Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZpPT1yvD8yieUkjzAvWLgry6qOQ.roa
File: ZpPT1yvD8yieUkjzAvWLgry6qOQ.roa (raw, json)
Hash identifier: 7qBSTrN9xzkbJt65tEaoD6soipZohv/hOzDCLW5ltcc=
Subject key identifier: 66:93:D3:D7:2B:C3:F3:28:9E:52:48:F3:02:F5:8B:82:BC:BA:A8:E4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1C13FE8D537A14B1D606017739ADAD20
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZpPT1yvD8yieUkjzAvWLgry6qOQ.roa
Signing time: Wed 29 Nov 2023 17:15:21 +0000
ROA not before: Wed 29 Nov 2023 17:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:13:fe:8d:53:7a:14:b1:d6:06:01:77:39:ad:ad:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 17:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6693d3d72bc3f3289e5248f302f58b82bcbaa8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:97:fc:22:6b:9b:c3:a9:4a:73:5b:7a:19:
e2:27:47:92:48:1f:91:f6:56:c6:65:4a:42:58:b2:
82:06:e3:cf:54:99:4d:fe:b5:e2:09:e8:cb:56:4f:
c1:41:93:b4:d5:13:18:e6:5e:c2:51:55:23:b9:4c:
ae:33:d0:ca:6d:15:0b:a9:87:35:c9:70:67:b8:20:
69:1a:97:bc:15:25:93:66:1b:02:94:88:e5:4f:91:
dd:bc:60:16:89:11:02:4d:09:8a:60:5b:0a:49:8a:
15:99:9b:8f:ce:27:5b:b6:a1:19:17:d5:d9:fd:57:
7c:44:26:79:10:e7:08:83:b8:3d:c4:b3:1d:cb:77:
32:cc:52:0d:13:d7:85:7c:01:d6:38:74:77:e1:fc:
f8:a2:14:92:fb:d5:8c:22:79:ab:c1:51:b9:ca:38:
49:05:92:86:cb:6d:6b:0a:ff:6c:cb:4a:31:87:05:
57:b1:e8:b7:72:4c:ce:72:09:55:21:4b:ef:b6:c8:
91:b9:44:dc:16:d3:ee:d5:04:c2:e7:d7:2f:3b:18:
eb:51:ec:f0:fd:60:bc:79:dc:53:90:cb:6b:a5:58:
2e:b4:0c:7e:58:df:5f:83:ed:42:e9:23:53:f4:78:
77:37:d5:fa:22:f1:dd:44:45:d0:94:e2:98:d5:0b:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:93:D3:D7:2B:C3:F3:28:9E:52:48:F3:02:F5:8B:82:BC:BA:A8:E4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZpPT1yvD8yieUkjzAvWLgry6qOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:ab:0e:58:fe:c8:db:a8:ec:88:db:02:27:ff:18:8d:10:49:
fe:e0:03:a3:8a:cc:c2:ec:ed:81:7b:b2:81:58:4a:47:ec:73:
39:6b:dd:24:ba:9e:71:a8:67:b6:e2:8b:c8:84:2f:16:3a:40:
c3:6f:04:35:a6:2a:b9:a6:59:58:6f:71:70:cc:fa:6d:0b:16:
1d:35:c8:c3:b5:ec:51:06:58:75:ab:15:9c:10:45:59:23:36:
b5:39:5a:85:1f:52:a2:fd:60:e6:1b:92:58:84:90:f4:05:21:
d0:38:cf:2c:c0:a3:86:88:aa:e7:ec:11:78:e8:3e:11:1c:a3:
28:92:7a:13:2f:59:e6:0f:ff:a6:da:95:45:a3:4b:55:8b:9e:
8e:c6:5c:58:4f:46:5d:c9:a1:d2:b6:f1:3d:e3:40:89:3e:45:
1c:46:b0:0a:bd:ea:b5:b4:5f:45:8f:af:cc:43:74:73:57:2f:
5f:e5:f8:44:3e:82:10:65:91:fe:b6:02:e0:fb:93:e4:18:59:
ac:5f:98:c1:24:c5:f5:ee:0e:da:2c:72:cf:8c:60:3c:e7:8f:
19:d0:49:17:84:d2:89:12:4a:25:9d:bd:a2:1d:06:3e:b8:70:
b2:5f:4a:66:30:76:b7:d1:32:f4:be:fe:3e:af:a0:3e:2a:20:
3b:55:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:54:44 2025 by rpki-client