Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZBdh-FMkArlKLlISyYhCIzhPQxU.roa
File: ZBdh-FMkArlKLlISyYhCIzhPQxU.roa (raw, json)
Hash identifier: wV2FLgsj3rAbFmvjP96lB0cKEXMoe+LeTeTHopptR3c=
Subject key identifier: 64:17:61:F8:53:24:02:B9:4A:2E:52:12:C9:88:42:23:38:4F:43:15
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5DBAF90D505D2AB0982EEE09D1594B9C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZBdh-FMkArlKLlISyYhCIzhPQxU.roa
Signing time: Mon 23 Oct 2023 18:10:16 +0000
ROA not before: Mon 23 Oct 2023 18:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:ba:f9:0d:50:5d:2a:b0:98:2e:ee:09:d1:59:4b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 18:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=641761f8532402b94a2e5212c9884223384f4315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:54:c0:73:86:a1:e3:cc:11:76:c3:6f:60:
75:b5:06:cf:ed:04:d8:f7:8a:7e:a3:1f:43:ca:bd:
76:2b:37:fa:0a:66:4a:db:67:13:34:bc:f8:1e:92:
b8:bf:f3:b7:2b:8e:44:28:70:6f:03:ba:93:ac:19:
53:73:7e:57:67:31:56:70:9a:06:ed:17:c9:07:df:
e3:c5:54:0d:4c:83:a1:ac:13:f8:36:f5:c6:d0:22:
55:45:55:af:55:c2:1b:94:94:8c:43:64:e7:48:67:
92:48:03:e4:9f:15:d5:ac:68:c4:49:b5:f6:f3:88:
b6:40:72:df:11:24:63:8e:ce:1a:dc:66:0e:9e:77:
d1:7f:1b:2b:c7:ed:04:af:e3:a2:b7:33:48:d5:3f:
fd:db:92:3d:a4:3f:1f:9d:ab:76:9b:1a:21:fc:a6:
31:19:f6:4d:d9:12:32:75:11:d4:d7:a1:c4:6a:9b:
3e:59:99:7d:1d:4d:04:69:99:0e:07:78:65:db:29:
c3:88:60:06:0f:7a:41:bf:99:49:95:d5:b0:00:c4:
6e:8f:bc:0a:03:ec:bb:93:0c:ef:86:60:be:35:7c:
39:40:72:0c:57:0d:6d:0f:28:f4:24:3c:0f:47:4d:
8b:b0:d2:f6:7d:53:fa:08:8f:3e:09:57:cb:0e:be:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:61:F8:53:24:02:B9:4A:2E:52:12:C9:88:42:23:38:4F:43:15
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZBdh-FMkArlKLlISyYhCIzhPQxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:50:86:2d:a7:a4:fb:c2:dd:03:66:4f:2e:0e:10:49:b0:77:
25:09:e2:3a:7b:93:2b:77:81:16:40:8c:d1:b2:5c:ce:72:d6:
4e:58:50:e5:96:60:18:72:2b:11:d4:ea:03:04:a2:3b:9a:a8:
37:bd:8e:d1:08:32:5b:30:75:6b:35:62:27:d7:ad:75:c8:3c:
53:ed:a6:7b:ec:4d:8a:39:08:4f:83:56:f3:85:70:cd:da:6d:
ca:d0:c5:cc:b8:aa:d9:ec:2b:9c:1f:69:23:59:da:dd:82:fa:
bd:3b:88:df:cb:f5:47:75:dd:e2:04:4a:33:70:3e:2b:5d:73:
d7:b7:6b:f5:c9:82:8d:50:03:02:b6:3a:3d:94:3f:4c:4d:02:
e2:fd:63:23:3b:e7:82:6d:da:32:5b:ba:35:bd:7c:da:e2:f3:
45:d1:ac:40:15:49:d1:b9:21:da:8a:55:2e:99:a4:72:33:9f:
57:4d:dd:7c:3a:09:0e:ac:25:fd:aa:b1:92:b7:87:c3:fa:4c:
a0:4b:b4:7d:25:2a:9d:07:50:96:0d:98:49:44:0f:46:21:43:
73:46:41:c6:de:bf:ab:5b:41:07:bf:bf:3b:76:4b:ad:6f:1f:
5f:3d:53:bd:32:b4:fc:d0:13:69:a7:eb:2e:1e:8e:a4:6b:b3:
b2:c3:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:21 2025 by rpki-client