Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zIRfFGDdFp4AKTzWQ-8A-Xqi5LA.roa
File: zIRfFGDdFp4AKTzWQ-8A-Xqi5LA.roa (raw, json)
Hash identifier: HN48o+p054+WpqjQmw/lRn977mYduvurZCI3QsgXo3g=
Subject key identifier: CC:84:5F:14:60:DD:16:9E:00:29:3C:D6:43:EF:00:F9:7A:A2:E4:B0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF83FAB05C3EB9266579973B766985304
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zIRfFGDdFp4AKTzWQ-8A-Xqi5LA.roa
Signing time: Wed 22 Nov 2023 18:16:43 +0000
ROA not before: Wed 22 Nov 2023 18:16:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f8:3f:ab:05:c3:eb:92:66:57:99:73:b7:66:98:53:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 18:16:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc845f1460dd169e00293cd643ef00f97aa2e4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:83:d4:84:50:46:62:22:0e:2e:78:74:d3:43:
f0:09:77:76:5e:bc:61:b1:31:93:af:92:cb:ed:6e:
b9:62:3c:3a:60:48:9b:cf:24:40:b9:9c:d9:93:a7:
a9:c9:55:93:eb:49:88:7f:c9:83:e2:15:09:d2:5f:
a2:d0:47:c9:4c:9d:71:5e:13:ce:b3:d2:36:7e:50:
dd:d3:21:df:c6:56:9b:ca:e5:79:94:b5:f6:0f:49:
55:04:8c:52:0b:95:9d:e5:d5:2b:53:32:d3:a7:9e:
5f:47:d2:72:5c:b9:8a:3e:ca:7a:c9:76:63:27:28:
f9:94:cf:f2:99:da:9b:39:2b:1b:12:0b:c6:bc:30:
7d:39:b4:e8:88:e3:c3:21:31:b3:cb:2e:81:ad:26:
10:27:88:99:92:03:11:e9:a6:91:ea:16:4f:d1:c6:
e3:2a:85:8f:8c:ec:91:8d:fe:41:53:0a:36:19:9c:
60:5d:c0:82:42:87:0f:e5:86:6c:10:fc:29:27:c8:
b7:af:ba:ae:c6:74:7e:e7:09:e2:1c:4d:7b:1b:e4:
69:c8:05:6b:05:ee:78:32:a6:b5:0f:b9:74:28:a3:
89:46:0d:cb:a4:92:76:ed:08:cc:48:04:70:ee:71:
a4:81:3c:17:c0:b7:f3:43:98:2f:00:2d:65:22:1c:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:5F:14:60:DD:16:9E:00:29:3C:D6:43:EF:00:F9:7A:A2:E4:B0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zIRfFGDdFp4AKTzWQ-8A-Xqi5LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bd:6a:82:6f:cc:a0:5c:f8:12:36:2d:5d:a1:24:79:f6:3a:e1:
1f:9c:8d:15:89:9e:20:8b:d4:af:5b:df:34:27:21:71:d9:57:
cd:17:84:51:90:99:10:9a:0f:ba:e2:63:8c:59:71:aa:28:9d:
ea:d4:e0:f6:ee:f8:05:83:12:c5:a4:52:61:7a:37:ca:d6:52:
d8:53:1f:e2:cd:0f:cf:27:a2:32:8f:e0:47:30:10:65:99:ac:
a1:35:a6:96:d4:3f:34:30:d9:ab:0d:a4:a8:46:c2:3f:d8:3d:
c7:f4:bc:54:8d:bf:40:1e:33:50:e4:21:57:aa:c3:99:97:f1:
fc:31:56:b5:ac:30:9d:b4:b4:53:e7:4a:06:28:f5:0a:c8:1d:
ca:27:02:e1:d3:78:b9:f2:e9:d5:fe:2b:e8:48:4b:bd:88:19:
bb:40:e5:bc:c4:9d:75:86:4c:64:3d:34:71:0d:19:71:80:08:
63:80:85:c6:75:c1:85:56:52:4e:20:cb:84:50:f1:78:7c:c9:
91:7b:b3:d6:97:88:ac:79:25:20:9b:d3:1f:2f:88:4a:87:3c:
cf:41:28:d0:78:21:df:14:81:33:f1:f9:13:74:a2:f2:b8:c4:
f6:16:b6:21:ce:88:7f:f8:05:c6:9c:b7:8f:5c:9d:67:ec:79:
71:d8:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:38 2025 by rpki-client