Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZyNOdAKGv-WIczEWECyE8lvpC1E.roa
File: ZyNOdAKGv-WIczEWECyE8lvpC1E.roa (raw, json)
Hash identifier: Odqm5vzsaBpfaQgP4IjTL2X0JtqOwPIaMiw39XLjdAU=
Subject key identifier: 67:23:4E:74:02:86:BF:E5:88:73:31:16:10:2C:84:F2:5B:E9:0B:51
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCE61CC5DA05AD4276685ADCDF35475E0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZyNOdAKGv-WIczEWECyE8lvpC1E.roa
Signing time: Tue 14 Nov 2023 15:09:57 +0000
ROA not before: Tue 14 Nov 2023 15:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:61:cc:5d:a0:5a:d4:27:66:85:ad:cd:f3:54:75:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 15:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67234e740286bfe588733116102c84f25be90b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:20:c7:82:c2:21:5a:df:80:fc:3d:ea:db:4c:
ca:39:87:e5:50:eb:52:63:a4:55:4d:04:a9:52:44:
9a:43:94:01:8f:75:ae:29:b0:bd:11:52:ef:be:89:
3d:05:67:55:df:76:15:c9:1d:e3:28:d2:71:69:ad:
f5:80:70:f2:bf:ba:55:2a:53:9e:d1:91:d7:d5:a2:
95:2d:40:52:b0:91:44:12:81:10:1d:dc:89:0c:e8:
92:48:fc:76:2b:68:42:4f:aa:7c:2e:5b:61:ea:4e:
73:02:6f:e0:24:f5:99:e7:7f:46:b3:00:36:6b:00:
a9:0c:9f:db:23:ff:f9:4d:2c:45:c9:b5:18:2d:93:
12:91:be:43:e5:d9:97:49:8e:eb:a1:57:9f:ef:73:
a7:65:43:10:08:47:82:de:8c:5f:ae:b8:be:c8:e4:
70:78:b7:a4:7f:2e:ec:12:5e:69:aa:9c:ba:c2:4f:
28:12:94:44:34:af:be:3f:f7:d4:9e:78:93:ee:64:
27:4f:d3:72:97:35:29:0f:f4:84:fa:b7:43:b9:4d:
4d:3e:c9:10:6a:98:b6:9c:e8:e6:cd:bf:c9:3f:b0:
3b:98:a2:7f:65:a4:54:e7:3b:b8:a7:83:da:bf:f4:
be:38:fc:6c:6c:2b:2a:ba:d3:53:c5:18:78:e8:e5:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:4E:74:02:86:BF:E5:88:73:31:16:10:2C:84:F2:5B:E9:0B:51
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ZyNOdAKGv-WIczEWECyE8lvpC1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:1f:01:74:f3:3d:a1:9d:94:a9:25:c7:19:4d:ae:bd:49:56:
0e:3b:10:39:5a:9a:a9:73:8a:41:a4:70:6b:11:dc:6c:a8:d7:
e2:20:10:29:83:52:f3:ea:05:a9:fd:12:60:c6:16:ef:e6:cb:
2d:3b:5d:7b:c8:f0:b3:b2:24:30:4c:1f:00:4a:8e:5b:65:ab:
3c:75:55:04:12:8d:c3:ba:d2:ed:d8:dc:e9:fb:15:dd:6b:bc:
b5:5e:c6:d3:f0:1d:98:7c:6d:81:d5:7c:e7:e7:16:ed:b5:72:
56:97:56:97:2e:98:d9:8e:ae:db:8c:2a:6f:43:e3:b1:57:fc:
f1:1d:3c:d1:8b:93:de:41:58:99:50:41:8d:22:a1:dc:eb:12:
f0:49:2e:2f:78:75:d3:7c:93:0f:83:33:ba:bc:ed:f7:d0:f7:
b2:86:d8:c8:24:e5:50:54:33:7d:c2:94:99:b8:7b:7d:6c:a7:
f2:38:30:41:b2:0c:04:f2:54:d3:4c:77:1b:e0:88:fa:07:1b:
f1:8d:6b:04:8f:14:af:83:63:8f:b2:21:e8:e5:99:3d:2a:5b:
a6:9f:f3:45:8e:03:16:27:a9:c2:cd:71:20:ff:cd:68:e2:7b:
03:e7:cc:4e:34:30:e1:e8:81:cc:a6:74:b2:b7:d7:99:24:9f:
f7:8f:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:52:06 2025 by rpki-client