Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZoBAweHrescV6GEC4oyw0S2bhl0.roa
File: ZoBAweHrescV6GEC4oyw0S2bhl0.roa (raw, json)
Hash identifier: 8IzP/DPyq1iU9DMYxomkU1F3qzv5MJXURQ1QthFhiSs=
Subject key identifier: 66:80:40:C1:E1:EB:7A:C7:15:E8:61:02:E2:8C:B0:D1:2D:9B:86:5D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9DE9EEE653D3A98E21B022F60B84BBDA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZoBAweHrescV6GEC4oyw0S2bhl0.roa
Signing time: Sun 05 Nov 2023 05:17:15 +0000
ROA not before: Sun 05 Nov 2023 05:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9d:e9:ee:e6:53:d3:a9:8e:21:b0:22:f6:0b:84:bb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 05:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=668040c1e1eb7ac715e86102e28cb0d12d9b865d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:ea:8c:f0:84:57:69:67:1e:12:a2:24:1a:
30:a1:ea:0c:b6:a9:11:12:c7:a8:e9:fc:dc:03:4b:
18:2b:11:ce:42:d4:80:0d:3b:c3:0e:e0:8a:d7:7f:
60:89:ee:05:da:b0:47:a1:0e:16:6b:c1:42:28:1c:
c7:6f:bb:fe:da:d1:2f:be:40:77:85:05:0c:dc:10:
5f:34:86:51:c6:c9:85:49:f0:b9:6f:28:7d:8b:ca:
64:e3:f2:f7:52:8c:26:0c:d2:b2:fc:0e:20:36:59:
b0:22:fa:15:32:fa:10:0f:8a:95:64:3e:e0:e1:62:
e1:85:fc:3f:9a:f7:c5:96:96:92:be:dc:f1:ac:3d:
c8:51:88:e5:31:bb:d5:dc:b2:af:31:e6:b4:f9:47:
66:29:df:03:4c:32:4f:b9:32:bd:e4:55:66:bb:a8:
fa:12:b1:77:b1:f8:c1:9f:e2:a4:df:1f:36:4c:c0:
84:34:6e:e6:1b:cc:af:5d:6e:f1:ce:74:45:1c:6f:
87:4f:7b:e7:ca:79:ca:be:8c:9e:d7:71:9f:2b:ea:
6e:f2:34:59:56:6c:41:a3:d3:3f:48:72:48:ed:e1:
7a:ec:39:a1:83:60:0d:11:5e:ae:c6:3e:11:1d:31:
d6:df:ad:da:8d:d0:10:4e:9a:02:2c:7b:5a:2a:d9:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:80:40:C1:E1:EB:7A:C7:15:E8:61:02:E2:8C:B0:D1:2D:9B:86:5D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZoBAweHrescV6GEC4oyw0S2bhl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:95:1f:76:76:f1:2a:14:a7:39:c8:de:12:1a:1b:ed:34:4e:
b8:22:cf:4b:3e:6f:a7:7a:b2:9d:b8:48:57:bf:de:49:47:fa:
75:49:33:7f:a1:55:f9:51:2b:8d:90:b1:35:6d:6c:6e:2d:85:
42:e4:be:c8:79:dc:d9:58:8d:33:7c:90:1d:fd:91:df:a5:01:
a4:f6:11:b4:43:bb:2b:f3:33:5c:75:7d:1d:b9:a7:a3:83:64:
07:7f:39:94:9d:49:a7:cb:9a:4c:5f:f0:fc:3c:0d:36:a6:ca:
85:50:9c:25:58:48:f2:08:2b:52:e2:12:65:73:d2:d8:19:dd:
cb:e1:46:c9:ec:06:b6:32:58:92:9b:e8:08:6c:5c:1a:ef:e8:
fa:dc:49:46:f0:2f:c9:d0:dd:9c:fe:27:2a:b8:b4:4c:0e:c0:
d1:25:1e:72:22:58:22:76:f6:a4:5e:53:c6:22:ed:d9:67:9c:
84:d8:3e:67:e8:78:8f:dd:63:6d:16:61:e7:2d:d5:70:a7:1b:
90:0f:91:8e:99:29:49:4b:13:ff:9d:db:01:8d:5b:19:75:41:
3e:72:8e:4c:f6:7a:8c:bc:95:19:06:a3:c0:bc:af:a1:68:d2:
96:ca:e1:56:50:ff:62:4a:29:d7:98:11:f4:9c:f2:ad:79:e9:
0a:4c:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:28:29 2025 by rpki-client