Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z2xoYo7l3sjUfkHYUc6lyc0aEgE.roa
File: Z2xoYo7l3sjUfkHYUc6lyc0aEgE.roa (raw, json)
Hash identifier: XwsTEEPPHpjkSRIIiSrk4pyWzgZLt3Z7zZOiK4UCx/E=
Subject key identifier: 67:6C:68:62:8E:E5:DE:C8:D4:7E:41:D8:51:CE:A5:C9:CD:1A:12:01
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACDC1FDC7E6A1506FA5E2E8313EAEFE56
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z2xoYo7l3sjUfkHYUc6lyc0aEgE.roa
Signing time: Mon 25 Sep 2023 19:12:37 +0000
ROA not before: Mon 25 Sep 2023 19:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:c1:fd:c7:e6:a1:50:6f:a5:e2:e8:31:3e:ae:fe:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 19:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=676c68628ee5dec8d47e41d851cea5c9cd1a1201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:be:99:46:f5:1e:f7:0b:64:f9:18:eb:89:
ad:60:8e:87:87:1d:92:ab:83:3d:8e:6b:72:4e:92:
64:c6:82:3d:47:f3:75:22:fd:c1:57:bd:09:29:14:
c2:89:36:ce:98:27:32:9a:a2:61:2c:59:88:e5:a3:
43:76:d6:ea:64:4d:84:9c:0e:17:58:f4:cb:5f:6f:
8c:81:4f:b1:6a:21:fa:3b:5c:d7:db:ca:81:7e:57:
c4:0a:e4:36:e7:5b:75:93:f0:f1:a4:fc:54:b0:5f:
1d:cf:32:86:6e:d8:a9:69:1f:65:3c:97:ae:77:49:
9b:2f:4a:1b:e9:48:ab:40:d4:20:5a:60:03:ae:b8:
90:f6:37:5f:84:52:93:0e:49:65:9f:22:ea:0c:0a:
e4:04:11:66:b5:d2:15:ad:7a:8a:8a:14:04:4f:71:
3f:e7:c5:4e:d1:86:7a:84:72:04:9b:d0:03:cd:cd:
f9:d0:d3:7e:a7:63:02:a4:f1:40:66:4c:87:e5:4f:
9b:55:ab:ab:ad:d3:9b:14:d8:37:c1:e2:5d:9a:ca:
2b:84:84:40:09:13:8e:6b:4b:03:6d:13:97:6f:cd:
66:ed:aa:27:38:3d:39:98:bb:ba:15:2e:06:01:a6:
7a:07:a3:28:77:9e:57:1a:da:26:cd:44:e2:14:8f:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6C:68:62:8E:E5:DE:C8:D4:7E:41:D8:51:CE:A5:C9:CD:1A:12:01
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z2xoYo7l3sjUfkHYUc6lyc0aEgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:7a:76:47:47:72:1c:bb:a5:82:f8:5f:91:52:c2:f4:51:a7:
2d:14:65:3a:a3:e3:0e:c9:62:29:c7:18:04:f3:4c:05:d9:8f:
f9:36:8c:e3:ac:f2:0a:7c:3e:9c:e6:84:1b:cd:68:a3:71:c5:
30:d8:ae:c0:d6:15:bf:a7:f0:3a:66:15:ce:94:de:f4:af:ac:
a3:ec:87:64:71:bb:a9:3f:50:f4:23:0c:a7:28:e6:1a:c2:08:
7f:02:3e:66:a2:37:06:9e:6a:c1:3c:53:cc:ce:39:e0:e3:fb:
5e:3f:68:0d:4f:67:c7:46:2c:48:6f:49:86:6f:5c:c0:6e:cf:
1a:84:a2:4b:5c:47:03:e6:91:7e:4a:c5:36:ae:a9:f0:5e:63:
a8:1d:b1:66:30:41:6f:6f:39:ec:b2:d6:f0:00:00:e1:e9:74:
d0:35:79:31:57:db:dd:73:58:63:88:89:61:67:a0:e3:da:49:
a9:db:3d:0b:cd:61:2a:2d:54:fc:4a:20:89:ca:a9:a5:85:48:
90:d2:89:f8:07:cd:f9:b6:d5:83:94:b0:72:b3:13:c3:fd:6c:
ab:25:b7:a0:09:fc:14:d8:3b:69:13:66:29:79:de:fd:5a:78:
5c:06:d7:97:90:86:0e:dd:db:c0:c1:a7:23:4b:10:c0:b0:24:
1f:d8:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:05:52 2025 by rpki-client