Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZIRmuSShM5eUW7P9Ub8SNvKvfXQ.roa
File: ZIRmuSShM5eUW7P9Ub8SNvKvfXQ.roa (raw, json)
Hash identifier: 4GsPf1bt8V9Y7KUi92B7grK5I4ZDWMbOqFYcs/JS/fM=
Subject key identifier: 64:84:66:B9:24:A1:33:97:94:5B:B3:FD:51:BF:12:36:F2:AF:7D:74
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B49FF16501CBCF35E38DE56640D64E3E1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZIRmuSShM5eUW7P9Ub8SNvKvfXQ.roa
Signing time: Thu 19 Oct 2023 22:12:15 +0000
ROA not before: Thu 19 Oct 2023 22:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:ff:16:50:1c:bc:f3:5e:38:de:56:64:0d:64:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 22:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=648466b924a13397945bb3fd51bf1236f2af7d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:98:3b:d3:1f:ca:3f:c4:c2:69:20:74:e2:
13:8a:65:5b:65:f9:d3:34:1f:8a:cd:de:32:3d:4b:
28:80:ab:fd:d0:9c:7d:76:3b:18:ae:a7:19:ea:90:
38:fd:58:3b:b2:59:d6:c4:8f:9f:0f:b1:e0:77:5f:
85:28:c8:a9:c1:b4:c2:5b:85:b1:23:8e:6b:ae:e1:
df:67:ca:7f:04:c4:47:0d:f7:d9:59:19:df:c4:39:
84:66:36:c3:f7:77:6c:33:56:f3:75:bd:e4:32:97:
07:40:8e:4e:7f:9f:3e:73:6d:61:f1:1b:81:f1:7a:
6e:dc:f9:33:b9:04:84:b6:55:46:67:13:1c:56:72:
53:cd:de:6a:85:5f:1d:13:1f:d1:cc:bf:f5:42:8c:
48:e6:80:62:63:34:0a:54:36:10:6e:34:08:13:23:
af:b1:67:5c:7e:50:6f:26:2f:5a:0b:00:a7:e6:85:
d6:c3:fe:8f:aa:69:69:8f:91:6c:02:cd:9f:1f:fb:
d2:30:4c:31:79:92:38:e4:6b:0a:35:9c:dc:87:75:
f7:a0:58:22:70:d3:9a:05:71:09:cd:60:92:7d:54:
4a:7a:82:b7:ef:13:c5:63:5c:2d:49:e1:55:6f:94:
af:e8:0e:3a:52:26:0f:6e:92:9f:f4:0c:14:d2:f7:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:84:66:B9:24:A1:33:97:94:5B:B3:FD:51:BF:12:36:F2:AF:7D:74
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZIRmuSShM5eUW7P9Ub8SNvKvfXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:b8:06:44:25:c1:3b:05:56:00:fe:85:dd:5a:94:67:fc:33:
76:37:7d:66:c4:0d:b0:68:bd:46:51:44:1f:f6:7f:09:ad:1d:
4b:56:90:df:8f:82:ee:7f:54:8d:9a:89:45:a2:20:d7:43:c3:
8a:f3:cc:28:aa:6c:42:a8:68:14:12:d2:eb:11:8a:1e:d1:2a:
f3:c1:06:cf:c0:7a:9a:69:0b:e2:f3:74:22:0e:9b:19:69:09:
a6:d2:72:2a:57:37:1c:66:a9:c6:3a:f6:1b:1a:a1:b5:d4:15:
c6:b3:cf:21:5c:a8:90:d1:ee:fb:cd:6a:9e:5b:3c:e4:2d:f4:
d9:f0:95:eb:a7:eb:d3:e2:8d:6c:1c:48:9b:c7:5d:f3:e4:d8:
d5:99:3b:2f:4a:b7:62:64:50:86:4d:46:7e:eb:42:f4:41:86:
09:ad:b1:f7:ff:59:43:2c:02:ec:12:8f:52:31:f8:ae:5b:7a:
2d:e4:26:34:6c:74:d4:4b:56:b3:6c:34:70:8b:9d:20:4f:6a:
0e:b2:05:92:5d:b9:db:22:d0:23:a7:b9:3b:f2:5c:fd:da:e2:
27:86:55:cd:3c:fd:fb:ae:29:bd:58:ca:bf:b6:d9:52:82:c2:
1e:56:a3:c8:c4:3a:d4:d8:90:5e:c8:5c:13:80:e0:80:fa:86:
1d:ca:ea:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:09:56 2025 by rpki-client