Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zEgULkz-vIVfrpCrF8RokS8kzpQ.roa
File: zEgULkz-vIVfrpCrF8RokS8kzpQ.roa (raw, json)
Hash identifier: FSozH0nlvRyMZHgDPTT0lXO+qI20Y6v9NbVwrBYDW6U=
Subject key identifier: CC:48:14:2E:4C:FE:BC:85:5F:AE:90:AB:17:C4:68:91:2F:24:CE:94
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B17C8C76789C9493993E049606E944FC0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zEgULkz-vIVfrpCrF8RokS8kzpQ.roa
Signing time: Tue 10 Oct 2023 04:11:56 +0000
ROA not before: Tue 10 Oct 2023 04:11:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:17:c8:c7:67:89:c9:49:39:93:e0:49:60:6e:94:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 04:11:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc48142e4cfebc855fae90ab17c468912f24ce94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:97:23:5d:a0:92:2a:f7:d9:14:57:da:8f:
c5:3c:7f:c7:f3:04:69:e6:16:7f:da:d3:7c:06:b0:
77:df:88:f3:06:5c:0b:c8:cf:67:62:eb:61:49:a9:
27:63:8c:5d:c8:3b:6a:e3:49:33:c7:43:43:e7:21:
a1:0d:7b:92:2a:ea:08:ef:55:57:56:9a:97:cd:19:
66:e3:ad:89:f7:06:6c:fe:5b:c7:27:4a:a8:6e:94:
cf:a6:ac:20:5f:ca:2a:26:7f:94:a5:0b:7b:9f:1e:
dd:19:04:ff:16:20:df:47:99:4f:04:0c:55:96:62:
74:0f:20:fe:f7:cc:21:f0:27:9f:f3:fd:bd:0b:39:
b1:43:d5:94:2b:32:07:5f:53:46:9f:95:13:a1:e1:
c5:89:1c:ef:93:16:86:55:d6:14:c4:ea:21:53:c7:
a0:8c:9a:c1:33:46:2a:a8:d3:76:84:53:14:ad:4e:
fa:4d:1f:9f:70:ac:c9:36:ce:af:9c:de:7f:b4:0a:
15:c2:0a:48:a7:ea:88:68:8b:b7:1b:c7:22:1c:1e:
4f:a6:d0:02:de:78:d6:c4:23:27:82:9e:60:93:87:
60:e7:6d:1e:1a:c1:83:b9:1e:d3:d7:30:f8:e4:80:
37:41:c4:7e:1c:e6:85:b6:c0:e3:b5:6e:b4:f4:fc:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:48:14:2E:4C:FE:BC:85:5F:AE:90:AB:17:C4:68:91:2F:24:CE:94
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zEgULkz-vIVfrpCrF8RokS8kzpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:e5:19:03:7d:8b:ba:ab:ae:77:43:57:b8:6b:71:06:7c:51:
d1:9d:21:ed:8e:7c:f6:8b:0b:23:df:66:68:a7:c4:41:ee:64:
87:4b:87:2d:4f:76:76:b4:83:f5:9e:9f:d5:2f:11:f3:ae:d0:
ee:da:9b:e2:bf:55:81:85:f1:be:4b:f8:44:02:ae:f7:64:33:
a8:40:da:3c:a3:d2:a8:5b:12:d3:61:fe:e6:e9:f4:a3:4b:a6:
05:15:6c:a7:b6:60:8d:d2:0b:63:56:d5:6b:2e:fa:a1:85:7e:
41:d1:de:c5:61:63:52:28:9f:81:d9:3a:d4:44:ae:4c:8d:e6:
02:5d:9c:19:c6:93:fa:27:02:79:37:d5:22:39:d6:14:4f:15:
74:17:82:fe:d0:96:7b:a6:0b:8b:d7:76:ac:0b:4d:86:f1:90:
3b:e7:93:38:91:3f:2c:7e:be:03:c7:63:b3:6e:58:5f:fc:15:
41:03:7b:7e:71:3e:59:a9:37:55:03:3e:6f:ba:fc:5e:3c:b1:
42:d2:26:94:bf:cb:f5:2d:48:00:93:a7:95:51:4f:46:d5:78:
68:2a:8f:60:35:d7:92:22:03:8d:90:1f:33:e4:a1:88:c9:a1:
b4:c3:e7:63:6f:61:f0:da:be:a1:45:b9:7f:d5:68:ab:ac:0c:
82:43:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:11:31 2025 by rpki-client