Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8zPNiZU6C09BVKsr3bNT6ZZmNjk.roa
File: 8zPNiZU6C09BVKsr3bNT6ZZmNjk.roa (raw, json)
Hash identifier: rW2M7RWfhLvTMKpvE+Bmq/vDBXQbkTRDL4+mz+P92ok=
Subject key identifier: F3:33:CD:89:95:3A:0B:4F:41:54:AB:2B:DD:B3:53:E9:96:66:36:39
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B604D3BB5BAC8A4CBBC0C332130AE83E5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8zPNiZU6C09BVKsr3bNT6ZZmNjk.roa
Signing time: Tue 24 Oct 2023 06:09:16 +0000
ROA not before: Tue 24 Oct 2023 06:09:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:4d:3b:b5:ba:c8:a4:cb:bc:0c:33:21:30:ae:83:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 06:09:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f333cd89953a0b4f4154ab2bddb353e996663639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:88:4b:64:ff:2f:a6:78:29:5c:34:70:a4:
19:b8:3b:64:13:63:e9:f3:9f:54:46:68:49:0a:09:
f5:12:8a:0c:cc:6c:38:de:aa:b1:b0:36:22:dd:ea:
49:8c:f2:cd:3f:ce:00:06:1a:b0:df:13:ad:3a:39:
20:6e:5c:38:b2:29:bd:07:3b:03:f1:7e:cd:aa:a8:
e5:a9:72:e0:54:69:66:8e:a9:e6:b7:7d:6e:cb:3f:
22:76:89:99:71:d1:6a:3e:fd:24:f0:46:d5:88:73:
96:a0:b8:6a:e9:3e:cd:23:38:bb:fd:79:59:d3:d1:
c2:ec:9a:9f:e3:e0:ed:56:9f:e1:bc:3c:57:3c:3e:
6b:75:41:99:f0:5b:58:bf:bb:9e:cb:c2:bd:c8:c4:
ee:69:e3:94:4d:06:42:c7:fc:34:d5:ac:e1:8d:b8:
d2:23:f2:e2:b3:aa:1e:43:1d:0d:8b:91:2b:2d:e2:
cc:0d:05:da:8d:b3:88:94:86:93:cd:1f:4c:12:9f:
48:82:32:9c:8a:d8:88:42:22:90:6e:e6:a9:21:31:
ec:f7:b4:0e:44:dc:27:91:35:b6:b1:77:ec:94:41:
5a:2b:71:7b:3c:ac:41:62:f5:93:12:17:7d:46:3e:
71:8c:36:ee:b2:58:9b:ae:ec:08:0e:9a:78:74:ce:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:CD:89:95:3A:0B:4F:41:54:AB:2B:DD:B3:53:E9:96:66:36:39
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8zPNiZU6C09BVKsr3bNT6ZZmNjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:a1:b2:4b:7d:37:ac:04:6b:67:23:7d:49:31:45:b4:06:e7:
2a:4e:91:97:1b:e0:66:73:62:10:3a:df:0e:d8:19:81:6e:85:
9d:50:a8:db:ed:fb:e1:73:20:63:f6:35:c1:b1:24:23:22:4c:
19:71:45:5c:7b:95:e5:ec:84:5f:2e:70:e0:86:a1:f4:8b:2a:
4b:da:ec:51:4e:cd:59:3c:3f:db:a8:39:09:50:a8:4a:e4:ae:
89:47:a6:65:71:c1:35:0c:26:77:9e:0c:fa:11:2f:4d:71:e2:
0a:8b:a4:70:29:b8:ab:11:24:b2:de:9e:dd:99:8f:bb:95:da:
7c:18:d8:88:3f:66:40:80:56:31:d4:d1:2e:4b:9f:40:ec:6f:
98:75:73:48:a8:5c:d9:ca:54:d5:e7:74:ee:76:5f:97:ef:c9:
02:52:59:41:69:76:3b:67:cc:ad:25:ab:ce:a5:95:86:95:22:
bc:d3:1d:ca:d6:16:d2:4b:18:62:ca:67:af:5b:df:40:99:47:
68:1f:7b:20:38:55:af:49:d1:24:ac:01:d3:29:af:72:a8:89:
56:90:99:53:3a:92:a1:34:34:3e:e5:f6:b8:55:f8:94:04:f3:
6a:91:1c:f6:a7:47:94:0c:7f:f7:76:c0:44:db:79:3d:74:b0:
c2:a9:22:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:25:00 2025 by rpki-client