Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d9zs_tarz7_cAe_-w7RIu_p7BKI.roa
File: d9zs_tarz7_cAe_-w7RIu_p7BKI.roa (raw, json)
Hash identifier: D6wAX54bC8zOSAofeCmDxmCjciTL+qDFscIpNpgwY3g=
Subject key identifier: 77:DC:EC:FE:D6:AB:CF:BF:DC:01:EF:FE:C3:B4:48:BB:FA:7B:04:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1CEECE4927FFC86C7D43BE4099C56ADF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d9zs_tarz7_cAe_-w7RIu_p7BKI.roa
Signing time: Wed 29 Nov 2023 21:14:21 +0000
ROA not before: Wed 29 Nov 2023 21:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:ee:ce:49:27:ff:c8:6c:7d:43:be:40:99:c5:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 21:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77dcecfed6abcfbfdc01effec3b448bbfa7b04a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:c4:cb:b8:2a:12:c3:d7:42:1c:5f:ad:9d:
69:c8:aa:61:84:27:77:25:80:16:3d:e7:93:af:35:
da:86:bb:81:d6:a0:ad:f8:a4:da:e2:10:fa:f7:74:
f2:f6:0f:46:fe:53:71:60:1e:0f:8b:9e:27:3a:d6:
94:18:6c:3d:be:0f:ad:6b:8f:11:bb:7c:b5:f5:6d:
dd:21:21:9d:de:d7:43:4a:2b:c5:1b:d7:57:e3:4a:
77:56:37:ac:14:c0:bf:53:06:4b:e1:f7:f9:e2:4c:
43:71:a3:12:8c:d6:53:69:ca:24:36:d6:5f:f2:0f:
59:6c:aa:6d:4b:d2:81:df:5f:d7:b3:b2:65:99:ae:
c8:cb:e2:97:29:a0:1d:cf:b3:2c:b7:1a:a3:bd:99:
e3:aa:f3:de:7e:15:75:bb:6f:8e:89:7b:80:6e:34:
8d:2f:14:13:e9:53:e6:73:22:20:0e:33:e8:03:78:
1b:d5:99:04:ac:fb:6b:eb:31:9b:bb:ea:85:49:9a:
b8:d7:c4:ed:b9:6d:d3:2d:b2:c8:77:7f:a1:dc:52:
0b:46:1a:d1:d5:6f:f6:e9:33:1d:36:a3:85:a5:c2:
a2:30:c0:78:c7:8f:53:ad:0d:88:f6:90:2e:32:74:
f1:89:ab:2c:63:6a:29:85:2c:37:d8:5f:e3:ca:00:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:EC:FE:D6:AB:CF:BF:DC:01:EF:FE:C3:B4:48:BB:FA:7B:04:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/d9zs_tarz7_cAe_-w7RIu_p7BKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:4a:64:f5:d7:e2:c9:84:e8:19:37:34:d1:a3:25:63:3c:99:
aa:5c:93:bb:43:10:0f:50:d1:45:8d:7d:23:8d:12:be:bc:56:
6a:15:91:d6:93:10:a2:93:1d:d9:95:1f:ce:4c:8c:07:29:50:
2c:c6:a5:4b:9a:02:f4:b8:66:80:6d:a8:99:ff:3e:4c:0c:b6:
ba:7c:ab:10:92:da:09:61:9e:47:68:55:03:72:34:79:e3:51:
d2:9b:68:4b:55:6b:fb:e3:c2:ac:0c:1c:65:2b:df:ac:49:d4:
44:a5:8b:35:17:ac:6f:2e:32:51:85:d7:c0:0b:e9:ad:e9:1b:
3a:07:13:ea:47:53:59:7e:5a:7b:03:e8:b3:71:27:51:25:b3:
26:07:27:89:a5:28:6d:b5:67:9c:b6:74:1a:c5:df:52:72:96:
17:c9:08:5f:f8:d8:7c:c8:4c:9e:96:79:b4:33:b9:98:1b:38:
2b:22:84:6b:f0:17:c7:49:f0:b2:f1:ab:25:e3:9d:07:94:29:
4e:e8:94:3f:8b:b2:a2:29:83:d4:43:34:90:87:46:b6:c5:6a:
a6:2d:cd:e6:dc:43:6f:1b:db:d6:c3:08:5c:e8:bc:b1:6f:03:
c7:b3:a9:e2:df:c2:3f:63:dd:ca:4a:da:3c:b4:ab:2b:34:31:
87:e8:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:46 2025 by rpki-client