Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZSVF8IZF-AErwKLxT-H0uI243YA.roa
File: ZSVF8IZF-AErwKLxT-H0uI243YA.roa (raw, json)
Hash identifier: fZF21nJp3x4oL0hMGOFcUPOROUyQ/8DxFxQ3Cdk/bbo=
Subject key identifier: 65:25:45:F0:86:45:F8:01:2B:C0:A2:F1:4F:E1:F4:B8:8D:B8:DD:80
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C83EDEAE89A145490CB650F864F42C566
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZSVF8IZF-AErwKLxT-H0uI243YA.roa
Signing time: Tue 19 Dec 2023 21:14:16 +0000
ROA not before: Tue 19 Dec 2023 21:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:ed:ea:e8:9a:14:54:90:cb:65:0f:86:4f:42:c5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 21:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=652545f08645f8012bc0a2f14fe1f4b88db8dd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:24:56:c2:26:86:7c:a3:9f:89:00:65:04:ed:
25:17:e1:23:95:80:42:e6:2c:cc:78:6d:9f:e8:d4:
30:91:3b:f1:7e:cd:82:c3:a0:bf:43:c7:47:f6:aa:
b3:37:5b:1b:56:d5:56:37:61:bb:27:f8:65:ad:8f:
e9:6e:91:97:3e:e2:4d:c6:04:d9:95:e0:02:ec:57:
f0:29:c9:f6:41:ff:8e:33:a5:f3:97:88:d8:69:ff:
74:ff:89:6f:24:33:09:57:28:2c:ed:66:16:e9:b9:
42:56:68:ba:d1:d6:d7:d4:f2:cc:e4:e4:6d:77:17:
ea:5d:14:66:b7:8c:84:f0:22:4e:91:a8:29:73:d9:
b7:af:0b:1c:a2:f1:d2:ea:f0:04:2d:09:37:ac:2c:
89:98:63:88:74:de:b1:19:1f:60:c5:0a:81:0b:d9:
79:9b:b3:93:77:9a:38:c9:7d:5a:55:5d:12:e6:34:
d7:fc:67:b2:57:80:c7:7f:d2:3a:3f:ef:3c:7b:bc:
ef:db:e4:c4:14:0f:6a:5e:49:32:d7:dd:ac:f3:c0:
ce:9a:04:4f:c9:20:5e:e0:4a:83:8c:01:0b:12:f7:
fa:34:0d:2a:e6:81:e9:c0:8b:e7:90:4e:d2:f2:f4:
e0:54:a7:fd:27:34:ba:de:dc:23:9c:c9:29:ee:a8:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:45:F0:86:45:F8:01:2B:C0:A2:F1:4F:E1:F4:B8:8D:B8:DD:80
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZSVF8IZF-AErwKLxT-H0uI243YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:46:2a:51:53:6b:60:1a:f3:3a:62:ec:ad:7c:6f:7c:df:ae:
2d:67:8e:68:ea:29:f4:7b:0d:87:ed:18:ad:cb:bb:5f:b0:2c:
26:32:79:49:58:1c:b5:cf:f9:77:af:bf:b6:70:f4:91:24:60:
a4:fb:fc:a4:60:0b:a6:b3:9e:e8:ad:74:c0:9d:ed:09:91:37:
a5:e6:30:0a:e4:fe:e5:c1:7a:8e:03:59:29:3f:38:96:1d:77:
af:f0:c2:5f:93:41:8a:b4:66:70:75:a5:e7:ad:d6:eb:22:0b:
00:f6:86:e5:4f:a6:16:48:fd:26:3c:10:e7:6a:65:21:9c:19:
96:e2:00:14:00:6d:67:18:4d:15:6c:ba:94:4c:d5:1e:ee:46:
d2:78:d0:ee:fd:93:fb:04:20:27:70:cd:95:5b:f9:e2:99:52:
eb:1b:38:9e:d8:f4:bf:8e:d8:b7:81:da:e9:a7:b6:10:0d:cf:
d1:ce:82:fc:f3:ff:a3:f2:a2:4a:36:8a:79:96:0f:a5:e0:5d:
1e:f0:0a:e7:c0:a6:35:ba:8a:77:a4:aa:11:0b:c3:a5:b4:6d:
8c:eb:a2:6b:c1:5e:a3:41:bf:c0:23:8d:d2:17:18:53:04:c2:
84:54:51:24:25:27:7f:c8:68:35:08:a6:7a:46:d2:23:7c:e5:
6a:8d:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:52 2025 by rpki-client