Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zBT23HYhq7O6MJc-iekXGj0Bgw0.roa
File: zBT23HYhq7O6MJc-iekXGj0Bgw0.roa (raw, json)
Hash identifier: PyO2EojcC0R9UlWxQqfdwJUY1pYmu0G6fBRRGXpqaW8=
Subject key identifier: CC:14:F6:DC:76:21:AB:B3:BA:30:97:3E:89:E9:17:1A:3D:01:83:0D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF9BC2F389602B76F8E6825D1B1E0818C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zBT23HYhq7O6MJc-iekXGj0Bgw0.roa
Signing time: Thu 23 Nov 2023 01:12:21 +0000
ROA not before: Thu 23 Nov 2023 01:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f9:bc:2f:38:96:02:b7:6f:8e:68:25:d1:b1:e0:81:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 01:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc14f6dc7621abb3ba30973e89e9171a3d01830d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:39:64:c9:f5:f5:ca:75:47:5e:f6:9f:18:
02:2c:8f:18:c6:7a:4a:75:38:95:9d:71:2a:d1:37:
09:e0:05:04:7a:65:bc:8c:c0:c7:6a:c4:76:cd:c2:
58:08:11:e4:15:76:32:3c:eb:4e:4e:ec:0b:21:53:
a5:5f:30:0e:5b:d4:b3:d7:34:48:58:f7:e2:b8:00:
7b:20:80:ec:51:a9:8b:ab:9b:d8:16:6a:04:b5:4a:
35:e3:e1:cf:06:1a:e3:3e:62:c9:9c:ba:2f:45:3a:
37:b6:f3:46:ab:e1:d2:03:fb:41:b0:15:a9:fa:a2:
24:49:73:d0:25:ed:3f:b8:e4:b5:dd:2a:24:15:1b:
2e:49:55:64:df:ea:61:59:6a:b0:f4:fb:b3:1b:b7:
38:05:87:a7:f0:74:5f:f0:d2:f8:ab:16:0b:b2:3a:
23:ad:45:b5:c1:10:5a:33:f1:ec:67:0f:4c:a4:8e:
97:82:e4:1b:4e:ba:23:95:e7:29:cb:4c:5d:20:56:
fb:38:77:45:9f:d2:15:1b:e9:44:09:84:d5:e6:8c:
9a:3c:8a:a0:bd:25:ad:44:8c:a3:2a:0a:35:48:36:
77:a6:fe:ad:a2:15:98:47:fb:3f:23:ce:f4:6b:b3:
25:c5:2f:85:dd:22:3e:7b:c0:c2:12:93:16:11:55:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:14:F6:DC:76:21:AB:B3:BA:30:97:3E:89:E9:17:1A:3D:01:83:0D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zBT23HYhq7O6MJc-iekXGj0Bgw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:06:a2:e2:df:03:02:64:26:24:28:8e:49:aa:37:71:05:22:
f1:3b:42:76:29:9d:53:75:6d:45:9b:2a:c0:39:5a:16:78:a5:
c0:25:81:c5:a1:89:f7:7d:ca:95:33:26:92:7a:62:b4:65:67:
88:0f:c4:fe:99:c0:5c:15:03:96:ae:41:19:fb:fc:cb:ab:08:
75:f9:57:34:98:8d:9e:a4:08:72:2a:11:a8:ec:7d:7f:2d:bd:
42:d0:5f:46:20:51:54:83:46:ee:fe:e6:43:ca:5d:98:c8:a2:
e0:b3:fa:99:9a:5f:e8:59:de:b4:26:c2:85:84:44:fb:da:47:
aa:e1:8f:d5:9f:3c:4b:cf:89:0f:ca:9f:b9:6a:93:14:b0:05:
c6:31:98:e0:fb:9f:ec:bf:31:fc:8a:6b:48:7b:8d:33:da:bc:
35:af:39:ba:2e:4a:83:dd:69:80:b7:55:d3:4e:49:cf:db:df:
a6:30:f5:ca:56:bd:5c:f1:77:ad:45:26:ad:47:2f:aa:c9:06:
4e:96:91:17:17:5e:7c:ae:b7:68:b7:74:51:71:e5:76:14:2e:
cd:73:2d:39:9e:3d:26:67:d3:ca:2d:44:6a:e8:d9:c9:4b:20:
79:93:54:4e:0a:fe:58:b6:77:ad:d5:71:f9:5a:9f:96:58:f8:
fe:1b:10:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:49:50 2025 by rpki-client