Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z7Y1x1h2u5OqSjnC6yTjB6JKhHQ.roa
File: Z7Y1x1h2u5OqSjnC6yTjB6JKhHQ.roa (raw, json)
Hash identifier: w4kuFlo+KDrDrNoqwhPvwdjT3iOI5VNR9iFCcf+bSXo=
Subject key identifier: 67:B6:35:C7:58:76:BB:93:AA:4A:39:C2:EB:24:E3:07:A2:4A:84:74
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCD4F21ABD7F6673D9AA7ABBECCE56F87
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z7Y1x1h2u5OqSjnC6yTjB6JKhHQ.roa
Signing time: Tue 14 Nov 2023 10:09:57 +0000
ROA not before: Tue 14 Nov 2023 10:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:4f:21:ab:d7:f6:67:3d:9a:a7:ab:be:cc:e5:6f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 10:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67b635c75876bb93aa4a39c2eb24e307a24a8474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:b4:b1:93:8d:7e:d1:b1:c3:dc:d8:a1:3b:
12:9b:a5:e8:b2:0c:1a:a7:03:82:3c:a4:73:6d:d7:
ac:e3:fc:89:b8:3c:6a:c4:45:3c:bc:92:a2:6d:cf:
eb:30:69:0e:ff:b7:d2:41:f4:6d:6b:a4:54:f5:20:
0f:45:f5:c5:ad:bc:e4:3b:6a:9f:44:22:c0:78:61:
a9:02:79:41:4f:30:6e:62:1c:ab:a4:0e:a8:5f:a9:
d4:75:95:2d:5a:6f:c9:76:4e:74:92:df:52:78:51:
5d:31:e9:4e:86:11:59:f4:9c:ab:cb:2b:23:a4:09:
a2:1e:b4:54:b0:2b:f4:55:d1:ac:4b:39:4e:48:64:
08:3d:ba:df:8f:d2:04:67:03:36:56:37:66:d3:b8:
f7:f7:35:f4:98:35:1d:46:89:80:7d:0a:ae:3f:30:
d3:58:67:8c:dd:6b:7e:16:3a:d4:d8:73:f9:c1:f2:
3a:16:dc:fa:9a:ce:9a:55:58:cd:38:f9:44:df:15:
88:f2:0a:fe:b9:05:70:79:d7:32:5d:b6:71:d2:b0:
fd:f3:1a:c2:49:25:52:5f:9d:8f:4a:53:91:5d:c5:
f9:70:a9:79:8d:c5:f4:a2:b3:c8:9c:35:62:3f:16:
f6:e1:a5:c8:2a:d8:f8:fd:fe:48:9e:bf:f5:79:f2:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:35:C7:58:76:BB:93:AA:4A:39:C2:EB:24:E3:07:A2:4A:84:74
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z7Y1x1h2u5OqSjnC6yTjB6JKhHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:8b:77:ba:cd:20:d2:05:41:d7:d7:2f:10:39:c8:62:dc:ad:
59:1c:21:17:3b:3e:d8:86:c2:fd:8c:1b:2c:e8:12:4b:0e:2a:
47:cb:15:f1:7c:46:9e:9b:c1:4f:04:46:f0:fd:a8:dc:07:e3:
04:a5:62:a5:79:20:37:28:75:4f:87:8a:16:76:e1:c6:1f:cd:
89:f8:fc:eb:86:da:61:c9:10:16:de:39:e6:90:7b:99:8f:b5:
a8:82:69:a7:11:3c:fa:62:cb:67:33:b5:c2:67:e7:3c:00:f9:
41:ef:06:4e:ce:5b:2d:f6:1f:d2:fa:b6:d8:05:af:b8:a0:28:
37:81:2d:45:0a:30:0e:5e:c3:b6:8f:89:71:d4:39:2c:a8:f8:
69:13:d8:9e:79:7f:c9:ce:dc:b0:20:58:24:73:a2:ab:83:3d:
cc:21:ce:9e:47:69:18:ae:7e:8b:47:3f:66:2c:fa:93:11:8d:
22:97:d2:a3:e7:18:5d:6e:e0:e6:ba:92:21:dd:ba:8d:b4:fc:
9d:e6:ab:08:57:e4:45:f3:87:6e:77:07:dd:02:78:45:75:b3:
c7:32:19:32:59:4e:0e:e1:23:0a:ca:d3:c7:4b:e4:2f:66:ac:
07:da:0d:3c:54:c9:fb:d8:f2:a4:f6:c1:b0:36:fb:9b:e1:51:
cc:f3:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:22 2025 by rpki-client