Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IZmQONrAapPazQpdEiaJokYWR6w.roa
File: IZmQONrAapPazQpdEiaJokYWR6w.roa (raw, json)
Hash identifier: C/YXkfrpJdhs8/RZWix+vSjcLNcTW91c6yt7xvHsLlE=
Subject key identifier: 21:99:90:38:DA:C0:6A:93:DA:CD:0A:5D:12:26:89:A2:46:16:47:AC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB1A1DE6F9B1AAC2F263847E8ED8BBEB0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IZmQONrAapPazQpdEiaJokYWR6w.roa
Signing time: Thu 09 Nov 2023 01:10:57 +0000
ROA not before: Thu 09 Nov 2023 01:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b1:a1:de:6f:9b:1a:ac:2f:26:38:47:e8:ed:8b:be:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 01:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21999038dac06a93dacd0a5d122689a2461647ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:8d:77:09:46:47:0e:e4:aa:16:2c:14:06:
a6:63:1b:56:e4:e4:44:76:35:61:c8:10:0d:c2:94:
34:d2:5f:a9:b9:ad:0c:d9:97:3a:14:a9:58:66:c3:
ba:d3:af:c2:a2:b0:bd:c8:cf:9d:0e:d7:6e:80:82:
00:55:4d:6a:a7:a0:59:a1:c4:b1:7c:cf:71:77:6e:
e4:36:31:79:82:f0:e4:1e:f1:86:d5:20:56:bc:39:
c4:63:b6:b1:e8:74:c2:6d:e5:d9:7e:02:f3:e5:c9:
a8:fe:c4:3d:56:31:aa:c8:52:03:04:2a:16:37:ba:
20:b2:96:93:ef:cc:5c:1f:8c:e0:6d:6c:2c:a3:04:
60:2b:77:65:15:91:0f:90:b2:05:47:ac:6c:24:f2:
4b:eb:eb:1e:7d:f0:79:72:f1:16:c0:57:ab:fc:69:
5c:d8:76:4d:e6:de:98:fc:25:39:af:76:81:c8:80:
c6:e4:fc:ae:36:99:8c:b9:a7:26:ae:7e:bd:0b:1a:
ec:26:c3:2c:d2:a3:4c:7f:43:cc:bd:7b:d6:fd:9d:
00:31:70:03:8a:46:64:55:13:5d:26:c1:a2:fe:27:
8e:e5:ff:06:42:90:d9:5d:e2:07:cc:a1:01:97:5e:
33:24:81:bc:0a:80:a4:b2:f6:ac:fb:53:4e:0f:91:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:99:90:38:DA:C0:6A:93:DA:CD:0A:5D:12:26:89:A2:46:16:47:AC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IZmQONrAapPazQpdEiaJokYWR6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:5c:15:dc:6a:7b:43:82:f9:0c:18:7a:25:89:df:94:8b:c0:
df:d7:3e:b9:40:ea:3d:09:14:38:3c:7c:f6:ef:24:ae:fb:1a:
39:1f:a8:82:1c:35:24:02:41:50:2f:ac:3a:73:c2:7d:17:ef:
9f:57:12:b0:e6:bb:75:8f:e7:a6:f9:19:76:1e:dc:af:7d:39:
00:f1:c1:d9:1f:17:bd:d4:54:2f:4d:1b:23:9b:4c:96:a4:87:
ac:66:40:05:bc:0f:94:ab:19:5d:26:a2:16:61:8c:e9:8b:88:
e5:31:ad:17:84:51:fd:75:a5:2c:62:58:af:7e:09:61:18:1b:
b8:aa:c8:af:56:a8:d4:a2:2e:4f:57:e6:a3:0e:68:5f:ac:f6:
81:77:ac:f2:ed:a9:70:9e:45:88:9b:32:ef:b4:42:80:91:6b:
6c:0c:27:41:e7:6d:95:37:53:01:ea:42:bc:2a:0e:f4:d3:3f:
a9:32:45:32:5f:b0:aa:a8:ea:49:1c:35:c1:1f:4c:52:b7:a2:
1d:e0:aa:7c:09:fb:b0:6f:eb:63:ae:39:3f:ad:3a:3d:02:3b:
c0:ae:56:8c:ad:9f:8a:53:d3:f9:99:d7:f4:d9:cf:24:71:ad:
e0:42:e0:30:df:68:5a:d9:c9:1a:0a:fa:db:8b:ea:ce:fb:42:
ff:9a:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:45:58 2025 by rpki-client