Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZbHIjBd4E02RSB-I67zHg_FZzIc.roa
File: ZbHIjBd4E02RSB-I67zHg_FZzIc.roa (raw, json)
Hash identifier: 2ALEj/fedaeVkrU82XybDYUeLXzFKE3ng2ofeFYQIr0=
Subject key identifier: 65:B1:C8:8C:17:78:13:4D:91:48:1F:88:EB:BC:C7:83:F1:59:CC:87
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C50A1F63DF4A8B42CD915E981011DFCF8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZbHIjBd4E02RSB-I67zHg_FZzIc.roa
Signing time: Sat 09 Dec 2023 22:10:40 +0000
ROA not before: Sat 09 Dec 2023 22:10:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:50:a1:f6:3d:f4:a8:b4:2c:d9:15:e9:81:01:1d:fc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 22:10:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b1c88c1778134d91481f88ebbcc783f159cc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:e9:36:f5:e3:10:98:ca:35:cd:1a:87:51:
d8:44:39:34:6b:ea:34:93:db:68:7d:86:14:c7:e0:
bc:de:ac:89:90:7a:a7:17:ca:bb:b9:08:34:e8:ee:
6a:0d:38:98:c0:dd:28:82:7d:6c:84:b8:44:7a:43:
6b:ed:eb:e1:5f:e6:af:3e:7e:bc:50:46:3e:87:4d:
8d:86:20:b9:e1:d2:a9:1a:bf:3e:97:5a:67:48:cb:
18:2f:6e:ab:a7:25:db:22:0f:7a:26:5d:d2:81:d5:
16:db:32:7a:97:2f:55:52:a2:76:b9:54:44:f3:06:
b7:58:53:7a:ff:55:b1:e7:84:45:f2:f6:6b:4b:1f:
ea:e3:f9:15:94:be:2a:43:a2:5d:8b:67:19:af:67:
a2:5f:8a:98:17:5f:5c:c6:2f:42:12:ac:7d:04:91:
43:3e:d5:b0:c2:3b:c5:2f:f2:21:0f:17:ba:9b:b0:
e3:2b:7b:c4:0c:2c:91:9a:68:c3:86:a4:d6:5a:22:
d4:70:f9:e2:c3:d4:1b:04:25:12:bb:ad:74:e6:c1:
7d:d8:79:28:50:b8:74:72:c8:e4:d6:5c:ad:40:58:
22:a7:fd:c0:ec:f1:cc:05:01:40:be:e4:ff:41:07:
e8:f8:ef:b0:8d:24:e6:e2:03:da:48:dc:c9:ce:b7:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B1:C8:8C:17:78:13:4D:91:48:1F:88:EB:BC:C7:83:F1:59:CC:87
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZbHIjBd4E02RSB-I67zHg_FZzIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:e6:6b:94:b5:82:17:c4:d0:63:5e:38:ab:2d:e9:2b:de:d1:
62:f4:39:b7:a3:e4:a6:52:74:ef:9f:52:af:71:91:d3:bf:d3:
89:4f:84:e4:14:92:8e:46:e8:ed:f4:6c:b3:bc:38:94:e3:02:
58:fb:39:1a:4e:5d:fe:b9:de:ce:f7:e4:c1:69:fc:94:76:f0:
42:12:10:fc:39:a6:f1:6b:f7:04:96:23:fb:19:92:67:9f:e1:
dd:ca:86:1d:e3:73:8b:4e:cf:4b:cd:a9:bd:ba:51:72:7d:2f:
e7:37:ed:7b:2e:c8:43:50:c7:a1:36:7d:d9:16:2c:f2:f3:3e:
cb:92:89:ac:fa:73:49:28:2b:99:f9:ae:88:3f:fa:35:da:fd:
5e:4d:57:ed:25:bb:aa:a2:12:b7:f7:74:fd:ca:0b:58:f7:5b:
c9:54:dd:e0:dc:f9:18:c9:74:4e:66:e0:77:38:da:59:db:af:
99:2e:fc:b6:33:03:ca:73:02:6d:c2:60:e5:47:d9:2b:e3:78:
22:c1:15:59:f6:88:05:62:81:c8:31:c3:7f:b8:16:b0:1c:6c:
1c:84:69:1f:1b:62:27:a9:b0:2b:63:27:02:06:8a:19:5a:35:
e1:3a:f5:8e:e6:10:62:88:c4:f8:86:78:bf:8d:1a:f1:6c:59:
d3:6c:d3:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxQofY99Ki0LNkV6YEBHfz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA5MjIxMDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWIxYzg4YzE3NzgxMzRkOTE0ODFmODhlYmJjYzc4M2YxNTljYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/TpNvXjEJjKNc0ah1HYRDk0a+o0
k9tofYYUx+C83qyJkHqnF8q7uQg06O5qDTiYwN0ogn1shLhEekNr7evhX+avPn68
UEY+h02NhiC54dKpGr8+l1pnSMsYL26rpyXbIg96Jl3SgdUW2zJ6ly9VUqJ2uVRE
8wa3WFN6/1Wx54RF8vZrSx/q4/kVlL4qQ6Jdi2cZr2eiX4qYF19cxi9CEqx9BJFD
PtWwwjvFL/IhDxe6m7DjK3vEDCyRmmjDhqTWWiLUcPniw9QbBCUSu6105sF92Hko
ULh0csjk1lytQFgip/3A7PHMBQFAvuT/QQfo+O+wjSTm4gPaSNzJzreetwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGWxyIwXeBNNkUgfiOu8x4PxWcyHMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvWmJISWpCZDRFMDJSU0ItSTY3ekhnX0ZaekljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEPma5S1ghfE0GNeOKst
6Sve0WL0Obej5KZSdO+fUq9xkdO/04lPhOQUko5G6O30bLO8OJTjAlj7ORpOXf65
3s735MFp/JR28EISEPw5pvFr9wSWI/sZkmef4d3Khh3jc4tOz0vNqb26UXJ9L+c3
7XsuyENQx6E2fdkWLPLzPsuSiaz6c0koK5n5rog/+jXa/V5NV+0lu6qiErf3dP3K
C1j3W8lU3eDc+RjJdE5m4Hc42lnbr5ku/LYzA8pzAm3CYOVH2SvjeCLBFVn2iAVi
gcgxw3+4FrAcbByEaR8bYiepsCtjJwIGihlaNeE69Y7mEGKIxPiGeL+NGvFsWdNs
05g=
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:48:55 2025 by rpki-client