Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZMyE8s04uEY_NoaHphQYQQIya6M.roa
File: ZMyE8s04uEY_NoaHphQYQQIya6M.roa (raw, json)
Hash identifier: kpqRgzGm+pJnzkhyhBDTKu+Pxxhn8ZFGo8rjPPA4XRY=
Subject key identifier: 64:CC:84:F2:CD:38:B8:46:3F:36:86:87:A6:14:18:41:02:32:6B:A3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0409D1F5F4436C625A5A297EC4BF14C2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZMyE8s04uEY_NoaHphQYQQIya6M.roa
Signing time: Sat 25 Nov 2023 01:13:21 +0000
ROA not before: Sat 25 Nov 2023 01:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:04:09:d1:f5:f4:43:6c:62:5a:5a:29:7e:c4:bf:14:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 01:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64cc84f2cd38b8463f368687a614184102326ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:d2:26:cb:93:53:b6:6a:54:b7:63:7b:df:
b5:8a:5c:be:2c:e1:4d:8f:3b:fa:4a:df:98:8e:28:
7b:72:47:ad:e0:26:76:2e:ff:7b:3f:d6:69:1d:0e:
16:c8:65:ba:33:00:21:6f:f7:e5:3e:99:6a:f3:5a:
5a:f3:e2:27:c9:57:cc:a6:22:d5:c2:cc:53:27:84:
b0:28:86:b4:5e:f5:7b:1b:c0:61:6c:6f:8f:10:8f:
f3:a9:9c:ac:97:ec:15:28:08:53:0f:30:cb:ee:42:
f5:35:8f:7a:85:53:c6:24:ed:f3:b9:76:23:71:0e:
1b:70:b6:62:ab:be:0d:ea:05:87:2a:6a:1f:fc:e4:
a5:d5:7e:e9:3d:2d:44:a6:8f:6e:16:02:42:db:9a:
fe:29:39:4a:fa:62:43:58:bb:87:27:3b:9f:2a:91:
9f:79:df:fc:09:fb:48:6d:05:55:21:39:67:b0:fa:
41:ef:00:de:37:f5:b8:f4:00:c6:16:1d:7d:db:cb:
68:26:b4:a9:f0:b0:72:91:34:03:68:d3:42:43:ee:
fb:98:f6:b9:71:77:21:4a:04:b5:a6:7b:16:ab:b9:
a0:d7:11:41:d2:2d:79:c1:27:7f:1f:a6:3d:3d:d1:
0b:c3:16:91:4a:d6:68:29:4f:de:4b:b2:fc:ca:e8:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:84:F2:CD:38:B8:46:3F:36:86:87:A6:14:18:41:02:32:6B:A3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZMyE8s04uEY_NoaHphQYQQIya6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:7b:7a:d9:84:2b:92:37:cd:e3:92:6d:80:d2:1e:e5:b8:8e:
83:dd:c2:77:55:bd:24:e2:8a:6b:e2:02:db:30:9b:e5:4b:7f:
be:c6:73:5b:1e:6d:10:37:b6:76:d2:f9:ea:f8:ad:84:30:1d:
2f:22:3e:3a:6c:00:be:7c:f5:a5:89:58:1d:4b:9d:8d:cf:8b:
c2:f4:67:3a:f7:40:6c:55:ac:4e:3b:b8:ab:ca:37:70:cd:0a:
99:23:a9:67:08:d4:a1:02:6d:9f:c5:23:5c:f6:f2:70:52:b7:
45:79:98:64:ce:50:c4:40:61:d0:b0:3f:82:9d:6e:78:a1:73:
b3:8a:30:29:33:0a:27:c8:77:9a:0d:46:7a:30:06:22:35:9d:
20:05:4d:80:6a:c6:f9:da:9e:72:d8:11:84:01:42:d1:0a:dc:
56:48:62:55:75:c5:3f:3a:fe:65:08:5b:4f:5c:d8:aa:23:ff:
0b:51:e3:74:8a:9d:48:89:ce:d7:6f:ad:2d:68:70:11:5d:a6:
09:43:88:74:c9:e1:7a:c6:1d:e9:50:af:2b:bf:c1:29:08:ee:
51:1b:6d:e7:d7:de:68:da:41:0e:8d:e7:83:2e:2e:5a:d5:2e:
b0:99:39:32:8d:b9:9d:e8:e5:c2:32:e2:25:74:6e:9b:36:83:
1b:48:8d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:34 2025 by rpki-client