Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZXNPL6bwGp09NMt5iEp5pjBHZqE.roa
File: ZXNPL6bwGp09NMt5iEp5pjBHZqE.roa (raw, json)
Hash identifier: dKbqzkx0qsHieZx1K1XqgDj1FJwJSyPrnmJyxMbUG8w=
Subject key identifier: 65:73:4F:2F:A6:F0:1A:9D:3D:34:CB:79:88:4A:79:A6:30:47:66:A1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B10B6980DCF2296ADDD765BCAE99B192D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZXNPL6bwGp09NMt5iEp5pjBHZqE.roa
Signing time: Sun 08 Oct 2023 19:14:43 +0000
ROA not before: Sun 08 Oct 2023 19:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:b6:98:0d:cf:22:96:ad:dd:76:5b:ca:e9:9b:19:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 19:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65734f2fa6f01a9d3d34cb79884a79a6304766a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c2:df:ce:f4:4a:80:2f:4f:40:08:0e:8b:39:
e0:40:89:b2:5e:2d:e4:cb:1f:ed:54:c8:37:d7:e2:
1d:21:97:7f:31:cb:cb:23:50:ac:57:c7:00:9b:fa:
47:7a:4a:22:70:e6:0d:72:2d:f8:e3:d0:90:d6:4b:
b7:5e:a5:ee:4f:f5:80:90:25:04:b5:8e:a6:e5:c7:
0b:f0:13:b1:cb:95:fa:e7:9d:9e:8d:10:45:d6:a2:
2b:09:af:5a:e3:1e:cd:61:10:5c:cc:3b:3a:8c:91:
9d:4a:99:d8:80:cf:ae:01:66:16:59:f7:ab:a6:93:
f4:96:94:83:11:fc:9c:82:d6:a0:98:d5:54:7e:de:
a1:11:9d:65:d8:3e:c4:c1:7a:0a:43:de:65:90:87:
78:94:1c:f6:e9:aa:af:09:c9:6e:06:61:31:25:10:
4d:ba:13:28:f5:c5:ac:ba:f0:74:70:25:d7:59:42:
6e:9f:20:59:00:45:10:bb:c6:64:86:15:f4:4d:b4:
0c:70:b9:1b:c2:ef:1f:9d:ee:ca:73:07:83:3f:44:
f0:fd:9e:2b:52:12:22:10:12:b2:02:a9:a2:25:e2:
5c:c3:f1:33:46:ca:3f:22:e9:e1:18:79:5a:9a:9f:
e6:11:8e:8f:d1:6c:44:7a:2c:58:9d:eb:28:69:d9:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:73:4F:2F:A6:F0:1A:9D:3D:34:CB:79:88:4A:79:A6:30:47:66:A1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZXNPL6bwGp09NMt5iEp5pjBHZqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ca:8a:dd:a1:f3:52:d3:33:dd:1b:58:d7:e1:06:0e:04:af:44:
d9:b1:d7:e2:12:c3:5a:d6:dd:c2:7e:8e:9f:d1:34:1f:7f:c0:
62:a8:0e:52:3b:1e:c8:2f:51:4c:25:ed:97:da:89:18:48:d8:
71:9c:49:c2:ca:98:5a:42:0b:36:71:2f:2b:02:4c:7b:90:8e:
65:f0:9d:3e:8e:e1:72:8a:9a:41:2d:17:69:80:25:0c:25:46:
25:a6:40:a6:ff:de:72:60:d9:bb:d3:f1:63:f0:d0:7c:7c:8e:
b7:00:1c:16:32:b8:a0:d0:c2:e7:14:1a:79:70:63:dc:c0:e7:
0f:e7:a8:f3:41:bd:8a:ad:b8:5a:fd:75:22:f9:50:14:16:28:
9f:82:ea:65:2f:0a:c1:b0:29:ba:dd:78:f9:16:32:be:f1:fd:
ad:b9:12:0f:df:1e:1d:6e:c0:9c:0e:88:04:4f:1c:4a:7b:9c:
5f:ae:93:e3:4b:47:a0:9f:ff:59:57:1f:88:4f:64:c6:5f:05:
ef:d9:33:b9:11:f9:cb:84:b1:03:a8:49:6a:72:78:e1:26:cc:
42:44:81:80:bd:ba:30:de:e1:8d:cb:e8:88:06:1b:01:4e:a7:
bd:64:54:f6:5c:82:90:3a:68:7c:78:2b:42:81:17:dc:4b:a6:
bc:a1:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:21:09 2025 by rpki-client