Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ze-hQeuoxPwob2vYYoJ1CXzjaS8.roa
File: Ze-hQeuoxPwob2vYYoJ1CXzjaS8.roa (raw, json)
Hash identifier: eBTYvHQtix5aEpG9yo1tmqZiqPiJB+wOzPzTLrudwuM=
Subject key identifier: 65:EF:A1:41:EB:A8:C4:FC:28:6F:6B:D8:62:82:75:09:7C:E3:69:2F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC93919ECACC02BC3B9BDFB026349035B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ze-hQeuoxPwob2vYYoJ1CXzjaS8.roa
Signing time: Sun 24 Sep 2023 22:04:37 +0000
ROA not before: Sun 24 Sep 2023 22:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:c938:bfe7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c9:39:19:ec:ac:c0:2b:c3:b9:bd:fb:02:63:49:03:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 22:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65efa141eba8c4fc286f6bd8628275097ce3692f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:cb:4e:48:f7:51:e8:2d:61:44:2d:f2:79:
ec:e2:52:f6:ee:69:20:1f:6d:79:42:3c:c2:a3:ec:
4c:23:54:c1:82:9b:a1:de:48:3b:25:7c:e8:2f:d2:
9d:78:1c:f7:8a:18:94:37:63:0c:b0:55:6e:4f:cf:
08:5f:08:ab:86:1c:f2:35:14:17:1b:60:27:a1:74:
9c:8c:6c:7f:0d:06:ee:6a:0e:15:de:9b:bc:ca:ca:
b3:f7:ac:52:eb:c2:b8:ff:8d:f9:ad:90:03:ed:b6:
14:1d:5f:f8:ca:33:e6:59:d9:15:33:e3:a0:36:70:
03:60:0e:fe:22:3a:bd:bf:0e:f6:8d:14:fc:b9:fa:
a6:fe:c4:1d:cc:c0:2e:50:fc:40:a7:43:60:bb:d8:
67:42:52:ae:8c:de:19:d5:74:a8:02:6c:a8:d3:8a:
f1:4a:f2:ad:38:99:ec:d9:cc:bf:32:2e:3e:b6:fa:
cd:b6:bf:a1:cd:4d:3e:fa:1c:ea:10:c3:e2:87:c5:
7f:66:55:c6:f2:13:2f:2c:91:4d:1d:92:14:dc:9e:
d8:4a:0f:fe:e8:39:7f:bc:14:90:a2:ee:80:80:5e:
25:20:b2:fb:bb:c3:5f:79:5d:0d:5d:bf:39:18:3c:
67:6d:5a:f3:9f:02:51:6a:dd:6e:b0:76:0d:4b:ba:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EF:A1:41:EB:A8:C4:FC:28:6F:6B:D8:62:82:75:09:7C:E3:69:2F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ze-hQeuoxPwob2vYYoJ1CXzjaS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:47:88:ee:51:d0:bf:dd:9f:fe:11:3d:4a:f1:f8:a0:8b:be:
b8:43:3e:6c:be:0e:dc:0a:df:e2:f3:2f:df:3d:21:56:d1:50:
5e:4b:a0:36:d6:ee:a9:05:37:6b:33:3e:4f:43:21:07:20:eb:
6b:0a:98:2f:77:d1:0a:be:7d:ed:2e:70:77:97:2b:69:60:d5:
f6:56:9c:77:a1:29:47:a2:c9:6a:8b:d9:01:70:68:fc:2c:78:
c2:84:3c:be:96:b2:bc:83:79:46:e7:2f:79:a7:62:bb:d5:28:
dc:02:0a:40:f6:65:6e:bd:4e:88:d8:73:ad:8c:36:95:6a:ff:
2a:81:66:59:6d:16:22:52:02:8f:4e:31:be:bc:53:c0:dc:54:
a3:f6:2f:d3:32:4f:98:6f:c5:c9:a6:8f:f7:f4:3d:3b:f7:70:
a5:e4:69:f8:4c:b9:f2:2e:e4:92:36:08:52:26:16:48:08:0f:
f2:e7:61:22:68:29:93:d0:7c:58:a6:8f:cb:8b:76:64:7f:f7:
5a:35:1d:7e:7a:bd:08:70:a8:81:65:5c:60:73:f3:52:ef:b6:
47:ff:69:63:7a:65:0c:6e:1d:23:a4:ba:5b:b0:72:27:23:34:
1e:d2:f6:b8:72:bc:56:9e:80:bc:60:07:b9:79:cb:68:b1:a7:
e4:c5:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:32 2025 by rpki-client