Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CzN-N33F_GawszEZBMgq81L79ik.roa
File: CzN-N33F_GawszEZBMgq81L79ik.roa (raw, json)
Hash identifier: rkb5Det2cIk61ip/UA4KUXSNUCMmTZqWCw6IfXP9yXA=
Subject key identifier: 0B:33:7E:37:7D:C5:FC:66:B0:B3:31:19:04:C8:2A:F3:52:FB:F6:29
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0D079A7C791D2AD523801978A3758C6A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CzN-N33F_GawszEZBMgq81L79ik.roa
Signing time: Sun 08 Oct 2023 02:04:43 +0000
ROA not before: Sun 08 Oct 2023 02:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:d07:2bec/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0d:07:9a:7c:79:1d:2a:d5:23:80:19:78:a3:75:8c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 02:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b337e377dc5fc66b0b3311904c82af352fbf629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:57:22:ea:27:bc:19:44:8a:c6:63:89:69:
df:db:42:92:dc:ac:63:28:71:50:1c:ac:16:b5:55:
14:e7:1a:d5:26:0b:69:25:ab:fe:c6:e8:e7:2d:0e:
33:52:e5:56:90:78:60:6a:d0:aa:53:0d:f7:72:ec:
a9:1d:2b:3e:8b:57:66:cf:43:01:8d:79:13:da:72:
1a:35:b3:d5:40:e8:1c:94:5a:0d:5d:c6:df:de:30:
91:95:fb:dd:a5:f9:db:ce:0e:0d:45:e8:31:d6:94:
fa:94:4b:55:a9:98:0e:1a:b1:8a:b3:d6:f4:8c:cb:
03:a7:c2:e5:43:95:39:15:ea:5f:d7:1d:b8:0e:5d:
f2:c9:b7:25:2f:a9:a2:f7:ac:5f:e6:61:b0:4a:f8:
4e:1a:82:cc:00:47:ae:e7:13:d8:6a:21:96:e9:cf:
00:58:2f:83:2e:3b:e9:41:30:06:fa:d7:3d:f8:3d:
8a:f7:1b:de:90:2e:2c:4c:49:9b:f8:7f:db:e1:15:
3c:a9:11:12:0e:01:b2:8d:a8:0a:8c:b6:56:50:55:
3d:4a:96:f6:07:71:fa:e9:11:90:e9:fd:0f:be:4c:
ec:84:e0:63:1e:7f:52:a6:26:56:f8:08:a0:ec:fb:
13:ea:d7:27:e9:d1:23:9c:94:34:33:74:b7:ac:dc:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:33:7E:37:7D:C5:FC:66:B0:B3:31:19:04:C8:2A:F3:52:FB:F6:29
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CzN-N33F_GawszEZBMgq81L79ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:fc:f6:01:10:2f:fc:a1:d8:03:82:34:66:d8:38:e2:51:21:
f4:c8:bf:e0:29:05:eb:e1:2a:9e:a2:4f:4c:69:03:44:5d:a5:
5f:62:b3:f0:68:4d:ee:8b:43:01:53:71:6c:7f:ba:47:27:4e:
d5:a2:9a:75:86:60:0f:54:b8:aa:48:44:d2:32:5e:77:6b:9e:
6e:af:07:60:3c:ac:df:88:3a:68:c6:ed:d8:c1:25:2e:b1:aa:
59:82:4a:e3:75:61:e8:2b:cc:7f:b1:34:fd:1e:d1:5f:45:16:
86:51:51:2a:45:bc:41:e0:ca:24:76:29:74:27:cd:37:58:8a:
37:d8:ae:45:99:38:05:0f:ee:bd:32:6c:dd:30:bb:e3:9c:b9:
03:4d:ba:e7:64:07:16:26:52:af:74:a2:7f:fc:bd:ac:b9:59:
c1:81:7f:b6:bf:be:db:a5:8d:19:ff:b0:20:37:44:1e:b4:64:
8b:8b:6a:73:72:db:4d:bb:41:e2:9e:ee:24:8f:2e:10:9d:79:
71:33:8d:c8:8c:d8:f9:b8:b2:71:f0:1e:a2:ba:5b:bd:74:f7:
cb:51:40:e3:c0:3b:f5:5c:3a:c1:c2:a7:f9:eb:99:e9:91:c1:
0e:cd:28:b7:89:fe:2b:d0:d7:ba:f7:72:76:26:66:ec:af:ea:
81:a8:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:16:12 2025 by rpki-client