Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZQ-YJ_Jq_NRH0vHnM54D3sMj3E0.roa
File: ZQ-YJ_Jq_NRH0vHnM54D3sMj3E0.roa (raw, json)
Hash identifier: Yt2dJjt9kzHXnc4AI9EGSc73/5EfIAeKZKaOTd27Jn4=
Subject key identifier: 65:0F:98:27:F2:6A:FC:D4:47:D2:F1:E7:33:9E:03:DE:C3:23:DC:4D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6086F3B69913C42A9C5B02774DC8DEAD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZQ-YJ_Jq_NRH0vHnM54D3sMj3E0.roa
Signing time: Wed 13 Dec 2023 00:15:06 +0000
ROA not before: Wed 13 Dec 2023 00:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:60:86:f3:b6:99:13:c4:2a:9c:5b:02:77:4d:c8:de:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 00:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=650f9827f26afcd447d2f1e7339e03dec323dc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:7a:69:f6:f6:51:0f:ca:2e:c9:3e:08:e8:
5f:73:59:47:d2:04:c8:29:9a:3c:a9:3d:63:ee:0f:
cc:93:dc:a0:a8:54:b1:3a:0b:94:de:7c:d4:88:34:
c9:d8:02:40:43:db:9c:18:6a:6d:bf:c5:58:df:40:
91:a9:1f:e8:5a:46:62:32:9e:98:6b:2c:a7:7d:92:
37:f6:dd:a5:13:9c:1f:77:ff:ea:f1:7c:2d:03:92:
dd:af:d9:35:6c:9a:14:e0:65:ce:9f:bb:57:ed:d1:
0b:58:bf:fe:3f:98:64:45:34:58:e0:c1:29:13:ea:
47:35:db:b2:d8:5f:c1:f7:bf:b1:88:ac:18:66:5b:
7e:be:fa:4d:65:ca:d4:67:63:c0:29:53:9c:50:c5:
5a:98:dd:7e:e4:af:77:c8:3a:d2:ef:de:2f:5e:e7:
72:92:ae:a8:11:38:2a:bf:fc:e0:0a:18:7b:22:62:
5a:67:c7:b2:25:08:69:ca:12:24:c8:d2:c7:c3:40:
e1:0f:ce:26:27:17:73:5e:26:ac:ed:5f:61:6c:86:
cc:02:ad:67:f6:61:60:d5:20:8b:91:23:56:70:02:
ae:c4:a8:6f:6c:4a:cd:7b:cc:50:dd:b5:e1:5d:ee:
60:d3:4b:3a:80:0c:d6:84:f5:20:a4:bb:8f:e3:a2:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0F:98:27:F2:6A:FC:D4:47:D2:F1:E7:33:9E:03:DE:C3:23:DC:4D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZQ-YJ_Jq_NRH0vHnM54D3sMj3E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:f7:83:ef:1b:e3:d7:f4:5c:3b:aa:02:07:06:ca:b7:8e:6b:
11:71:87:ac:92:90:61:7a:c2:be:b2:e1:6d:0b:47:14:8d:6b:
b3:e5:23:fe:41:d3:c2:b8:44:80:b0:46:8b:7a:42:f3:98:04:
cb:18:ea:e5:58:23:14:4c:a2:f4:04:24:9c:40:49:ec:2d:16:
c6:8c:4b:58:53:c6:94:28:31:71:00:c1:8e:ad:83:12:e0:1d:
08:26:c3:29:97:67:44:ca:1d:ba:d7:f9:fe:89:86:e3:c9:eb:
19:90:e5:7b:b1:cc:04:4a:25:1d:f3:5d:4a:ba:74:14:f1:1f:
7f:d1:b6:2d:c9:88:1a:6a:22:4c:94:fd:33:27:08:68:c8:84:
92:9e:09:4d:3c:cb:a5:5b:64:73:d1:86:9a:7c:6b:93:e5:c8:
1b:04:b5:8c:58:46:45:ce:2d:ea:9a:5e:ba:f6:ff:75:0c:25:
4a:9f:91:64:b9:ba:5d:25:2e:68:a5:4d:db:6a:c2:01:36:99:
db:c5:81:67:e4:e0:3f:26:10:1f:22:b3:00:7c:99:ab:b5:fe:
81:34:8c:34:4d:9a:b8:51:8a:0f:50:ca:a2:d2:08:9b:42:7f:
d4:0e:fb:58:d1:99:90:6c:92:62:3b:92:07:d4:cc:0a:08:8b:
b3:8e:c0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:19 2025 by rpki-client