Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZhzpcvwEyhYW-AZWzEDY8Ign-Z4.roa
File: ZhzpcvwEyhYW-AZWzEDY8Ign-Z4.roa (raw, json)
Hash identifier: 1R8vOFQLRu+8/TieDS3rrSnSFwReJA66zZNYwGrUoD0=
Subject key identifier: 66:1C:E9:72:FC:04:CA:16:16:F8:06:56:CC:40:D8:F0:88:27:F9:9E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7290D39C1D89B382181EFCEE464F01B0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZhzpcvwEyhYW-AZWzEDY8Ign-Z4.roa
Signing time: Fri 27 Oct 2023 19:16:15 +0000
ROA not before: Fri 27 Oct 2023 19:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:90:d3:9c:1d:89:b3:82:18:1e:fc:ee:46:4f:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 27 19:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=661ce972fc04ca1616f80656cc40d8f08827f99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:5a:a2:0f:22:d0:07:a3:d4:9f:ce:cd:36:
2f:ca:5e:32:2a:69:e8:58:93:8b:a3:5d:de:b8:29:
05:85:d0:ee:c6:d6:cb:a1:dd:55:5a:e2:52:5a:63:
2c:86:cf:a3:1f:8b:22:b0:26:b9:2a:e9:50:f9:c3:
e0:df:db:33:65:b0:4d:63:24:0f:90:22:34:85:23:
8e:d0:b1:9c:c4:7b:d5:76:f0:42:20:6e:c1:35:b8:
d2:9d:35:39:e6:0f:a6:68:8a:be:34:a6:17:40:a3:
64:c3:a0:e9:68:ea:62:b9:7c:1d:3f:42:0e:c4:e4:
fa:e6:0b:aa:61:f7:d0:f9:0c:a4:a4:0c:80:bd:54:
22:7d:e9:47:7d:d0:c9:1c:0f:8c:ff:63:92:a0:ea:
ea:78:33:e6:ad:17:dd:2b:35:35:d7:b6:87:a9:5b:
6d:e0:1a:70:83:61:3c:b2:56:b2:29:3b:ff:68:9e:
78:09:f0:d8:7f:4f:bd:a4:23:94:a5:cf:66:47:72:
61:fd:26:60:9b:b7:1a:70:5f:8d:7a:94:34:f9:26:
65:de:1a:3e:65:4d:37:14:30:77:6b:63:30:f0:1e:
f2:f3:d2:68:54:12:ea:3d:e7:e7:c9:2f:a3:c6:af:
f7:70:70:06:99:8a:b8:19:08:8c:86:06:74:dc:87:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1C:E9:72:FC:04:CA:16:16:F8:06:56:CC:40:D8:F0:88:27:F9:9E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZhzpcvwEyhYW-AZWzEDY8Ign-Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:91:b5:50:a8:ac:dc:e8:76:26:03:35:db:ba:12:77:44:3d:
19:b1:86:76:03:6c:11:6d:ef:51:ed:1b:f5:ba:32:2e:2d:43:
ba:ae:ed:2b:5f:5f:c0:ea:df:04:d0:b1:5e:d3:a8:16:4b:ac:
61:a1:ba:ef:fb:69:57:f2:4c:a7:13:df:fb:82:f2:04:8f:0c:
e0:57:1d:36:47:0f:53:c7:1c:7c:43:af:36:11:63:86:94:ca:
ba:e9:9f:17:47:2e:4e:d8:c6:43:0c:a6:b5:b1:a0:fa:81:eb:
d3:32:94:32:66:b9:59:d3:7b:20:e5:ba:38:6e:cf:2a:6d:93:
c0:ea:57:34:14:20:9b:09:c5:f1:59:e9:4a:45:c6:d2:3a:57:
ee:64:7c:ae:ba:44:6c:da:09:e2:69:60:03:82:2f:58:af:6e:
f1:f7:a8:74:43:15:5b:fd:88:95:e7:a0:6f:f8:02:bd:88:38:
e5:65:15:45:a9:3e:f6:86:09:27:4e:3b:78:e0:8a:72:62:55:
70:1c:b6:2f:1a:f3:b2:3b:f5:5a:5a:6b:f9:15:52:dc:ef:56:
29:d2:fd:4f:9f:df:d6:e0:31:4f:fe:b5:cd:57:8d:ef:15:55:
66:6b:36:34:58:32:26:69:3f:f4:cd:25:1c:60:ff:e4:65:dd:
b1:49:32:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:35 2025 by rpki-client