Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZboqYDwPzcj5RvJJLXQwMt-ElR4.roa
File: ZboqYDwPzcj5RvJJLXQwMt-ElR4.roa (raw, json)
Hash identifier: Aigh3Qaz0OIqoAHdJbIlTUJTnQfXx7o/7ehVih3wwcs=
Subject key identifier: 65:BA:2A:60:3C:0F:CD:C8:F9:46:F2:49:2D:74:30:32:DF:84:95:1E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C04B1DA75A5A8670903DD2D395B679A44
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZboqYDwPzcj5RvJJLXQwMt-ElR4.roa
Signing time: Sat 25 Nov 2023 04:16:53 +0000
ROA not before: Sat 25 Nov 2023 04:16:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:04:b1:da:75:a5:a8:67:09:03:dd:2d:39:5b:67:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 04:16:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65ba2a603c0fcdc8f946f2492d743032df84951e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:9c:12:0a:d8:28:6a:4e:87:01:49:af:18:
3c:32:fd:8c:1d:f8:f1:22:22:09:39:ea:ca:43:c7:
5d:87:bd:19:74:2a:17:01:ab:e5:82:22:7c:52:b5:
19:63:6d:df:93:d4:5f:ec:fb:38:9b:97:00:4a:e4:
db:d1:26:34:4d:6a:96:e2:1f:c2:e9:a8:f1:07:70:
0e:a1:2d:4e:91:eb:e8:89:08:29:74:12:51:8c:ec:
ff:8c:37:e4:2f:3b:21:b6:c7:51:6f:08:6e:c7:47:
67:21:3e:24:64:b7:50:6b:62:72:fe:c2:cf:63:88:
72:62:78:79:a0:46:36:6a:8a:74:c6:0c:4c:ff:e8:
d4:9e:01:53:13:86:cb:de:b8:24:ca:50:9a:e1:e5:
28:af:61:d9:78:6e:3a:22:0d:30:e9:d1:42:95:47:
ca:d6:d6:9a:ce:ff:a0:56:e7:f9:b5:f9:6e:33:b1:
9a:0c:04:23:c0:e1:10:5b:ce:55:0f:3b:64:93:ad:
b8:2b:3e:9a:aa:5d:02:2d:74:60:ec:7c:38:c8:d5:
f6:e0:d3:d7:01:6c:64:4c:4f:71:bb:3e:62:fc:b3:
27:d9:25:0e:ee:59:a2:20:87:86:9d:e6:64:ac:50:
c7:83:40:f0:8b:12:bd:76:4e:47:79:ec:bf:5c:f2:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BA:2A:60:3C:0F:CD:C8:F9:46:F2:49:2D:74:30:32:DF:84:95:1E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZboqYDwPzcj5RvJJLXQwMt-ElR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:ec:a6:67:8d:fd:74:60:dd:a4:5d:c6:0d:09:d1:bc:f4:a6:
74:fa:9d:61:02:95:d3:34:e3:5d:fe:6c:57:db:74:ea:db:a4:
e2:f7:05:ed:c1:11:1c:db:38:a9:21:69:6a:d8:36:c9:60:65:
2f:74:8e:26:c8:fa:5b:94:e5:5f:aa:c9:c4:84:a7:b6:a8:53:
34:92:6c:57:5e:98:d4:de:3f:00:01:de:77:8e:73:c5:76:80:
bf:cc:c3:72:23:dc:62:57:7f:05:87:db:7e:35:f2:bf:15:65:
71:cb:4f:9a:13:fb:6d:f8:5a:62:d0:ac:72:64:86:3b:d2:92:
27:dd:ed:5a:21:9f:c2:f5:06:09:85:95:d6:e3:c1:ee:10:3e:
40:22:9e:86:5a:40:7c:f3:93:1b:88:0a:9b:fd:1d:e7:ae:99:
71:c1:eb:6a:48:1f:26:dc:49:c3:3a:67:18:02:12:21:db:78:
5e:a1:8c:3c:c9:8e:9a:d6:f1:d1:d4:be:cf:f3:33:af:cb:af:
46:c3:a8:29:54:d0:a2:00:94:fc:bb:b3:a4:1c:a9:d0:d9:67:
c9:d4:92:98:aa:94:5f:f4:d9:7a:30:74:80:aa:43:47:84:04:
eb:e5:fa:c6:6d:6f:b0:bc:b8:93:98:5b:09:5f:43:77:fb:67:
db:f9:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:28 2025 by rpki-client