Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zju0jYbDXvX_0n7AasZf60U7aE4.roa
File: zju0jYbDXvX_0n7AasZf60U7aE4.roa (raw, json)
Hash identifier: O2UjA3BWn5wqqWa7ukQIwXEPjDkOjf3bh6n0uo7y10o=
Subject key identifier: CE:3B:B4:8D:86:C3:5E:F5:FF:D2:7E:C0:6A:C6:5F:EB:45:3B:68:4E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE28DBC737063DA6B5918ABC7198FE91E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zju0jYbDXvX_0n7AasZf60U7aE4.roa
Signing time: Sat 18 Nov 2023 13:10:21 +0000
ROA not before: Sat 18 Nov 2023 13:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:8d:bc:73:70:63:da:6b:59:18:ab:c7:19:8f:e9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 13:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce3bb48d86c35ef5ffd27ec06ac65feb453b684e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e2:85:af:53:20:bd:51:13:71:d8:f9:cb:c5:
de:2e:89:87:68:c6:3f:3c:38:21:aa:51:1b:4b:fe:
1d:26:a2:d0:07:25:25:2f:45:80:d7:80:c2:3d:03:
3f:b7:7f:42:9f:c5:71:3a:18:b1:ca:5f:c5:b8:31:
84:db:3a:8d:3a:71:cc:e4:27:33:66:13:c3:52:18:
fd:78:b6:35:56:b2:ae:89:fa:1f:cc:ad:a5:1d:ca:
e4:9e:f7:e2:45:48:ae:68:84:f5:13:15:aa:aa:97:
20:04:43:cb:2b:d2:a3:7a:2b:6b:97:c1:f1:59:d8:
fe:e4:4d:aa:69:50:11:cb:ac:90:3b:46:ab:04:31:
17:4b:32:61:34:ca:f1:8e:e4:2d:c7:fa:e1:8e:7b:
5a:27:de:fc:d0:e4:ee:64:a2:78:e3:26:e6:69:cb:
6d:c5:20:5c:3a:72:4c:58:15:31:79:0b:e8:58:b5:
a2:22:82:11:7e:70:1f:1f:d3:b1:ef:7c:08:eb:3f:
46:f7:cc:fb:c1:cd:aa:77:26:d7:5b:fd:f5:0f:6e:
3d:12:01:6c:5d:f3:20:2f:cb:47:76:db:f2:bf:ed:
7c:f8:5e:d4:9e:0f:87:55:59:ae:0f:54:87:21:a9:
45:2c:14:18:34:a7:3a:63:50:2d:30:94:c6:d8:2a:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3B:B4:8D:86:C3:5E:F5:FF:D2:7E:C0:6A:C6:5F:EB:45:3B:68:4E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zju0jYbDXvX_0n7AasZf60U7aE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:3c:ca:7d:e1:b1:9b:ba:d2:eb:d7:5a:84:1a:7c:23:34:e4:
4d:4e:a5:aa:3c:8a:c5:0f:30:3a:bc:ac:bd:9a:f4:53:55:4e:
dc:55:33:5a:e4:b8:a5:f9:77:47:36:04:11:2b:c8:d6:90:01:
30:fe:1a:c3:74:0f:33:6f:e7:d3:5e:e6:f9:6c:b0:22:82:6f:
8f:ce:37:57:16:1d:62:27:38:89:98:9c:91:eb:e1:29:ae:65:
29:ba:dc:39:a9:b9:ad:ca:30:6b:55:88:60:fc:f1:da:d1:9c:
09:32:c0:b1:d5:5d:63:72:fe:85:10:50:69:6c:07:d6:8a:af:
41:f7:a0:c1:c2:dd:6a:fe:5e:e8:ae:c0:d1:60:36:b2:57:56:
04:4b:7a:23:aa:e2:ce:95:1e:b5:10:60:e8:81:96:e8:7c:e8:
dc:d6:2f:fb:e4:34:4c:48:1a:9c:eb:bf:c0:ff:d2:25:c9:d4:
5f:79:2a:d1:fe:cc:b7:fa:21:e0:f3:17:35:2c:3a:86:e1:c0:
ca:c9:28:fb:f2:a4:e0:2f:92:54:1a:e7:0a:03:d0:86:df:e7:
67:5d:a5:32:5c:52:4c:1c:e0:bb:9b:93:23:98:99:cb:ae:e7:
9b:30:9a:3b:da:f5:4d:36:4f:c3:6c:4a:ad:61:f0:59:fc:fa:
1a:6c:0b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:12 2025 by rpki-client