Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zp_ZsKPDqtZrYhtuEQ0dAgt7DqI.roa
File: zp_ZsKPDqtZrYhtuEQ0dAgt7DqI.roa (raw, json)
Hash identifier: HkzltISgcBD8s+Cm6+K9+i/rt3SLDLwUQDUFyFM+7qU=
Subject key identifier: CE:9F:D9:B0:A3:C3:AA:D6:6B:62:1B:6E:11:0D:1D:02:0B:7B:0E:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2DE4C3359E21B6586660BEFE9B540749
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zp_ZsKPDqtZrYhtuEQ0dAgt7DqI.roa
Signing time: Sun 03 Dec 2023 04:16:55 +0000
ROA not before: Sun 03 Dec 2023 04:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2d:e4:c3:35:9e:21:b6:58:66:60:be:fe:9b:54:07:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 04:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce9fd9b0a3c3aad66b621b6e110d1d020b7b0ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:86:c6:d8:99:7a:f0:fb:92:b0:51:97:ea:
ad:3b:85:7b:32:e8:56:91:06:3f:de:a5:d3:e3:01:
df:4c:78:e1:ff:38:32:4d:a1:79:67:65:f9:20:19:
3b:b7:e7:8d:5e:8b:7e:c2:5e:e0:ec:af:4d:ab:c5:
4e:9e:c0:41:8a:df:3c:92:fc:b5:aa:1a:c2:2d:44:
f1:08:49:7f:1a:7f:0d:b2:67:e4:7a:44:4e:8d:db:
0b:3b:c1:de:19:91:62:e2:22:37:af:0c:c7:e3:e5:
5d:2a:61:0a:ff:c2:f1:60:0f:3b:75:77:35:46:f5:
41:f2:91:d7:bf:35:60:89:d5:38:39:67:f9:37:24:
56:d9:63:5c:12:ec:ef:f4:17:ad:63:b7:83:71:47:
c9:1a:a7:28:8c:ed:85:3f:b2:b9:13:d0:4b:90:fd:
7a:38:3c:94:c3:ed:b3:d8:a1:bf:92:ca:23:78:fb:
8a:c3:8e:cc:b3:1d:14:15:b0:af:77:16:6a:fe:a2:
c1:f9:40:5d:75:1a:09:04:38:e5:ce:10:53:82:ff:
4e:b0:12:99:d4:84:bc:54:3d:0e:a2:00:fa:b8:bb:
9e:c9:50:58:98:bf:75:21:af:14:bd:e7:b7:3f:cc:
69:0f:b5:2c:1d:aa:b2:b4:18:04:1c:81:9a:dc:a2:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9F:D9:B0:A3:C3:AA:D6:6B:62:1B:6E:11:0D:1D:02:0B:7B:0E:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zp_ZsKPDqtZrYhtuEQ0dAgt7DqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:1d:31:c9:09:4e:c5:44:50:f6:64:78:14:6e:72:de:ac:95:
90:0c:38:e1:37:13:a1:b7:e9:4b:e0:7b:4b:39:d6:60:0f:fc:
b0:8c:9c:1a:32:c1:5b:ed:3e:30:23:eb:b7:7b:8b:30:69:f4:
65:37:e2:00:67:26:65:86:5f:49:aa:e2:32:fc:c9:60:8d:96:
2d:e8:25:3c:3e:da:8b:48:41:3f:e4:8a:5e:83:99:94:be:89:
1b:31:de:45:af:ce:37:7e:44:d1:f7:95:48:8a:79:31:16:81:
c7:ec:92:97:60:eb:7d:a3:ea:0e:68:e5:ce:1d:bd:ee:5f:c1:
a5:99:48:e2:b1:2e:f9:96:e3:29:e1:e2:dc:d8:75:f6:be:f3:
0d:9c:df:d8:46:db:81:c0:83:e4:fd:a0:23:4e:31:71:e0:29:
c9:86:a2:19:94:81:85:21:31:2c:a0:a3:d0:8f:99:7b:a8:68:
1c:41:17:8e:9d:a0:e6:fe:b4:32:cc:d6:ec:60:f2:19:af:df:
d8:3e:d0:10:08:31:6d:30:00:26:94:0a:b1:42:4d:9f:b9:54:
a2:46:22:03:e3:aa:05:56:5c:28:48:81:8e:d4:3d:ab:95:db:
52:dc:8f:47:0b:db:b2:59:b6:41:8a:21:e7:0f:9d:a2:94:87:
2a:c0:fd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:34 2025 by rpki-client