Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ztEUEVBQ7WyN_pzy2eiDL_W-trU.roa
File: ztEUEVBQ7WyN_pzy2eiDL_W-trU.roa (raw, json)
Hash identifier: Yl5NWUi8+70ZRP8rtogyLIJkpuaKgD0jnP6+AeENHNw=
Subject key identifier: CE:D1:14:11:50:50:ED:6C:8D:FE:9C:F2:D9:E8:83:2F:F5:BE:B6:B5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C382DCE2C3183C8151A243084C0F01CE1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ztEUEVBQ7WyN_pzy2eiDL_W-trU.roa
Signing time: Tue 05 Dec 2023 04:12:55 +0000
ROA not before: Tue 05 Dec 2023 04:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:2d:ce:2c:31:83:c8:15:1a:24:30:84:c0:f0:1c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 04:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ced114115050ed6c8dfe9cf2d9e8832ff5beb6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:94:fa:57:c3:1f:6c:ae:c2:e0:29:29:4e:48:
d9:93:6a:44:80:04:c7:e4:bf:a6:ff:85:97:57:bd:
02:fa:8b:80:58:8d:4f:97:51:84:16:17:73:b7:d1:
0e:d5:7f:fe:7a:59:8b:53:a3:77:61:09:a3:c9:d6:
7c:0c:46:92:f3:ff:d2:75:99:26:90:5d:8c:36:dd:
d2:8b:62:be:31:a3:80:36:12:e8:48:33:f4:40:e6:
2c:e3:3c:96:65:54:96:10:ce:36:b1:44:75:e3:40:
95:ca:be:8b:98:9a:3d:9d:c7:fc:b9:73:51:c6:77:
44:b3:27:1e:29:da:1b:b3:77:f2:4d:36:95:eb:50:
ac:62:b5:7d:65:58:6f:ce:98:ed:d3:01:d1:4d:00:
cd:60:d3:d7:cb:24:0e:38:d1:1b:bf:b6:62:d4:5e:
de:be:60:55:c8:59:0c:7c:5a:97:e6:00:92:35:62:
7b:21:89:a5:8b:bf:1b:d5:9e:d3:ce:95:fd:90:09:
54:2e:78:a1:7d:78:7d:9a:46:5b:d7:b1:ae:56:e6:
2b:9b:df:3d:fa:44:5d:80:58:5a:88:16:7c:6f:35:
f9:e0:c0:1b:0c:9d:f5:e8:c7:12:c7:63:89:d7:40:
ae:78:0f:29:28:00:6d:d4:4b:86:fc:d3:ad:50:8b:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D1:14:11:50:50:ED:6C:8D:FE:9C:F2:D9:E8:83:2F:F5:BE:B6:B5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ztEUEVBQ7WyN_pzy2eiDL_W-trU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:0f:5d:a0:89:70:6a:88:20:59:e9:02:47:ec:6f:6a:57:98:
e8:09:2f:57:8b:02:8d:6e:af:f9:d5:e3:e1:41:0a:1d:3a:6f:
52:f3:ae:5a:13:fb:e9:0b:38:e6:56:12:97:cd:aa:5c:2e:78:
ea:f0:70:f4:51:3c:b4:5d:47:a6:75:71:78:16:0a:50:22:53:
41:3c:89:0d:2e:53:8e:38:0a:46:5f:81:cb:87:3a:04:d0:a5:
0d:88:de:7b:8c:59:cc:7e:60:e2:14:bd:6f:c0:62:38:9a:fa:
d8:fa:96:79:79:b5:05:3e:60:e7:a0:5d:3a:ee:9f:be:03:d6:
8e:4a:c3:18:4f:71:87:84:a8:56:a5:89:d9:56:43:12:aa:14:
ad:70:bf:13:a0:fa:8e:29:6e:a5:8e:9a:65:76:54:b7:47:2f:
e4:34:6c:65:d2:c6:92:10:f6:94:c8:30:bb:e1:dc:8e:f5:68:
e4:46:bf:a0:37:59:81:22:5b:38:6d:72:f4:84:77:db:c4:eb:
54:a0:a6:28:a7:41:0f:13:e4:9a:61:9c:62:4c:c4:64:2c:fc:
2d:36:c1:9a:d2:0a:7b:ee:24:ad:a2:db:40:69:89:86:1c:14:
10:b4:c8:18:77:16:24:29:86:c9:db:0f:05:d0:25:ff:35:33:
9b:c0:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:13:59 2025 by rpki-client