Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZEbiEbXc76iCIO4A80ifky3-5R0.roa
File: ZEbiEbXc76iCIO4A80ifky3-5R0.roa (raw, json)
Hash identifier: CTbUHizPpaBkXXOBRORtg2FisyB6NLok3aCPnLAsEmk=
Subject key identifier: 64:46:E2:11:B5:DC:EF:A8:82:20:EE:00:F3:48:9F:93:2D:FE:E5:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD2060F88B39F57DBEDD1A0EEB3CC53DB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZEbiEbXc76iCIO4A80ifky3-5R0.roa
Signing time: Tue 26 Sep 2023 15:05:27 +0000
ROA not before: Tue 26 Sep 2023 15:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d205:387b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:06:0f:88:b3:9f:57:db:ed:d1:a0:ee:b3:cc:53:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 15:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6446e211b5dcefa88220ee00f3489f932dfee51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:1c:d7:23:24:77:48:85:d6:b3:85:91:9f:
ba:5e:18:cf:b0:a1:42:24:31:cf:67:00:72:ce:cb:
d8:f9:6f:5a:33:08:4e:f8:18:d4:73:3b:36:2d:95:
0f:d5:d9:39:08:d0:2b:23:4b:92:2a:6b:09:1b:b6:
42:46:84:f3:d3:12:db:d5:08:31:09:18:92:36:a8:
8d:53:a4:91:4d:e2:94:0f:74:54:bf:f0:62:2c:9f:
1d:d6:b6:0a:bf:ba:d3:a1:8f:e0:f7:79:1e:ab:be:
76:3c:f4:08:5c:00:91:29:42:10:2c:1e:c1:bd:39:
5c:f7:7d:34:88:a6:17:80:c4:ee:4b:9f:ee:f3:73:
e2:eb:bf:62:36:b4:e9:c7:ef:0b:9c:31:85:15:83:
c4:6c:e0:88:b3:00:23:a3:f2:0e:36:a1:8b:90:ae:
db:db:ab:a8:fc:94:2a:b7:ad:43:a3:f1:f1:cf:01:
c5:d8:2f:c1:d6:93:48:39:0a:cc:d7:2c:ab:1d:43:
af:a7:68:26:bf:99:d3:fa:94:d1:f6:e4:64:63:c1:
9a:49:13:6b:74:c2:2f:34:14:07:98:ef:db:94:9f:
2b:f2:27:cc:e2:3b:c9:9a:ef:54:56:d3:d2:57:c7:
f9:37:5f:86:16:72:65:53:4d:d1:ea:53:4c:82:f1:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:46:E2:11:B5:DC:EF:A8:82:20:EE:00:F3:48:9F:93:2D:FE:E5:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZEbiEbXc76iCIO4A80ifky3-5R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:be:67:7c:cc:5b:67:86:ea:43:f1:13:3b:c2:84:53:06:2f:
da:77:19:80:3b:72:f1:97:be:5b:ec:e3:b8:fa:94:15:23:f0:
3f:6a:a0:5e:94:5b:7d:26:b9:64:9f:58:99:ba:5d:85:6b:84:
18:43:87:81:0e:fd:da:bb:5d:3b:fd:d4:46:55:1e:c7:73:19:
f7:2a:26:27:9b:1d:90:e2:08:95:f8:9d:90:4d:86:22:94:a6:
56:71:79:a4:fb:cc:3f:a0:d2:32:c7:20:0e:0d:c7:30:9d:5a:
c9:0f:8e:d5:d9:54:44:83:89:95:52:ce:97:3f:eb:36:b7:98:
f6:e8:bc:a0:c2:31:16:f5:2f:3f:9e:78:25:aa:ee:b2:48:c2:
7b:72:f7:a3:9f:96:c1:33:7a:c8:a9:7b:0f:5f:f9:af:e1:a5:
67:40:a3:c3:07:cc:67:6c:c1:12:e5:16:dc:65:06:ec:6b:88:
13:da:83:af:d8:44:c0:ed:f3:41:be:1f:f4:7f:95:24:79:1d:
ec:f0:de:a6:7e:62:71:b7:87:3d:4d:fb:e9:7f:37:0e:2c:b5:
0b:81:f8:d1:52:28:8d:ef:c3:70:0f:d8:8f:cc:bb:1a:a4:cd:
5c:9a:36:2c:88:e4:a3:14:76:e2:b5:39:85:e5:50:e9:4a:ae:
2c:ec:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:54:19 2025 by rpki-client