Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zNYJHYKVtoH6SipQ22b7JmPj7BU.roa
File: zNYJHYKVtoH6SipQ22b7JmPj7BU.roa (raw, json)
Hash identifier: YojiXg9QlmfEYl4dCjxdY5Mg7yK37TGE6cDkmeBf27Q=
Subject key identifier: CC:D6:09:1D:82:95:B6:81:FA:4A:2A:50:DB:66:FB:26:63:E3:EC:15
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C85DB3A73079E952E87666950D24A7721
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zNYJHYKVtoH6SipQ22b7JmPj7BU.roa
Signing time: Wed 20 Dec 2023 06:13:06 +0000
ROA not before: Wed 20 Dec 2023 06:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:85:db:3a:73:07:9e:95:2e:87:66:69:50:d2:4a:77:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 20 06:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccd6091d8295b681fa4a2a50db66fb2663e3ec15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:f7:b2:ca:d7:db:2c:93:c2:bf:2b:29:41:
e7:61:9d:ad:ba:a8:5c:e9:9a:76:00:db:be:21:cb:
cc:90:4e:df:58:96:48:79:ed:e9:e6:29:0e:15:2e:
5c:86:05:65:55:2f:7f:cd:a2:a6:2b:e8:f4:a7:9d:
55:1c:c6:c2:a3:30:43:84:8d:0c:35:bc:15:27:5b:
bc:7a:65:77:8f:3d:56:1f:69:58:a7:82:7f:70:63:
be:68:0c:03:9e:f7:6f:30:f3:d1:9c:1a:8c:44:b8:
c8:31:d7:24:36:2b:d4:94:7a:3b:f2:de:32:0d:7f:
a5:0f:8c:38:c2:8c:1b:9c:1d:17:55:d9:da:e5:ca:
34:b6:ac:8a:fe:08:a7:98:48:d9:4a:63:98:b2:3f:
0d:83:7e:b7:78:fc:b9:6f:db:75:87:24:2b:6e:72:
78:c9:85:b1:13:d9:c3:ee:17:9a:be:94:4c:57:de:
c7:c2:39:3a:7c:75:ed:e6:94:d8:d3:b1:de:99:c2:
ea:52:47:b9:39:8f:07:cc:32:1a:a7:5d:29:8e:2d:
d4:7c:8d:05:f8:4d:3e:26:d6:ad:f1:a7:e1:c1:8f:
bc:45:91:ec:9c:67:a7:49:e9:ff:44:56:da:30:20:
76:eb:6d:2d:2c:08:59:a5:3f:0d:f6:09:52:11:c8:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D6:09:1D:82:95:B6:81:FA:4A:2A:50:DB:66:FB:26:63:E3:EC:15
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zNYJHYKVtoH6SipQ22b7JmPj7BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:c7:ac:1d:8f:ad:53:eb:84:b5:04:49:46:50:c4:e6:9e:25:
6b:52:4b:ca:42:25:14:e4:71:4d:36:a9:db:73:63:3a:24:af:
25:a9:74:a9:e9:c2:b2:38:1c:84:44:1a:fa:f2:c3:ee:65:f3:
68:92:50:1a:67:a9:90:a6:a1:98:68:cf:28:ba:87:f7:73:83:
d2:27:c1:78:8b:8e:fc:c0:04:94:5d:79:e9:69:ae:16:55:33:
8b:5f:b1:29:42:5d:72:de:f1:c4:b7:92:aa:8e:f8:a9:c5:01:
f1:55:4d:c5:50:77:3f:21:08:3b:3c:0a:f4:62:5f:52:d7:33:
67:ba:86:9d:d5:5f:d4:5a:48:1a:f8:fb:1c:e7:52:95:d1:d3:
ef:bf:d5:32:96:a6:d0:e2:76:91:1f:24:df:c0:4a:e0:61:db:
f1:d8:70:c1:68:b4:c0:0e:4e:be:c6:6e:8d:30:84:08:ba:6f:
52:70:6b:56:e8:52:c8:ee:e2:5a:d7:2b:d0:34:3d:af:84:41:
2b:53:50:dc:6c:d6:ef:ae:77:bf:1e:05:7f:c7:f6:d1:21:f6:
d5:c5:61:ed:b4:08:f3:e3:cc:50:52:e7:39:d5:c0:01:29:a2:
8e:d7:cb:02:65:4c:c0:d0:08:3f:df:5c:7e:61:ba:cb:e9:24:
92:1e:28:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:57:47 2025 by rpki-client