Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AD_zScyN5uRyvflIQyVeTa-gW88.roa
File: AD_zScyN5uRyvflIQyVeTa-gW88.roa (raw, json)
Hash identifier: ZC1+Hm/gJ/qUngBXRpxX9xUOzcQauQlSXj/iZn2MR3o=
Subject key identifier: 00:3F:F3:49:CC:8D:E6:E4:72:BD:F9:48:43:25:5E:4D:AF:A0:5B:CF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C59A839BF54965BACAE5DD198E3344923
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AD_zScyN5uRyvflIQyVeTa-gW88.roa
Signing time: Mon 11 Dec 2023 16:14:06 +0000
ROA not before: Mon 11 Dec 2023 16:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:a8:39:bf:54:96:5b:ac:ae:5d:d1:98:e3:34:49:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 16:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=003ff349cc8de6e472bdf94843255e4dafa05bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:cf:76:88:e3:77:a8:80:19:a5:a4:e3:69:
35:e0:30:13:5d:24:a8:bd:38:0a:ed:0c:90:94:83:
d7:59:51:27:2f:5b:00:d6:01:51:c1:9e:27:7f:0a:
30:ae:24:7a:91:a7:6f:cc:4d:0a:df:da:62:3c:42:
0d:af:19:a0:58:1c:48:9b:47:6e:76:57:88:1a:14:
8e:8c:fa:5e:65:60:c6:60:65:e5:5f:c1:a4:7e:35:
37:6a:ca:2e:16:6e:4f:e5:43:08:c0:7a:1d:96:6f:
c7:d3:ac:d2:aa:5e:f8:9e:4a:a5:21:09:b2:62:21:
6a:d5:ea:cf:6d:2d:41:08:d0:4d:29:2e:41:d1:69:
b6:5b:ea:75:1c:11:78:ae:6b:b3:52:20:32:63:e3:
d8:e1:e4:bd:ee:8b:c9:cd:56:a9:d2:ca:ae:78:a6:
64:c9:90:0c:3d:ff:2b:e4:5b:ef:ce:c3:37:fa:3f:
f9:27:10:81:81:ae:cb:ff:62:e5:39:79:c8:87:18:
3b:d4:d2:5a:44:3b:48:dc:10:e5:47:de:3c:c0:09:
b8:66:5f:be:86:8e:50:ec:c6:25:b4:fa:da:fb:8b:
52:e7:bb:2b:bf:2f:13:2c:e3:51:a2:13:4b:e4:bd:
f7:f7:a8:1b:47:8c:16:c8:35:ec:b1:ef:51:bf:14:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3F:F3:49:CC:8D:E6:E4:72:BD:F9:48:43:25:5E:4D:AF:A0:5B:CF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AD_zScyN5uRyvflIQyVeTa-gW88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:a8:f2:ec:d0:e2:d4:89:f3:0d:ca:de:38:ec:9c:23:3f:51:
85:0f:a7:fb:5a:b2:47:f5:46:13:d2:27:24:39:51:98:4e:cc:
83:a9:d9:f3:d6:16:38:ec:7b:03:6b:bf:80:b5:fd:be:f0:36:
97:1c:f0:64:b7:e2:9f:1e:be:1a:d7:6a:0e:49:07:23:bd:48:
da:50:4d:8f:48:ab:01:4a:3f:6a:64:4d:39:c7:8f:e8:4a:72:
15:50:9c:30:6a:27:bd:13:56:53:e7:f9:21:b0:68:e7:d5:4e:
e7:f0:5d:ec:36:94:dc:e6:b8:a6:b9:6f:1e:cc:60:6c:25:40:
d7:d3:56:bf:01:1b:3f:ae:72:32:50:22:1a:0c:3b:b6:5c:c9:
d3:8c:1b:12:d5:43:ca:87:9d:cf:3f:96:55:9b:02:4d:78:c6:
d5:1c:69:7f:b5:3a:43:3b:8a:35:97:a7:35:d8:53:e5:b4:a3:
3b:a4:7f:bd:0a:92:6a:6a:86:6c:f4:77:6f:1f:06:b7:44:97:
b5:fd:98:a3:e6:1d:f0:4a:e8:a8:f1:3a:cb:3e:1a:cd:1b:23:
9b:e8:71:6f:bc:c8:0e:c4:ae:46:7e:f2:71:b1:6d:93:2b:65:
16:f7:15:2a:2e:70:49:11:58:5f:41:91:b9:89:77:b1:2d:5e:
84:da:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:22:16 2025 by rpki-client