Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zAsXMWLuM8tQnor-WVzryphrl8E.roa
File: zAsXMWLuM8tQnor-WVzryphrl8E.roa (raw, json)
Hash identifier: hN4QvuWXWD5Vty01jCrUmTpjcEOQGtE6yO8unrrbVAY=
Subject key identifier: CC:0B:17:31:62:EE:33:CB:50:9E:8A:FE:59:5C:EB:CA:98:6B:97:C1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3B3627B25746B686CD4E4111668C2C4B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zAsXMWLuM8tQnor-WVzryphrl8E.roa
Signing time: Tue 17 Oct 2023 01:18:06 +0000
ROA not before: Tue 17 Oct 2023 01:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3b:36:27:b2:57:46:b6:86:cd:4e:41:11:66:8c:2c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 01:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc0b173162ee33cb509e8afe595cebca986b97c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:6e:d6:13:fc:ec:11:d9:2a:76:fc:85:7a:
2d:93:41:07:f7:27:dc:f7:ea:77:04:2e:19:41:41:
f4:f8:6d:67:c6:dd:1e:08:6d:00:17:91:df:32:76:
72:2a:a4:18:0e:55:55:b4:da:b8:75:86:07:7b:71:
64:d8:bb:95:05:cc:44:ea:4d:07:8c:86:33:52:62:
ee:15:17:0c:0c:73:5d:79:88:34:e6:4f:de:e5:a5:
22:ae:4a:cc:30:dd:aa:48:61:16:b6:c3:f6:b9:97:
89:38:23:ab:13:d0:87:2f:f6:e9:90:be:bb:f7:d8:
57:43:65:92:87:6b:e5:c8:86:b6:27:b6:ef:40:83:
c5:81:c6:e8:5e:fd:ea:8f:6e:0b:ad:d9:52:22:93:
23:7e:4f:12:5f:da:c0:0a:8e:3e:22:53:a8:13:fd:
41:4f:4b:31:c3:2b:17:db:59:51:87:d0:90:d2:10:
3c:05:8a:40:e2:ed:11:5f:3e:e3:e5:f6:2e:5f:c9:
ff:2e:34:02:4a:81:a5:91:9a:eb:d3:06:eb:dd:94:
9b:49:5c:20:3b:03:07:a5:2b:43:39:ff:1c:7d:d0:
1c:9e:ac:6f:05:d3:b4:19:8c:73:a7:93:04:66:64:
3d:d5:a8:5e:e9:23:0f:a7:be:59:4e:00:e8:d5:79:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:17:31:62:EE:33:CB:50:9E:8A:FE:59:5C:EB:CA:98:6B:97:C1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zAsXMWLuM8tQnor-WVzryphrl8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:69:e6:39:ae:e7:99:3c:3d:94:51:30:3a:a4:11:70:00:d7:
0a:69:9d:c9:4e:f8:ee:30:84:0e:43:70:3e:32:b5:91:74:bb:
c8:6c:94:af:02:e8:40:25:78:1d:54:e4:d3:f3:cb:bf:9b:72:
92:56:21:a7:35:45:9f:e3:9c:06:32:dc:68:50:3f:02:a5:3b:
9e:a4:5b:55:ab:65:da:9b:bc:37:c7:4f:87:57:e1:5d:02:cd:
f1:9a:37:14:b9:4f:88:be:3e:a4:91:81:96:d5:69:37:40:a4:
92:4a:14:e9:9d:0d:1f:ce:2b:16:2a:3d:c4:d4:03:44:cc:a1:
98:7e:b1:c5:38:89:3d:fd:d7:84:ea:8d:e4:55:c8:51:85:68:
3d:31:00:3a:2a:9c:e4:9f:7d:e1:fa:b1:51:da:3e:d2:30:26:
df:6e:c1:4a:25:f1:55:76:2f:34:79:64:d6:a3:4b:dc:e1:4d:
bf:8b:d8:e1:3b:4c:de:4a:92:ac:60:2a:e7:d1:28:6f:d5:da:
05:a9:ed:73:82:b0:31:c0:88:c8:7e:10:af:b9:0f:8d:55:38:
eb:de:25:c1:fc:c9:29:f8:1e:95:76:08:57:da:7c:fc:3d:30:
d2:50:30:e2:6b:8b:21:54:af:62:2e:7b:66:8f:0f:f8:38:ef:
1f:a5:fb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:53 2025 by rpki-client