Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ZWD4K_GP5AnX5v_24QrTOQJc-w.roa
File: 9ZWD4K_GP5AnX5v_24QrTOQJc-w.roa (raw, json)
Hash identifier: 7y19p4AnRCFyHlRyA5OzTo+/s0+4MYTqcXrASSpEhDs=
Subject key identifier: F5:95:83:E0:AF:C6:3F:90:27:5F:9B:FF:DB:84:2B:4C:E4:09:73:EC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF79A882B2FC7C832088120AB4246A27C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ZWD4K_GP5AnX5v_24QrTOQJc-w.roa
Signing time: Wed 22 Nov 2023 15:16:21 +0000
ROA not before: Wed 22 Nov 2023 15:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:9a:88:2b:2f:c7:c8:32:08:81:20:ab:42:46:a2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 15:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f59583e0afc63f90275f9bffdb842b4ce40973ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:90:a3:3a:51:82:53:39:8b:67:e4:58:af:
b7:16:bb:fc:2b:0c:ec:6d:de:ff:6b:05:91:6b:0b:
88:13:2e:0e:f4:94:c6:07:c9:28:26:1a:cf:f2:66:
c9:08:13:9e:21:5e:c7:e2:c8:66:4e:f6:02:31:0a:
c0:32:ac:16:7f:be:04:e8:13:59:b0:5b:5f:14:1f:
df:f9:22:2d:dc:91:af:7f:35:9d:ad:f8:53:55:25:
ff:18:cb:57:09:59:1c:34:5f:c9:a4:56:82:72:73:
96:87:3a:e2:fd:e7:b6:18:62:dc:c8:8d:3b:8e:90:
96:42:e8:30:96:5b:f9:9b:9d:d3:0b:2e:0c:fb:d5:
9f:00:91:38:a7:a7:cc:00:6a:da:f1:96:5e:22:07:
45:b1:d8:23:6e:cf:4d:8f:86:57:1a:e5:ef:26:53:
92:4c:36:58:8b:ac:18:9c:1c:36:40:58:1c:74:04:
96:f5:80:8a:2d:b6:bf:c4:1f:5f:90:23:88:db:a6:
f8:c6:4d:d7:89:19:9d:99:a1:48:5b:1c:4a:42:13:
79:63:48:91:74:df:4d:fa:aa:d8:15:cd:3d:36:7c:
da:48:45:58:f6:9e:27:bb:ae:88:e8:c2:73:4e:09:
be:c3:4b:23:11:2e:6a:e8:b3:3e:fd:d8:01:9d:6e:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:95:83:E0:AF:C6:3F:90:27:5F:9B:FF:DB:84:2B:4C:E4:09:73:EC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9ZWD4K_GP5AnX5v_24QrTOQJc-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:3f:31:87:c4:ac:92:5a:ff:9d:20:42:02:6a:80:8e:d9:d5:
90:2e:5d:0c:49:30:4d:10:42:87:ef:1d:81:e8:eb:a0:94:4b:
b5:82:1d:c9:d1:72:1c:f9:61:87:c1:6a:7d:e4:c7:1e:69:a9:
9a:8f:60:66:3b:9b:df:b7:9f:6e:fe:1a:6e:9e:46:9d:99:4d:
90:73:a5:e4:42:68:6c:cf:c0:ce:8b:73:c5:10:12:2d:0b:e5:
17:ff:bb:6b:f2:38:79:c3:64:39:09:19:b6:18:75:af:82:97:
a4:75:31:17:0c:07:09:89:08:81:8e:4c:41:4b:18:64:4e:21:
5b:12:e4:5f:89:29:a1:9f:4e:09:d9:4b:a6:9a:5c:a3:4d:91:
ac:14:84:8d:94:95:13:16:6e:a9:ea:ac:16:61:6e:fb:da:2e:
41:20:03:73:73:10:ca:d4:b5:e4:aa:2e:ba:73:48:f0:a6:e6:
ea:f6:c2:ab:49:67:83:e8:96:1c:b6:71:4a:cc:7b:49:0e:a3:
e1:a1:f0:cb:aa:3f:64:8f:a6:b0:e3:49:91:bd:d1:be:4e:f1:
23:e3:6a:dc:a3:5b:ae:93:64:7b:63:0a:29:87:63:53:8d:eb:
82:a3:ff:4a:74:1b:75:0b:77:37:a3:72:df:f3:31:98:a9:69:
2f:3c:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:12:17 2025 by rpki-client