Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZPw_hK3eD_1AyVpIOBtYaJ1ZGrs.roa
File: ZPw_hK3eD_1AyVpIOBtYaJ1ZGrs.roa (raw, json)
Hash identifier: qKz8HI35QLR+2yDKsCq0QRcLLjBm7/8WMWuu+Q1lmmw=
Subject key identifier: 64:FC:3F:84:AD:DE:0F:FD:40:C9:5A:48:38:1B:58:68:9D:59:1A:BB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2EF4259AFBA447E5B83C27A97C95F973
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZPw_hK3eD_1AyVpIOBtYaJ1ZGrs.roa
Signing time: Sun 03 Dec 2023 09:13:21 +0000
ROA not before: Sun 03 Dec 2023 09:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2e:f4:25:9a:fb:a4:47:e5:b8:3c:27:a9:7c:95:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 09:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64fc3f84adde0ffd40c95a48381b58689d591abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:90:b0:8f:04:4f:a4:d4:aa:e4:95:a8:c4:
85:b3:b0:0b:96:f5:bf:c7:48:ee:60:66:72:c9:20:
7f:28:f8:d7:bb:a9:84:15:3b:0d:0b:a2:53:d9:cc:
3b:55:f5:1f:7e:0d:ff:7d:59:30:61:f7:99:2f:77:
f0:37:e0:e1:a1:7d:08:b8:21:99:52:88:36:67:ea:
07:8a:59:6d:40:58:c3:d7:5a:7b:66:3e:cc:96:76:
e4:a0:d7:d4:4e:e4:95:0f:68:c2:f6:46:e3:f1:a7:
40:21:ae:c5:ca:e2:2d:9a:01:5c:b5:ec:5a:66:5c:
96:79:2d:89:0b:88:c5:9c:e7:5e:87:94:64:e0:7a:
55:f0:b8:8e:30:02:61:c9:93:15:58:ad:f4:fb:53:
9b:cc:a3:82:c3:54:75:a8:7c:df:e5:c3:2a:16:b6:
78:3b:68:ba:21:23:0e:aa:30:da:50:37:8c:06:5d:
36:2f:e3:26:16:8b:a0:51:8a:d6:b4:e0:ab:d9:87:
5c:7e:dc:a7:a1:79:d5:e9:a3:ed:69:38:e7:78:5b:
0e:43:be:1a:7a:10:75:c1:4d:a8:60:c0:b5:2f:6b:
29:2f:34:03:0e:e4:93:d2:6d:1f:40:2a:c8:76:bd:
ae:35:6d:f9:90:35:94:8f:ed:27:ab:3a:23:d8:5d:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:3F:84:AD:DE:0F:FD:40:C9:5A:48:38:1B:58:68:9D:59:1A:BB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZPw_hK3eD_1AyVpIOBtYaJ1ZGrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:45:fe:50:ee:c8:e0:47:81:09:3b:a3:d9:97:50:ee:18:8f:
69:57:63:79:25:25:85:19:2c:17:4a:40:91:29:64:66:07:6c:
a1:01:c2:f2:30:23:b7:e5:a6:1f:73:03:3f:43:b6:bc:e1:59:
b3:72:2d:cd:1f:43:01:09:6f:4a:46:7f:04:c5:87:2a:12:60:
a1:40:f5:66:0b:2f:00:6e:70:17:18:f4:bb:d7:d1:12:99:8a:
b1:34:cd:ab:8d:bf:cc:45:8d:84:21:79:a3:e4:f2:e8:5e:7d:
e9:50:05:91:47:4a:ba:90:49:0c:83:e0:60:d7:33:12:10:5a:
d5:cb:97:69:01:78:aa:15:d9:4a:bc:4a:d7:7c:a1:ef:8d:36:
88:ef:1b:5f:a1:e9:8d:5b:a3:9d:a4:48:3a:cb:1a:4d:ed:45:
9b:87:32:7c:c1:3d:a7:47:35:d8:e1:83:37:5c:bf:9c:42:d3:
b3:92:a5:22:dd:39:7c:90:9d:39:82:c4:19:07:81:fb:25:ed:
54:d3:f6:13:9f:71:d9:7f:4c:de:5d:a2:1f:39:73:ba:ef:0b:
bb:51:6e:40:16:2d:15:60:8d:08:d1:10:92:f8:e8:57:f0:e2:
f9:1a:e7:09:93:ae:b3:35:7f:45:e3:f0:e6:cc:d8:72:15:c6:
d7:5c:9a:d4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwu9CWa+6RH5bg8J6l8lflzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjAzMDkxMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGZjM2Y4NGFkZGUwZmZkNDBjOTVhNDgzODFiNTg2ODlkNTkxYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TKQsI8ET6TUquSVqMSFs7ALlvW/
x0juYGZyySB/KPjXu6mEFTsNC6JT2cw7VfUffg3/fVkwYfeZL3fwN+DhoX0IuCGZ
Uog2Z+oHilltQFjD11p7Zj7MlnbkoNfUTuSVD2jC9kbj8adAIa7FyuItmgFctexa
ZlyWeS2JC4jFnOdeh5Rk4HpV8LiOMAJhyZMVWK30+1ObzKOCw1R1qHzf5cMqFrZ4
O2i6ISMOqjDaUDeMBl02L+MmFougUYrWtOCr2YdcftynoXnV6aPtaTjneFsOQ74a
ehB1wU2oYMC1L2spLzQDDuST0m0fQCrIdr2uNW35kDWUj+0nqzoj2F27OQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGT8P4St3g/9QMlaSDgbWGidWRq7MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWlB3X2hLM2VEXzFBeVZwSU9CdFlhSjFaR3JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAANF/lDuyOBHgQk7o9mX
UO4Yj2lXY3klJYUZLBdKQJEpZGYHbKEBwvIwI7flph9zAz9DtrzhWbNyLc0fQwEJ
b0pGfwTFhyoSYKFA9WYLLwBucBcY9LvX0RKZirE0zauNv8xFjYQheaPk8uhefelQ
BZFHSrqQSQyD4GDXMxIQWtXLl2kBeKoV2Uq8Std8oe+NNojvG1+h6Y1bo52kSDrL
Gk3tRZuHMnzBPadHNdjhgzdcv5xC07OSpSLdOXyQnTmCxBkHgfsl7VTT9hOfcdl/
TN5doh85c7rvC7tRbkAWLRVgjQjREJL46Ffw4vka5wmTrrM1f0Xj8ObM2HIVxtdc
mtQ=
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:38:19 2025 by rpki-client