Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/08zom--74hzzVTuluMM1b10hvtg.roa
File: 08zom--74hzzVTuluMM1b10hvtg.roa (raw, json)
Hash identifier: 8tQixz0704Aan29b7/q/AMvjJ13m6Gt1zTMsNISBEQw=
Subject key identifier: D3:CC:E8:9B:EF:BB:E2:1C:F3:55:3B:A5:B8:C3:35:6F:5D:21:BE:D8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC86751903974578EE277A5FEFC56E7C6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/08zom--74hzzVTuluMM1b10hvtg.roa
Signing time: Sun 24 Sep 2023 18:15:28 +0000
ROA not before: Sun 24 Sep 2023 18:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c8:67:51:90:39:74:57:8e:e2:77:a5:fe:fc:56:e7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 18:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3cce89befbbe21cf3553ba5b8c3356f5d21bed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:ae:5b:10:c9:2e:33:e4:37:1d:b6:f3:80:
ce:90:76:df:4f:c3:a9:83:f0:ca:94:c2:7a:5e:39:
63:61:3f:74:bb:5d:aa:4e:42:5e:72:16:65:48:fb:
eb:79:ad:d0:1a:0b:b8:d3:b9:fd:75:75:94:94:18:
d2:e6:1c:b8:0f:f8:b6:69:62:f0:16:17:74:39:d5:
56:be:2f:f6:a0:b1:31:f9:46:f3:fd:46:24:43:0b:
4c:02:54:d7:98:fd:64:b9:cd:9e:8a:12:f3:73:68:
97:44:de:9f:bb:d4:69:b0:31:1c:e9:c5:5d:7a:7f:
bf:00:9d:00:7d:51:53:71:28:2a:cd:dd:c4:54:b8:
5d:73:ce:fc:bc:4f:e7:ac:67:7a:73:5f:28:2b:c1:
3f:66:f5:78:7e:ca:df:98:4b:fc:17:9c:4d:4d:cd:
ea:49:3b:52:e8:3e:c7:48:7d:9e:df:e6:76:a0:dc:
d2:a7:40:14:a7:1f:60:46:f2:b0:13:55:61:02:ce:
9c:2b:f5:42:24:1d:5d:f6:4d:bc:a1:62:34:40:8f:
09:74:41:95:83:ff:f0:ee:43:a0:df:37:c8:3b:dc:
85:01:5f:4e:69:bc:1c:08:53:f3:c6:0b:3c:30:a9:
37:e0:72:1d:4a:87:05:37:5f:ef:9c:ab:ab:d0:75:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:E8:9B:EF:BB:E2:1C:F3:55:3B:A5:B8:C3:35:6F:5D:21:BE:D8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/08zom--74hzzVTuluMM1b10hvtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:d9:bc:d8:ed:4f:a2:c9:35:e5:bf:da:d4:e9:42:82:6f:44:
88:78:0e:36:8b:34:35:57:4b:6c:53:b8:7c:9c:e7:2d:d5:af:
92:00:29:49:f7:95:36:ae:2d:61:e8:d6:a5:f0:cf:56:9e:2a:
92:b6:07:40:21:c8:c4:65:f9:13:52:c2:60:16:01:c7:74:48:
cc:33:65:c1:fb:80:77:00:9b:52:2e:fd:79:0c:52:49:14:47:
1d:26:0f:7f:3f:42:a2:c4:8e:85:2f:70:1c:0f:1a:79:c0:7d:
79:06:ec:0c:cb:9e:7a:60:bf:e4:1b:a8:16:e1:df:8c:03:f9:
33:4e:8b:7c:e0:1e:b8:00:d7:d4:1b:c9:82:81:af:3c:e6:bc:
b0:28:ff:e1:c6:50:eb:21:10:a5:a0:57:d8:99:87:f0:bd:dc:
53:7f:33:4d:48:39:9a:08:a5:2f:37:8f:c2:55:4f:50:78:08:
45:61:d4:11:0f:54:ac:c6:7b:5d:2c:d2:93:a2:6b:20:1f:09:
b7:d5:c9:70:5e:88:45:9f:8f:25:79:13:2b:36:ed:78:25:6f:
4d:9d:b3:e2:56:bb:ea:01:8c:c6:45:4a:5e:ef:fd:cd:34:46:
b3:76:78:ac:59:35:77:5e:29:c7:d7:4f:f9:58:0f:1e:64:ad:
d8:2e:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:50 2025 by rpki-client