Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Zg-dlkuKSsE-OlMjJ4RdivN1xsg.roa
File: Zg-dlkuKSsE-OlMjJ4RdivN1xsg.roa (raw, json)
Hash identifier: w4PKck/QJuJpnSCD8EiHdsoOfMJHdT5olfhjN1uqYPo=
Subject key identifier: 66:0F:9D:96:4B:8A:4A:C1:3E:3A:53:23:27:84:5D:8A:F3:75:C6:C8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C22152A153BB06555B886EF40C88A9AAF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Zg-dlkuKSsE-OlMjJ4RdivN1xsg.roa
Signing time: Thu 30 Nov 2023 21:14:21 +0000
ROA not before: Thu 30 Nov 2023 21:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:22:15:2a:15:3b:b0:65:55:b8:86:ef:40:c8:8a:9a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 21:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660f9d964b8a4ac13e3a532327845d8af375c6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:70:9f:c8:7b:e0:3b:4e:08:3c:cf:49:ac:
8d:89:c8:58:7d:4c:52:73:08:b4:58:2b:7a:c6:1f:
40:a0:82:23:e5:fb:86:e4:ee:d0:f8:0c:2e:0b:96:
c7:58:bd:a1:a1:47:64:17:50:98:e8:44:77:1b:d8:
70:b6:ee:ac:e7:af:3d:55:da:84:4a:53:f1:de:c9:
ad:0f:42:6c:bc:42:6b:13:c6:ed:86:2f:8f:c3:00:
81:f0:73:cc:c8:5c:ff:a3:b0:a8:10:a0:c0:74:31:
8b:c2:cb:aa:d4:50:3e:0f:7b:d6:d2:83:54:95:3d:
30:c6:7d:98:07:c0:c3:b9:5f:8e:a4:a0:0e:6b:76:
b4:98:23:d7:91:0f:60:13:1d:62:aa:28:48:ff:43:
be:15:70:0e:4e:32:e5:3f:51:05:d0:67:87:d4:80:
af:d0:ee:05:be:8c:fa:bb:f1:d1:0e:db:03:79:d8:
3a:80:07:4c:71:f1:bb:39:cf:1a:b6:87:d5:44:8d:
d1:27:a4:ba:74:f9:32:ba:9d:a4:43:ad:90:20:5b:
d6:90:91:56:07:95:48:cc:63:ee:01:ac:0e:c3:02:
ab:a0:da:77:58:d3:99:cd:03:37:1e:03:26:1a:9f:
76:91:ef:09:e9:99:0c:53:46:64:a2:c6:3a:93:9e:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:9D:96:4B:8A:4A:C1:3E:3A:53:23:27:84:5D:8A:F3:75:C6:C8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Zg-dlkuKSsE-OlMjJ4RdivN1xsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ca:2c:16:e2:09:f8:48:80:cc:e5:8a:6c:29:91:8a:02:4e:3a:
92:e1:df:3b:83:21:61:1f:85:15:e2:64:77:fd:30:31:5a:86:
61:47:e0:93:81:90:c1:f1:b2:80:2b:f7:e0:89:3e:76:4d:28:
ac:b7:9c:96:b2:06:6c:cb:a1:48:b3:93:77:3b:fd:8e:d9:ea:
d6:cf:1c:72:df:99:4b:f7:ca:ca:80:7e:e0:1a:07:10:f8:70:
a3:c3:22:c9:13:b0:03:7a:09:d5:b7:5c:fc:41:c4:f7:96:0f:
d4:1b:f9:58:2c:f4:49:da:12:60:99:9c:c0:71:7e:00:5b:26:
f2:d3:8d:61:09:c9:5c:f2:e9:ed:5a:a2:90:57:1a:8a:b5:3b:
44:17:0d:a5:5d:92:7e:31:e6:2f:8d:67:28:19:24:e9:07:8e:
41:db:e9:5f:f4:f2:0b:70:b0:c5:75:4d:cf:d8:4e:1c:cb:0f:
eb:c7:d5:f5:6d:5e:03:95:b6:71:79:57:b0:c4:85:d1:4e:6f:
d3:96:e6:20:f5:bc:90:dd:3d:77:8c:17:75:48:e7:6b:13:28:
1f:05:82:dc:84:07:26:fe:e5:96:59:a5:33:74:0a:f5:9d:2f:
46:07:53:4b:5c:b2:f5:53:f8:72:90:7b:01:03:8b:a6:5f:d3:
d4:31:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:21:30 2025 by rpki-client