Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zyXzb-pvPIt2iI8I9xwf7TDtxlc.roa
File: zyXzb-pvPIt2iI8I9xwf7TDtxlc.roa (raw, json)
Hash identifier: PR22R3kevKw4jRo7+UF+XEBXogEz/x4RsdJ+zebwaho=
Subject key identifier: CF:25:F3:6F:EA:6F:3C:8B:76:88:8F:08:F7:1C:1F:ED:30:ED:C6:57
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C80EBCD2C10AA9C121E6293E9296EE2E3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zyXzb-pvPIt2iI8I9xwf7TDtxlc.roa
Signing time: Tue 19 Dec 2023 07:13:06 +0000
ROA not before: Tue 19 Dec 2023 07:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:eb:cd:2c:10:aa:9c:12:1e:62:93:e9:29:6e:e2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 07:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf25f36fea6f3c8b76888f08f71c1fed30edc657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:23:d2:5d:fb:af:a9:f6:1e:b1:56:17:b4:
ed:16:9a:b6:34:07:30:89:ce:b2:8a:9f:74:3e:c9:
d5:5b:b1:c9:84:d1:cc:dc:70:50:34:5c:8a:bb:c4:
1e:e1:15:e1:d6:a9:6c:2e:8c:9b:e8:7c:47:3c:53:
6e:21:48:9b:79:4e:aa:7a:b5:59:01:2f:43:57:03:
9e:05:00:dc:dd:04:14:f6:3e:f2:63:da:a6:1d:32:
20:6d:dc:70:c0:40:02:a9:09:e7:2e:ec:86:80:dc:
29:20:fd:9e:a4:01:54:60:a8:b4:98:51:f0:52:9a:
42:1e:dc:8d:cd:54:e3:88:4f:3c:9d:9c:5f:1a:b7:
00:80:b0:ec:67:00:0e:f6:a2:73:4d:a2:28:24:8d:
c9:4a:7b:26:35:16:2c:95:11:d2:aa:ab:4d:3a:ae:
3a:e8:da:6a:7a:50:0b:70:0c:2e:e0:bd:cc:24:96:
71:3e:9f:e4:93:8f:4d:04:9b:d8:e8:3b:65:63:7e:
67:bf:ed:f9:77:6d:b5:26:08:b8:33:31:25:42:1f:
73:d4:60:8d:43:36:d4:6a:9b:8d:9d:02:43:fb:72:
e0:b7:2f:03:90:44:4d:60:76:3f:85:d1:b3:75:4a:
5b:f3:3c:03:2f:bd:dd:ba:fa:aa:a8:93:b8:e0:22:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:25:F3:6F:EA:6F:3C:8B:76:88:8F:08:F7:1C:1F:ED:30:ED:C6:57
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zyXzb-pvPIt2iI8I9xwf7TDtxlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:98:95:f4:a4:46:bc:90:b4:4c:4a:5d:ca:a3:be:b1:01:b1:
23:c7:93:6c:28:27:ad:5d:e1:38:d2:d8:ac:cb:4d:c5:a9:2b:
69:3a:e4:3a:79:98:80:a9:76:da:62:6c:27:ef:82:bc:d7:fa:
4a:1f:71:88:97:38:cc:79:64:11:ed:37:56:62:b5:7b:44:b6:
fd:d1:3d:f2:53:0c:63:d7:46:ba:34:87:c4:8f:01:00:68:15:
f6:28:5e:56:7f:eb:29:63:7c:d0:a3:6e:0a:ea:7c:7f:00:10:
4d:58:23:6b:d0:8c:d7:4f:d6:76:be:d5:34:15:62:1f:78:7b:
b1:6a:8a:4d:59:d3:5d:ca:ef:cb:0c:84:94:df:75:18:bb:96:
4a:a9:dd:b7:d7:1c:5f:69:d0:82:16:bc:2e:b1:22:3d:4c:59:
03:2c:b4:5e:b3:a0:bd:d0:b9:eb:4a:1f:9e:77:8d:1c:b4:b6:
c7:fc:ed:b6:6f:6e:e7:d6:4d:71:fb:75:d7:50:eb:a6:fa:06:
47:59:ac:31:8f:03:a0:01:20:8a:e1:bb:98:44:0f:98:16:6f:
3e:c0:47:60:ad:45:c5:cf:6a:8c:1e:10:dd:da:33:37:5f:63:
90:3f:4f:82:59:7a:ae:fb:85:a3:30:66:a9:e1:05:5d:51:6a:
d9:76:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:00:56 2025 by rpki-client