Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z_ooqbqIY8vxNVVbV2qgKi8QFBo.roa
File: Z_ooqbqIY8vxNVVbV2qgKi8QFBo.roa (raw, json)
Hash identifier: 2Dv4w9UkH4LXC43Iz2ApjFMO56O3IT7Hlf24gn5YpYw=
Subject key identifier: 67:FA:28:A9:BA:88:63:CB:F1:35:55:5B:57:6A:A0:2A:2F:10:14:1A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C06300DBDF881EF1EE69AADD116FBD0A0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z_ooqbqIY8vxNVVbV2qgKi8QFBo.roa
Signing time: Sat 25 Nov 2023 11:14:21 +0000
ROA not before: Sat 25 Nov 2023 11:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:06:30:0d:bd:f8:81:ef:1e:e6:9a:ad:d1:16:fb:d0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 11:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67fa28a9ba8863cbf135555b576aa02a2f10141a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:d1:87:70:2a:bb:04:c7:85:f6:59:e9:90:
34:86:2f:a5:80:00:82:7b:08:1c:6a:38:f2:11:86:
4c:ce:65:b8:3d:2b:51:c6:e3:4b:04:cc:70:c2:92:
07:6f:23:d4:99:41:19:86:23:d3:1f:68:49:78:05:
f4:f5:a6:a0:f4:f1:32:9c:54:1f:63:39:37:b0:03:
a7:50:2e:d4:c7:d2:9d:d7:c9:b7:7e:35:da:84:6c:
4e:75:e6:77:4c:ab:e2:80:02:95:53:0a:99:4c:b3:
f7:f0:a1:b9:95:e3:b9:85:bd:88:f6:93:6c:9a:5e:
35:d7:7e:d1:cc:08:ce:9b:16:eb:f9:7f:2c:46:01:
f9:e3:ac:c1:c0:aa:60:10:dc:b7:c0:b7:f9:47:ef:
70:c8:df:76:5d:78:64:8c:4a:e6:a3:99:bc:13:66:
84:10:d2:f6:2e:27:fd:3b:0e:3c:6e:95:f2:41:e8:
df:23:3c:e1:31:c0:9a:be:52:55:23:b3:67:f7:13:
fe:39:82:25:b2:99:86:f3:71:4b:d1:a4:77:49:5a:
30:4b:d8:60:f0:c0:29:5d:cf:07:34:88:ea:c7:84:
91:9e:39:3e:be:39:03:99:98:3a:06:2d:50:23:26:
3b:57:d8:c6:04:a2:86:8f:a7:86:95:a8:bd:f8:2c:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FA:28:A9:BA:88:63:CB:F1:35:55:5B:57:6A:A0:2A:2F:10:14:1A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z_ooqbqIY8vxNVVbV2qgKi8QFBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:f0:5b:b4:88:cc:60:ba:89:4c:33:e3:22:4a:8e:17:9e:a0:
09:f6:cc:e0:c1:5a:3e:df:1e:92:ad:d2:0d:b1:1e:ca:8a:d7:
b3:60:81:9b:d1:c4:f9:4e:d4:cb:51:68:b4:19:98:09:a7:da:
3f:d8:96:1e:71:d5:6d:a9:f6:c5:76:b4:1d:40:51:c4:79:60:
e5:bc:57:f3:b5:6b:21:09:e2:7f:7c:22:a1:8f:dc:4a:3c:35:
70:c8:9d:f1:d3:81:8e:1c:ab:d8:4d:1c:92:ed:8e:9c:6b:c8:
83:f2:67:a0:28:9d:18:10:cb:7a:f7:31:08:31:9b:4c:55:4e:
6a:0a:31:09:4b:ee:be:86:30:4e:b9:29:78:f6:29:23:cd:11:
b3:65:bf:83:3d:5d:e8:af:ca:21:2b:bf:5f:76:00:b5:83:84:
e9:e7:a4:a6:71:7a:42:be:c3:fb:a0:27:8e:5e:e7:e6:9d:de:
fa:5a:30:80:e7:40:af:d5:5d:4a:af:14:8e:98:6c:3f:80:ba:
7d:da:65:da:8c:91:f8:ea:8a:3f:5a:cb:8d:ad:0a:ca:ad:b3:
37:58:07:63:9d:b2:a1:ab:c5:e0:30:80:bc:84:7c:c2:18:41:
e1:82:36:ca:38:a7:fb:f2:87:15:df:e6:35:5f:de:fb:f6:97:
34:5a:d9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:08:25 2025 by rpki-client