Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DZrU-IKkkRIX5z3auW2Prvrjook.roa
File: DZrU-IKkkRIX5z3auW2Prvrjook.roa (raw, json)
Hash identifier: SZ1HRPIH+wogjnGnGGcRIdLTrHLvGVIoYOziPYx8U6E=
Subject key identifier: 0D:9A:D4:F8:82:A4:91:12:17:E7:3D:DA:B9:6D:8F:AE:FA:E3:A2:89
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C54BDE75B3F4BF028B82B94379B2F82D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DZrU-IKkkRIX5z3auW2Prvrjook.roa
Signing time: Sun 10 Dec 2023 17:19:40 +0000
ROA not before: Sun 10 Dec 2023 17:19:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:bd:e7:5b:3f:4b:f0:28:b8:2b:94:37:9b:2f:82:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 17:19:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d9ad4f882a4911217e73ddab96d8faefae3a289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:32:c7:a8:12:0c:a5:65:ed:bf:2c:cf:7e:
38:60:a8:29:90:aa:c4:dd:d9:da:8b:3e:4c:e8:96:
2a:63:ed:ce:42:39:16:95:9a:cb:7c:97:70:d9:95:
e6:6f:6a:f8:8f:93:55:d2:20:98:d1:95:2a:43:6a:
70:2b:90:2c:9a:6f:fa:08:28:7f:31:28:ae:b1:dc:
c6:4f:99:d4:32:09:cd:66:ef:6b:18:56:4f:a4:41:
2a:59:93:fc:9c:3b:f2:5f:c2:84:2f:2d:cf:82:18:
56:91:76:d7:52:c0:4b:e2:f0:f7:2b:b9:44:02:02:
8c:b9:19:89:3b:a7:a0:61:22:99:56:ed:2f:44:89:
a3:35:75:c0:36:2d:74:3c:45:1a:68:d8:36:49:0e:
e5:45:4a:f9:22:19:43:d5:06:d3:28:b1:b9:1f:9e:
b7:cc:52:27:59:21:67:73:3b:b6:f7:c4:cb:44:0a:
e7:79:b6:8c:19:f8:c2:4e:6d:38:02:23:32:fd:42:
42:76:6a:a0:7c:c8:9d:5b:12:de:4e:a6:fe:d7:58:
ff:82:8c:6e:cc:8c:3f:4b:0f:d1:cb:e2:17:cf:c2:
61:86:33:77:52:b7:4f:91:52:ae:7d:75:b3:4a:a1:
37:ca:28:2f:fd:c3:b3:45:46:18:18:7e:07:92:6d:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9A:D4:F8:82:A4:91:12:17:E7:3D:DA:B9:6D:8F:AE:FA:E3:A2:89
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DZrU-IKkkRIX5z3auW2Prvrjook.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:a4:07:c1:0c:58:52:42:33:44:f1:75:ed:87:a4:59:76:13:
07:cd:52:8c:8b:c8:db:16:2b:cc:40:0a:b3:a8:fa:b7:65:e4:
84:97:76:7b:c7:91:97:80:1e:8b:31:cf:c2:b6:44:57:4b:ca:
44:37:f0:a5:c9:ee:08:f1:18:9d:87:9a:15:75:93:5f:c0:86:
05:53:f5:06:e9:76:b8:b9:5e:14:93:55:a7:99:a6:2b:1d:94:
dc:63:66:8e:ef:b7:66:19:30:c8:e5:78:6b:a7:70:04:9c:61:
78:04:71:0d:49:58:73:ac:66:68:d4:34:2f:31:3a:72:08:52:
96:3c:4f:a9:5d:f0:ca:1d:da:b5:a0:9b:ff:7c:09:78:f4:50:
5c:79:ac:7d:f3:64:0f:f7:ad:a5:d3:57:18:3a:27:7f:a2:5e:
d5:65:e8:a1:69:26:da:9c:f4:fa:4b:a5:32:ab:d8:db:9a:e0:
06:f8:e2:97:88:e7:b7:57:be:1b:ca:e9:7d:10:d0:09:51:95:
24:1b:2c:15:97:30:d3:7a:37:57:fc:fd:0a:d7:53:39:0e:11:
67:ce:64:69:09:67:a4:1f:7d:db:2b:e6:95:b3:2d:96:b7:12:
82:f1:9c:ee:fe:53:a5:79:9c:53:63:f3:ab:4c:2a:2d:54:c1:
72:30:57:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:20 2025 by rpki-client