Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L-rzJuUBMvFYiUGy062bzF4_15M.roa
File: L-rzJuUBMvFYiUGy062bzF4_15M.roa (raw, json)
Hash identifier: xFgy/PyvgtEpTmjjHl7BrCImjoaH26EKr7ZJoT9zkkc=
Subject key identifier: 2F:EA:F3:26:E5:01:32:F1:58:89:41:B2:D3:AD:9B:CC:5E:3F:D7:93
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C07DE59180174A502888A482B8D0A399E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L-rzJuUBMvFYiUGy062bzF4_15M.roa
Signing time: Sat 25 Nov 2023 19:04:21 +0000
ROA not before: Sat 25 Nov 2023 19:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:7de:458f/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:07:de:59:18:01:74:a5:02:88:8a:48:2b:8d:0a:39:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 19:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2feaf326e50132f1588941b2d3ad9bcc5e3fd793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:4b:9a:f8:ce:42:c3:b3:d0:7f:8a:ff:c8:
5f:36:70:65:ba:76:9e:88:67:e7:f3:d4:7a:47:3f:
3d:b6:85:75:c0:c2:dd:77:d3:8d:40:d6:23:05:50:
b7:55:cb:58:d6:c8:36:3d:4b:ef:dc:cc:a8:d4:51:
59:e0:b3:86:89:f3:ff:9d:37:f4:5b:15:a6:1d:2f:
d7:9a:15:11:40:99:05:66:3a:0b:88:16:9a:4f:76:
80:08:fc:fa:14:24:69:25:3c:41:ae:7f:d1:51:a5:
5b:7e:ad:b8:7f:80:10:3e:4b:fa:cd:b8:11:5a:70:
9e:9a:29:59:db:5a:d6:34:d8:4f:2f:7d:bc:a1:75:
aa:75:1e:36:0b:28:a4:d6:c1:0e:29:53:4c:62:52:
e9:67:06:5a:d2:da:c0:a6:22:a5:96:a6:20:1f:e7:
8b:86:3e:a7:92:ac:a2:ac:db:1d:f4:bd:64:68:a9:
02:b8:c4:52:80:8d:fc:2f:a4:aa:26:9c:28:09:07:
cd:06:a0:c0:2b:85:6e:fb:12:75:9f:5b:2b:dd:35:
c1:a4:fe:08:53:f7:c5:24:37:ed:5a:f1:9e:6c:4f:
f5:d3:97:0c:61:69:fd:01:31:61:64:2d:41:37:23:
54:6c:f9:1b:30:18:fe:c7:05:25:07:5f:76:ea:e0:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EA:F3:26:E5:01:32:F1:58:89:41:B2:D3:AD:9B:CC:5E:3F:D7:93
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L-rzJuUBMvFYiUGy062bzF4_15M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:54:bb:b1:06:58:24:aa:d4:96:1d:e5:0e:b5:05:e3:0f:e4:
26:7c:ae:d1:07:35:e4:f8:03:86:3d:35:fa:c3:9b:98:e1:2a:
60:dd:97:7d:c1:cf:97:27:36:14:39:db:c0:cd:6a:7c:bd:47:
6d:5e:f9:71:5d:30:34:64:ca:c2:7f:66:bf:9a:dd:f2:08:18:
61:c6:d9:33:dd:2a:52:c1:7d:00:0d:77:2b:2f:c2:62:16:c9:
f0:ab:12:d7:a5:b3:5c:70:40:17:f8:8a:fa:68:54:b8:b1:62:
ee:76:03:04:16:a5:5f:cd:3d:0f:03:6c:27:e9:68:40:d5:d9:
65:d5:bd:c3:8e:59:8c:17:72:14:22:ec:f9:91:85:42:b3:59:
fe:35:21:ca:22:f6:7d:be:22:52:85:33:04:fb:d2:dc:12:a5:
fa:ac:a9:72:71:d3:4d:3f:52:22:82:e7:40:33:be:03:a8:e3:
87:ee:74:4c:f2:54:03:26:0e:80:5b:f3:14:b5:d6:28:73:fe:
59:3f:f6:3d:a2:c1:02:64:2d:74:bb:99:2b:c4:4d:24:0d:18:
f7:00:4d:7a:9a:bf:5e:a9:0e:ad:c1:39:78:71:9f:35:1d:c3:
56:9c:a4:ad:97:b1:ae:cd:c9:82:fd:90:aa:e5:f1:b2:78:23:
e2:14:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:11:17 2025 by rpki-client