lZ8SJYKv9U/ng6WmpRcgFXtcWishkisezL9A7PX1FPWUBI9BTY
qMqAYPsLU0EeaHzk3h/BL/5Pr6VkQ39S6U8bVrcKxiz8nm+zHMBT//fUTzr9dlUV
qLrqg5TDd/0TuFgp8e76rfq2h8jt4uJhIG58DlL7VeERv1eZ2uH9SygMzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMy1rAmxJDHvzZpEfsBow0YUvu7KMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvekxXc0NiRWtNZV9ObWtSLXdHakRSaFMtN3NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB/TV4JTcVUhZVeuYxba
kR3nhfLtU/jH5FyBU5/ahQGkDnsCljKjI/LiUxdHJzQ0D+iLQ7xDrxw3UqFU5hd5
aUJjXAgTY1zdV2Y6/RfTPkrRIub6qa3BKfFjF11d9ePvdfyFRQRdkxrP+gcbjl0t
NvU347+uXd1pMQjeJkbGT2T/pfquXqXY2mgod7m6FsfynRexuXIuAZ/mZjfuhYjK
SK+FWyisyswyhrsUX+IX9i+SvczIj6KX3x6Q5OqKwrZNlOQc7QxaYEPQSOzEl+iI
5tk/PEOXIk9aueNupaeFLHa3YmYt6B3qOJCC3rBY6tMsMrvOOJPE1tgrWKypk1Xb
VZ8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:18:57 2025 by rpki-client