Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dznUhtg6-RizdpFvXh8X2Q5UbNg.roa
File: dznUhtg6-RizdpFvXh8X2Q5UbNg.roa (raw, json)
Hash identifier: SZ4Ofhyp9uSE7LM9lMTJVAGhX3zdarQVTvd8ALGCunU=
Subject key identifier: 77:39:D4:86:D8:3A:F9:18:B3:76:91:6F:5E:1F:17:D9:0E:54:6C:D8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C219E25532C616AEE77A16C364B7E05CC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dznUhtg6-RizdpFvXh8X2Q5UbNg.roa
Signing time: Thu 30 Nov 2023 19:04:21 +0000
ROA not before: Thu 30 Nov 2023 19:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:219e:17a8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:9e:25:53:2c:61:6a:ee:77:a1:6c:36:4b:7e:05:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 19:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7739d486d83af918b376916f5e1f17d90e546cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c5:62:f5:82:43:7c:d0:79:5f:38:03:89:58:
54:10:34:cc:fc:cc:d2:43:e6:6b:d1:74:11:89:9e:
ae:22:09:ef:fe:97:6f:73:3d:ad:fe:e6:24:3c:70:
58:43:c0:7e:27:c1:63:0c:78:95:30:27:6d:c7:b2:
06:b5:45:43:49:af:af:e5:ae:16:48:42:cb:22:e6:
2f:bc:98:a6:55:a1:06:c8:82:92:1e:9a:86:64:0a:
77:1c:dd:ca:f1:ef:8c:d9:80:a5:1d:18:7f:93:1d:
bc:54:f4:4a:78:dc:04:e4:2f:07:96:4c:20:d4:88:
41:ad:49:cf:f3:09:78:ba:01:03:a0:c9:d6:c0:cd:
49:f5:aa:ba:ea:64:5e:99:1c:96:d3:7e:89:00:6a:
ae:57:de:32:bb:88:e4:a2:7f:29:ba:09:2a:b7:ac:
25:a2:0d:7e:53:9b:84:6c:08:7b:40:51:7a:32:64:
62:8c:7b:67:ea:66:8c:20:c1:20:91:a1:a8:5c:17:
76:73:84:23:1b:35:ca:bd:8d:a3:85:cb:2f:f6:20:
6d:2d:78:a1:58:be:d4:be:0e:69:98:99:ee:42:04:
cc:ef:47:9e:b6:82:9a:2b:76:6a:95:88:08:ac:0d:
b8:10:7c:64:18:d0:33:db:e7:7f:dd:b1:74:eb:6e:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:39:D4:86:D8:3A:F9:18:B3:76:91:6F:5E:1F:17:D9:0E:54:6C:D8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dznUhtg6-RizdpFvXh8X2Q5UbNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:40:8a:74:9d:01:b4:1a:5b:e2:30:35:21:30:c7:ef:11:4e:
93:77:9e:11:ae:00:4b:e8:8d:a3:6a:37:14:64:34:24:bd:26:
c4:83:d3:49:61:64:28:9b:ba:11:7c:55:00:9b:59:7c:a2:07:
5e:bb:95:55:f7:f1:20:da:52:77:af:e5:9e:6a:21:41:69:84:
fe:75:ec:ac:7c:3a:0d:a6:97:03:ce:d4:af:80:79:fe:60:0d:
2b:50:42:7d:6a:de:24:56:3c:80:49:97:d5:7b:60:02:38:1c:
4e:89:94:61:31:6a:19:1a:63:f1:bb:57:dd:95:3f:78:b5:23:
38:ab:e3:da:06:ef:e4:1b:c5:de:07:4d:b4:35:bd:f3:7e:4a:
46:a6:9b:d3:02:25:cb:e2:7e:5d:f2:61:ff:de:f9:bc:78:76:
dd:9b:36:8e:3a:4a:99:ce:d4:8d:39:ea:3a:83:1c:2c:fa:d3:
82:98:2c:16:da:fb:b6:cf:cc:20:7d:41:1d:84:6a:ad:4c:81:
b9:d0:ce:68:3d:ae:02:95:3d:fe:a9:f6:4a:b3:db:b2:89:35:
44:5e:a4:72:44:bf:d1:e6:89:ec:e3:9d:b4:c4:36:6c:88:88:
74:5a:5c:e0:1e:ba:30:be:1b:60:de:00:c3:97:5e:ef:61:98:
7c:b8:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:32:47 2025 by rpki-client