Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ccmZLp_qxvCuYzK08fHpMchsq_s.roa
File: ccmZLp_qxvCuYzK08fHpMchsq_s.roa (raw, json)
Hash identifier: Mo3p4MuvjWK1JtFccHarhXJ6YR6W4bBB88tgZ5v59YA=
Subject key identifier: 71:C9:99:2E:9F:EA:C6:F0:AE:63:32:B4:F1:F1:E9:31:C8:6C:AB:FB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C25E9B2052D757C45B1EC057E9EEA3900
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ccmZLp_qxvCuYzK08fHpMchsq_s.roa
Signing time: Fri 01 Dec 2023 15:05:21 +0000
ROA not before: Fri 01 Dec 2023 15:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:25e9:2184/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:e9:b2:05:2d:75:7c:45:b1:ec:05:7e:9e:ea:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 15:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71c9992e9feac6f0ae6332b4f1f1e931c86cabfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:4e:75:4d:f4:37:41:1f:0c:a8:9f:e0:44:
a6:46:79:b7:6f:5e:6f:79:d6:30:41:69:b8:51:e2:
71:f3:2d:cf:33:1a:9e:04:0d:06:d3:04:7d:b7:b4:
d7:e4:69:22:7c:f4:8e:91:1b:e0:e3:20:39:1b:a7:
5f:25:d1:d8:a4:a1:e2:3b:46:f3:9b:82:de:03:6d:
d7:09:2a:b7:77:4b:b5:93:06:19:a0:d1:c0:22:64:
eb:b7:a0:7d:84:1b:fc:43:e7:fd:dc:c6:e6:a5:1e:
1e:21:ba:38:b4:96:f5:87:57:8f:a8:7f:5a:61:91:
fd:df:42:b9:98:6a:0a:25:a4:f1:90:bc:c5:a5:f1:
ae:d7:04:ed:8d:71:53:81:06:6f:c8:b6:ad:c8:80:
cf:6b:d3:fa:9d:d2:40:22:ff:6f:7a:37:36:8b:b0:
5a:45:0f:41:11:f2:49:59:d2:c1:4d:46:43:d9:1c:
be:b0:7d:fb:43:a1:16:ab:b3:eb:7d:bb:27:89:c0:
dd:3e:c7:0b:d7:f9:06:68:0c:d5:41:3e:3c:57:8b:
42:d9:06:fa:7a:c7:67:3f:66:4c:ba:0e:8a:6b:77:
50:0f:79:81:1b:49:51:a1:ae:93:ac:67:9a:30:99:
30:42:26:75:53:24:08:1a:9d:16:47:4f:02:cd:69:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:99:2E:9F:EA:C6:F0:AE:63:32:B4:F1:F1:E9:31:C8:6C:AB:FB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ccmZLp_qxvCuYzK08fHpMchsq_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:c2:c8:be:d7:41:8b:8f:7e:27:87:5b:62:21:2a:01:82:4b:
63:64:a4:49:2f:43:de:98:56:22:59:17:73:14:d8:c3:1a:58:
33:e4:70:38:48:97:48:bb:f7:52:99:28:8f:42:6c:ef:b7:0f:
eb:d3:bc:5d:90:5e:f5:45:9c:9b:f3:ea:48:17:d9:4a:33:45:
6b:9a:53:96:2f:bd:6a:1e:76:3e:fa:9c:36:e3:14:a7:69:1e:
75:15:2f:4e:df:5b:ec:1f:b9:b7:17:b6:26:9b:00:a6:cc:8e:
8a:57:86:ca:56:a6:28:11:86:eb:7d:07:05:59:0d:45:41:1c:
e7:46:e3:44:45:02:33:89:c6:e8:59:cc:3c:f0:4b:1b:5f:53:
c7:46:71:e3:41:d7:13:2f:de:3e:2e:f5:03:7e:51:63:f0:51:
57:a4:d3:cc:96:9f:52:e5:37:fe:e4:2c:59:92:5a:88:ea:0d:
98:0b:75:2d:dc:1d:a8:33:0e:4a:2b:61:16:00:b7:cd:17:ef:
4e:26:80:ae:ba:ae:f7:71:9d:24:02:02:6c:c2:dd:4a:e9:ff:
8b:76:62:4b:9f:fe:53:f0:50:7d:ca:0d:f0:11:2c:e6:6e:cc:
c0:8b:5a:fa:23:ed:a0:f4:83:aa:bc:b9:64:a8:25:7f:05:b2:
80:05:6f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:46:16 2025 by rpki-client