Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zXZV5M6ONGW9NJTKalTZweyZ0Ac.roa
File: zXZV5M6ONGW9NJTKalTZweyZ0Ac.roa (raw, json)
Hash identifier: JNWshW4SR+600sxivHFovnKNwuUbWcHo9eiV/zDFO4s=
Subject key identifier: CD:76:55:E4:CE:8E:34:65:BD:34:94:CA:6A:54:D9:C1:EC:99:D0:07
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B872B2DE1DC2A94CCF1167AA5428D2D29
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zXZV5M6ONGW9NJTKalTZweyZ0Ac.roa
Signing time: Tue 31 Oct 2023 19:17:15 +0000
ROA not before: Tue 31 Oct 2023 19:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:87:2b:2d:e1:dc:2a:94:cc:f1:16:7a:a5:42:8d:2d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 19:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd7655e4ce8e3465bd3494ca6a54d9c1ec99d007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:e7:f9:60:9d:9d:84:2d:a5:70:af:81:ca:
58:fc:47:93:f5:23:64:02:e1:e6:9b:fa:48:17:27:
76:dc:d7:96:05:03:f6:c3:cf:e8:24:20:56:e9:dd:
7a:04:a1:9b:c6:5a:88:37:db:05:9c:28:c7:00:c9:
b0:45:ac:47:70:9d:e7:36:95:a3:e5:85:fa:54:a9:
2b:b4:ad:5a:57:aa:47:35:fb:51:5b:59:69:8d:04:
14:13:dc:02:d2:20:a9:b2:f0:9e:b5:93:57:d3:f2:
59:30:93:e1:0e:36:94:a1:67:fd:4f:b8:2f:2c:48:
16:e1:6c:53:d0:a2:af:8b:e2:81:8b:9c:a4:5a:a0:
40:a3:e8:83:e8:4e:cd:f6:9d:04:a3:b4:81:79:55:
9c:0f:23:1d:00:ac:14:96:99:7a:9b:88:bc:a0:d3:
2a:a6:fa:6c:d2:e9:bb:5e:78:b4:fb:d7:15:71:69:
09:75:e5:0b:01:22:16:81:4f:4f:c7:7d:51:cb:28:
fe:21:57:9d:62:7d:b1:ba:1b:6f:28:6b:0d:e1:0e:
a0:2f:31:2a:28:f8:06:03:06:6e:92:70:01:29:70:
9e:8c:3c:e4:04:a3:b3:67:25:42:8e:cf:b0:68:63:
2d:93:d4:b8:09:7f:83:02:c6:08:9f:bc:35:b3:2a:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:55:E4:CE:8E:34:65:BD:34:94:CA:6A:54:D9:C1:EC:99:D0:07
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zXZV5M6ONGW9NJTKalTZweyZ0Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:3d:0a:4b:d1:63:79:16:24:ba:9b:04:0e:e0:8d:c3:c2:7f:
bc:aa:ef:35:1a:8b:7b:6e:f5:d9:2e:90:ef:b5:52:c7:5e:79:
e1:a0:11:af:13:66:7b:2f:69:0c:e7:9f:5a:9c:bf:b8:82:19:
af:03:63:e5:84:02:ef:ec:bb:ac:da:8a:b2:72:4e:a4:6c:10:
ff:86:9e:ee:76:20:e6:f8:51:4a:cd:fb:be:6b:e8:dc:68:5a:
b6:7c:52:94:b6:5c:3e:03:83:73:1c:2b:79:59:8e:c5:07:a9:
99:cc:40:d1:88:d8:62:2e:2f:5d:48:fe:11:f6:08:5b:f6:f2:
94:d0:b8:3a:cd:c8:78:82:76:60:03:84:3b:92:05:2a:e1:43:
1b:b5:66:cb:25:0c:80:4a:70:9e:1b:09:1c:57:15:b5:17:fa:
27:e0:2b:4d:23:a7:aa:a0:2e:2d:56:ca:72:0a:cd:1c:a4:8e:
23:cd:9e:32:70:66:19:b2:e3:25:dc:c6:ae:b4:38:8c:29:b1:
7c:cb:c2:e4:74:23:a7:6c:29:ed:a0:fc:8a:42:50:e5:41:69:
21:67:28:49:20:7f:e5:7b:ec:f6:8b:e5:96:34:c3:56:44:01:
8a:97:2e:1a:9f:54:e5:aa:61:81:b0:d3:a1:5a:80:63:60:d9:
8c:82:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:52:37 2025 by rpki-client