Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zF1JRSwwZnFFZXrRc74Vg_fUIDI.roa
File: zF1JRSwwZnFFZXrRc74Vg_fUIDI.roa (raw, json)
Hash identifier: /BL/wuTXGfInh9Mwo531Q7wOLtYyTsvHVJdWl7B4JFo=
Subject key identifier: CC:5D:49:45:2C:30:66:71:45:65:7A:D1:73:BE:15:83:F7:D4:20:32
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3B2FC36E5B858E1FDEC807D71C235518
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zF1JRSwwZnFFZXrRc74Vg_fUIDI.roa
Signing time: Tue 05 Dec 2023 18:13:55 +0000
ROA not before: Tue 05 Dec 2023 18:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3b:2f:c3:6e:5b:85:8e:1f:de:c8:07:d7:1c:23:55:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 18:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc5d49452c30667145657ad173be1583f7d42032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:db:6f:91:6b:4b:a3:78:8f:7b:9d:ae:99:
94:27:66:28:5a:6a:5d:f5:ae:36:cd:27:f9:1f:82:
20:dc:f4:32:36:51:30:ac:e4:94:b1:3e:68:02:7e:
9e:e7:92:13:e7:82:23:84:c0:8d:d0:13:87:d9:ee:
61:50:d1:82:1e:a9:d6:b6:b8:af:99:ca:14:07:b3:
8b:22:9b:1c:6e:af:4c:79:42:3f:f4:cc:38:e6:8b:
0f:0a:35:37:16:ed:7a:51:5d:12:df:da:45:ec:3e:
b6:c6:13:f7:e8:91:b2:8f:59:3f:31:e5:14:62:94:
19:dd:58:26:70:55:14:d1:5f:56:3b:14:da:81:b4:
3b:68:8b:b9:b2:f2:a1:34:c0:b9:05:58:16:98:86:
a1:1e:5a:d5:dc:04:32:8a:a0:ce:55:ca:98:8d:dd:
f9:c8:0a:bc:93:d5:07:2f:0c:8a:e1:38:e2:ab:58:
2e:c7:27:0c:a0:87:14:87:09:56:8d:23:93:9a:c0:
f0:5f:02:ae:35:fb:8a:71:00:bf:a8:be:44:c7:ce:
90:2e:f7:25:01:6a:9b:3d:53:05:6c:44:d2:62:c7:
29:2a:f4:61:f9:2a:9c:2e:97:67:83:25:94:d9:04:
60:b7:0e:d3:5a:4c:12:9c:cb:97:ed:b2:af:01:e1:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5D:49:45:2C:30:66:71:45:65:7A:D1:73:BE:15:83:F7:D4:20:32
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zF1JRSwwZnFFZXrRc74Vg_fUIDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:64:41:d6:9d:54:5c:48:9c:82:d7:17:41:15:69:d2:13:ac:
80:f5:0d:3f:b7:25:29:16:bf:62:2e:62:5a:9e:e2:19:3c:3b:
7e:c9:79:3a:70:21:ae:c6:35:c9:01:48:ea:b4:9f:6b:23:32:
53:26:07:05:7d:fb:02:e9:f8:f1:d0:4b:25:48:df:e7:0a:7b:
af:f4:c3:b4:60:76:69:ab:0d:9b:d9:3e:f0:24:3a:37:91:d6:
9a:36:41:8c:5c:9f:6a:30:6a:9a:36:96:a0:11:8d:a5:52:cf:
c1:eb:9f:44:a7:fa:8c:b7:f8:65:4b:84:ce:26:05:87:7d:40:
d5:d3:f5:98:e3:7a:23:c6:f1:44:46:1b:1c:04:e4:8a:47:77:
9d:24:5f:48:99:91:b7:d2:a7:63:52:8b:47:34:5b:5c:63:dc:
52:86:eb:c2:c3:b6:e6:a2:62:05:f0:b3:10:bd:e5:f3:01:f7:
34:36:34:2f:79:7e:e3:82:97:89:1d:39:c4:b6:b8:5f:7d:7d:
a3:22:fb:cc:38:80:06:8d:6b:64:e5:f9:3f:7b:17:b0:c7:b1:
1d:a4:29:c3:f2:d4:74:e5:56:88:03:ea:e9:36:37:d3:14:d7:
ac:6e:ff:ee:05:b1:bf:58:ee:65:98:b1:0a:71:cc:f3:0d:8d:
aa:c3:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:40 2025 by rpki-client