Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZoJUPnSr0Fga61fRWD_788d-4b0.roa
File: ZoJUPnSr0Fga61fRWD_788d-4b0.roa (raw, json)
Hash identifier: boMdDNW5JJx5upNgqvlIrEb+ZJHmWO5wSfdAkwuav4w=
Subject key identifier: 66:82:54:3E:74:AB:D0:58:1A:EB:57:D1:58:3F:FB:F3:C7:7E:E1:BD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C194B0B803683354A92940C415774CB85
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZoJUPnSr0Fga61fRWD_788d-4b0.roa
Signing time: Wed 29 Nov 2023 04:16:37 +0000
ROA not before: Wed 29 Nov 2023 04:16:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:4b:0b:80:36:83:35:4a:92:94:0c:41:57:74:cb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 04:16:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6682543e74abd0581aeb57d1583ffbf3c77ee1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e6:60:53:3f:fd:d9:63:ac:c0:87:91:41:b7:
fe:93:cd:35:f0:51:39:94:63:a5:45:0d:9b:a1:d7:
a1:57:e5:53:fd:2b:05:05:09:f7:6e:fc:e8:1b:c3:
19:c0:7b:59:77:b8:f7:50:c6:41:d7:bb:15:fc:c1:
7a:0e:23:24:39:01:66:49:f8:8d:4f:cb:74:ee:ac:
8a:18:36:0c:09:4d:ea:c4:c0:34:61:a9:9f:7e:32:
87:73:28:77:ad:44:2a:a5:21:c9:c9:73:e8:2a:71:
68:58:84:6d:73:bb:b1:c2:9c:c3:5a:80:c5:25:1f:
6c:6c:f4:fe:73:4d:29:d6:c7:f5:c1:a1:1b:23:20:
9b:ac:c8:d8:6a:f9:15:f7:8a:e7:48:15:8d:fc:a4:
e4:40:f1:be:ef:d0:ec:b8:eb:c9:0c:26:8e:c9:83:
8e:65:4c:81:ea:3a:e7:74:87:da:5c:d7:c3:c2:64:
58:7d:0d:77:4e:cc:07:c8:06:52:69:7c:66:de:e5:
d7:a6:d2:aa:c7:a9:bb:5c:a7:c9:54:bd:89:3f:19:
bd:b6:cf:82:c3:0d:d3:b5:42:a5:ed:ce:17:88:54:
c1:9a:21:ac:3b:41:b3:36:9d:60:45:90:ca:07:70:
2b:31:a1:f4:f0:ba:f1:2f:1a:5f:ba:61:7e:9e:27:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:82:54:3E:74:AB:D0:58:1A:EB:57:D1:58:3F:FB:F3:C7:7E:E1:BD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZoJUPnSr0Fga61fRWD_788d-4b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:0d:1d:38:a0:bc:53:a0:a9:5e:7c:65:14:cc:b9:4a:bf:9b:
68:77:21:bf:52:26:cd:54:9f:2f:7c:25:49:e9:6a:0c:68:1c:
00:c2:85:ac:b6:a2:61:53:c8:60:f2:24:d3:ea:6a:23:e5:06:
6a:2e:5c:73:92:21:0e:fb:60:7c:5d:5b:0f:ea:55:51:8f:39:
aa:11:23:14:e0:28:6e:8f:44:3c:df:e8:28:c8:9a:b8:45:da:
c8:b9:ba:51:38:09:69:f0:e7:20:d3:96:57:df:e4:77:cc:22:
f9:75:58:5f:a7:f5:bc:ac:99:c0:3d:d0:71:40:c7:a5:b6:d7:
4a:3c:cc:f2:15:be:a5:c5:0f:91:ba:35:2e:35:f5:53:be:f1:
ae:39:c5:cb:71:32:4b:2c:56:e7:30:36:af:6a:f0:1b:8b:4c:
c4:0b:d7:ab:c6:6f:c4:b3:28:1e:ef:42:d0:16:24:0e:d1:55:
33:9a:82:5d:3c:db:cc:c2:74:1f:33:5b:60:3c:e4:4d:a1:0f:
3a:10:3b:ad:5f:b9:7f:81:cd:92:cf:cf:c7:74:22:ca:00:3d:
87:d6:fe:38:55:b1:17:da:4f:f4:56:93:ae:9a:b8:1e:ef:86:
12:92:45:05:50:7c:74:60:b8:b2:da:21:7d:ae:6f:57:fe:2d:
bb:ff:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:27:48 2025 by rpki-client