Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZefdlTSoAYKqVKch5H_5DfwkZoM.roa
File: ZefdlTSoAYKqVKch5H_5DfwkZoM.roa (raw, json)
Hash identifier: PrPBKr0tBMUXXiSvutLANq/mxd+/zwekhAjqj4Jp0rI=
Subject key identifier: 65:E7:DD:95:34:A8:01:82:AA:54:A7:21:E4:7F:F9:0D:FC:24:66:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD7A285FED7A9427290DA4AA71B0D1A80
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZefdlTSoAYKqVKch5H_5DfwkZoM.roa
Signing time: Wed 27 Sep 2023 17:14:27 +0000
ROA not before: Wed 27 Sep 2023 17:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:a2:85:fe:d7:a9:42:72:90:da:4a:a7:1b:0d:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 17:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e7dd9534a80182aa54a721e47ff90dfc246683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:73:10:d8:e7:f9:87:c6:cc:af:15:c3:ca:
b9:5b:5d:03:1a:38:1b:17:1a:f4:7e:96:a3:ee:48:
b9:82:7d:77:6f:5e:85:28:70:5d:00:40:5e:c5:97:
11:b1:f4:6f:59:e9:98:3c:ca:3b:39:e2:46:35:11:
59:eb:51:3b:08:8c:fd:fc:b9:89:b5:ae:d7:13:2e:
e5:9b:af:ad:f9:99:36:ab:2c:ea:fa:2d:76:88:ae:
81:51:32:ce:62:76:6f:08:b5:e4:2c:95:36:4e:66:
e7:24:54:af:b3:f0:96:95:c2:ab:00:df:74:08:20:
cb:20:8f:5e:5b:66:d1:92:42:2b:38:8f:07:0b:fc:
ea:ec:c8:40:b3:57:d2:dd:af:c2:8d:99:0e:2c:bf:
6f:2c:47:04:a2:42:52:3c:00:ce:1a:17:fa:6f:f6:
ab:26:3c:12:71:77:7d:c4:aa:11:46:b8:ee:2c:17:
01:ad:6b:fd:bc:1f:b1:00:10:6c:9e:3b:17:f1:b4:
58:6a:8a:b1:a2:9a:da:1b:64:0d:e7:75:09:1a:68:
19:3c:48:ed:e4:cd:84:91:40:84:fa:fc:c1:2e:b8:
05:47:23:07:75:9f:5c:b6:ef:88:1c:87:d3:11:a9:
ec:17:04:e9:11:8d:c3:d9:4e:43:02:7b:31:a4:1e:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E7:DD:95:34:A8:01:82:AA:54:A7:21:E4:7F:F9:0D:FC:24:66:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZefdlTSoAYKqVKch5H_5DfwkZoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:95:64:6a:74:01:da:3f:e9:54:a3:0e:0e:04:36:60:d6:47:
76:aa:1a:c4:a7:90:c7:c4:26:2d:f9:96:13:23:06:96:3f:42:
12:41:9a:3b:59:d4:d2:30:7b:82:dd:a5:46:72:12:2b:e7:b7:
1d:58:1c:fb:4d:4d:e3:e1:5f:1c:23:fd:a8:67:40:24:c7:2a:
22:4e:c6:b0:51:5f:df:90:38:c3:12:23:a8:eb:5d:58:f5:21:
50:0f:61:c2:f5:df:36:e2:9b:1a:f5:d5:41:13:2c:e2:d1:21:
b9:e5:b5:c6:08:81:64:c2:e3:26:1a:12:9d:af:87:0c:f9:a5:
f3:a2:3e:8c:f6:54:ed:80:6c:e3:5f:d7:c4:0c:bb:37:72:03:
90:71:be:8b:a1:f2:59:f1:12:69:71:97:0a:c5:77:6a:39:6b:
2f:34:70:17:24:13:ff:c7:82:3f:a0:1d:ca:fa:8a:2d:94:9b:
e4:97:dc:c8:57:e1:e2:4e:96:81:bc:d0:06:2f:95:ee:59:3a:
1d:90:05:6d:d4:f9:b1:98:92:94:14:60:ec:9b:00:ad:5d:6c:
f2:e6:98:8d:d2:7c:f6:9f:d3:a2:0e:37:de:31:8d:6a:46:74:
ba:48:e0:d7:ec:ff:8e:21:e6:6c:e9:12:0b:ec:12:d2:62:fb:
b1:97:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:54:40 2025 by rpki-client