Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZaePT9RaUot3ZQKTHG1X7DMhOe8.roa
File: ZaePT9RaUot3ZQKTHG1X7DMhOe8.roa (raw, json)
Hash identifier: qwEI1AfNxayGiQHTvRQQsZiYS03DBVCZnNkJuSrquco=
Subject key identifier: 65:A7:8F:4F:D4:5A:52:8B:77:65:02:93:1C:6D:57:EC:33:21:39:EF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B947336705E1467C1E2DBEC9D7C7C2612
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZaePT9RaUot3ZQKTHG1X7DMhOe8.roa
Signing time: Fri 03 Nov 2023 09:11:00 +0000
ROA not before: Fri 03 Nov 2023 09:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:73:36:70:5e:14:67:c1:e2:db:ec:9d:7c:7c:26:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 09:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65a78f4fd45a528b776502931c6d57ec332139ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:fa:a9:80:14:b3:c2:a5:7f:48:f3:fa:89:
89:9a:c5:2b:91:ad:87:24:b0:9f:95:47:e6:19:77:
d5:55:3e:12:e8:3c:05:d4:53:91:5b:e6:03:1d:c4:
c9:94:dc:1a:bb:2e:08:08:ae:83:37:3a:2c:ac:02:
79:c9:65:ad:f8:93:35:a6:af:55:5a:65:99:3c:8d:
88:8b:80:bc:f1:ae:ed:3c:82:b4:31:85:6b:46:72:
8f:f0:c9:c4:d1:c3:ba:3a:25:95:24:69:fe:d0:bc:
b3:5a:93:15:f5:67:4a:7a:10:45:4d:76:71:9a:65:
68:0f:0c:1e:e5:f4:76:0f:32:de:c4:9b:47:03:6b:
fd:f1:36:ff:f7:4c:ab:cf:00:30:39:7c:cd:02:f1:
c4:05:31:47:41:18:a1:b0:fa:8c:4f:58:18:d3:57:
bc:13:03:15:10:bf:2a:a4:4f:e7:5a:f8:97:28:56:
42:7d:a4:e0:3e:50:ce:c8:08:a7:be:78:d4:25:81:
ef:84:86:cb:b2:2e:ff:72:35:63:19:c3:f6:af:e7:
83:eb:6d:2e:21:f6:ea:d6:fe:20:14:9f:0b:a3:83:
5e:85:c0:b4:ca:c0:ee:18:c4:72:14:84:b8:e0:c1:
e6:26:f6:a5:6f:0f:e6:6f:a7:6d:ad:6c:15:83:65:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A7:8F:4F:D4:5A:52:8B:77:65:02:93:1C:6D:57:EC:33:21:39:EF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZaePT9RaUot3ZQKTHG1X7DMhOe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:f0:de:b7:12:85:4a:66:81:f8:2b:c6:fa:50:d9:9d:31:56:
f3:fe:43:c6:31:09:10:98:a4:c5:da:51:c5:3a:67:d8:da:35:
fd:60:c1:bd:8d:3f:3e:94:4b:38:76:1a:af:6b:be:4c:36:6e:
34:60:88:72:22:49:28:40:3e:72:50:7b:3e:66:49:76:5e:2d:
38:b2:c2:ea:d1:df:e0:2c:f7:09:32:55:2a:cf:32:89:e3:bf:
f1:c2:0f:5a:d9:8d:6e:fb:17:62:99:1a:56:82:17:1b:a5:5e:
20:a1:c0:73:3c:e1:94:37:23:29:34:e4:f9:ab:d8:17:ee:30:
66:b9:06:0e:eb:71:2d:c6:c3:c9:57:56:10:87:8e:96:2a:d3:
d9:41:08:ad:52:43:cd:36:47:02:5a:a1:2d:66:e5:99:e3:94:
20:a4:31:6e:ee:16:0c:df:3f:9f:ee:16:72:7d:89:68:7e:76:
b5:56:ed:33:98:b2:48:cd:df:cc:85:61:77:9b:4b:51:b8:c1:
06:be:6f:43:2d:46:7e:03:b7:d7:74:94:63:a2:30:7c:9f:f4:
a7:b7:31:91:5f:96:a0:2b:8d:7f:27:54:b8:c3:ca:28:2f:19:
cd:95:52:dd:ae:65:79:8c:0a:df:84:55:33:f3:e0:18:5f:ea:
07:2b:c5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:03 2025 by rpki-client