Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZJfU9MEnD6gp28qAeXXyuf-dvHA.roa
File: ZJfU9MEnD6gp28qAeXXyuf-dvHA.roa (raw, json)
Hash identifier: RdZzZgXxjZDLBooKvnQ32FRjyJJWLO+ERvvL1TW6r6o=
Subject key identifier: 64:97:D4:F4:C1:27:0F:A8:29:DB:CA:80:79:75:F2:B9:FF:9D:BC:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5F0759DC1761C87A2F315FF9E36384E5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZJfU9MEnD6gp28qAeXXyuf-dvHA.roa
Signing time: Tue 12 Dec 2023 17:16:06 +0000
ROA not before: Tue 12 Dec 2023 17:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:07:59:dc:17:61:c8:7a:2f:31:5f:f9:e3:63:84:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 12 17:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6497d4f4c1270fa829dbca807975f2b9ff9dbc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:15:68:9a:c3:c3:71:36:6d:47:c9:67:e3:
a3:79:f9:a6:f9:83:1f:98:41:b7:9a:99:3b:41:80:
1f:5e:10:19:09:39:9b:5e:f8:65:f3:f7:f5:12:20:
fb:36:ec:7b:85:f7:ca:38:c9:c5:a5:e4:15:da:f4:
91:50:3e:4e:8c:6d:9e:df:e9:65:d3:f5:3d:05:d6:
81:d7:39:04:6f:7d:63:e4:7d:90:ce:7c:8b:e9:24:
d3:3f:c2:4a:13:a8:f8:2c:7d:bf:5a:c1:49:61:7d:
51:b4:fc:79:e9:c1:42:98:05:a6:43:90:a1:de:5c:
cc:aa:d2:3f:e8:a5:e6:5e:3f:28:51:93:88:2d:43:
1d:be:dc:30:08:c0:99:2c:eb:aa:95:4a:08:94:d2:
0f:7a:0c:01:bf:03:bf:4c:07:7e:4a:c3:65:02:0e:
22:7d:4c:97:78:e9:49:d3:1c:29:39:2f:02:70:9b:
3a:a7:c3:ba:6d:6a:f9:0b:16:2d:8c:4c:27:54:99:
98:5c:61:75:fb:bf:43:12:a8:cf:61:de:9c:3a:67:
22:a7:ca:09:a7:de:de:fe:e1:7a:1c:77:f5:f0:12:
03:7d:57:5e:fa:d4:79:69:95:8d:13:90:cc:db:db:
da:4c:5e:5c:a3:0d:46:1a:37:6e:ac:e6:42:2a:67:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:97:D4:F4:C1:27:0F:A8:29:DB:CA:80:79:75:F2:B9:FF:9D:BC:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZJfU9MEnD6gp28qAeXXyuf-dvHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:46:ea:44:32:33:ed:95:17:68:dd:f0:0a:db:95:cd:4e:4c:
9f:eb:1e:c7:4a:00:11:1a:d8:08:54:d5:5b:ea:87:f0:7a:40:
d2:27:4e:04:0f:3b:ce:bc:cd:5b:23:ad:f9:48:e8:6d:65:8c:
cf:33:b7:0d:01:36:b1:27:ae:07:39:f8:ed:24:b4:b5:d6:09:
86:59:93:9e:10:27:76:80:cf:ae:bb:29:82:e5:db:87:e1:1f:
d7:c1:80:13:55:b1:c4:c6:93:fa:62:ce:6c:15:b7:57:65:5e:
1c:e3:4c:d9:bc:f2:b5:c9:b5:bb:25:24:7c:e6:14:7e:f3:7c:
f6:97:2e:5f:ed:c6:89:b1:d8:ec:c9:80:9f:4d:3a:13:c1:0f:
06:09:ae:70:c8:8d:b8:d3:3e:33:73:5b:17:96:89:fc:9f:09:
ef:9b:16:79:06:54:35:7b:b7:00:2f:93:dc:e0:15:2f:98:39:
60:e2:9b:c0:61:f4:8d:08:f4:cd:b4:89:8d:ea:18:42:ba:75:
9b:80:57:89:6e:80:b5:9c:a9:d2:21:aa:fe:e0:9b:20:7a:18:
13:09:ab:ad:2b:55:46:c1:98:4f:a2:71:3e:f9:ec:7f:f6:c5:
43:2a:8c:c0:68:c7:8a:89:8e:e6:9a:38:66:83:e4:7e:81:96:
72:e2:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:11 2025 by rpki-client