Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zBL4LcYIeiloi3e9IyfHRjRTc4Y.roa
File: zBL4LcYIeiloi3e9IyfHRjRTc4Y.roa (raw, json)
Hash identifier: Adi2JLyAbZ+2gQ7QLvBw+4ZB9a7hhjY2Qx1CrPOiuEk=
Subject key identifier: CC:12:F8:2D:C6:08:7A:29:68:8B:77:BD:23:27:C7:46:34:53:73:86
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C55FCBCA76379C2D1FF323C0F504BFEC3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zBL4LcYIeiloi3e9IyfHRjRTc4Y.roa
Signing time: Sun 10 Dec 2023 23:07:55 +0000
ROA not before: Sun 10 Dec 2023 23:07:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:55f9:986b/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:55:fc:bc:a7:63:79:c2:d1:ff:32:3c:0f:50:4b:fe:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 23:07:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc12f82dc6087a29688b77bd2327c74634537386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:0b:5c:37:fe:9b:73:d2:3e:5b:15:5b:87:
0a:aa:56:1b:16:6b:68:c2:ab:6c:67:3d:ee:42:9a:
de:e5:35:05:ee:fd:f8:d1:7e:50:44:3b:a2:fa:e2:
3d:a0:93:08:4a:89:a7:fb:b9:e2:00:d3:1c:a4:ac:
35:f7:8a:2c:9a:07:a4:1e:ae:5b:a4:ec:0f:66:ac:
79:60:cd:ec:dc:d1:21:b9:7a:ee:e4:8f:75:04:20:
fe:03:b8:7d:80:ec:e0:88:d4:a1:de:bc:d0:67:55:
18:f7:07:4b:0c:ca:ae:7c:3a:fa:2d:38:50:71:2c:
49:9b:79:62:5f:df:ba:e2:63:bb:f4:32:12:27:11:
07:53:66:37:ef:fe:8d:af:4e:b3:3a:aa:02:75:49:
21:bf:b9:19:05:10:39:e1:81:c2:6f:3f:8d:b7:5a:
ad:28:d2:8c:46:5c:73:d7:0e:51:9e:d5:a5:95:ad:
a2:b6:a2:83:62:e5:13:47:db:c5:79:89:6f:7c:44:
64:8c:50:54:15:67:ee:7f:64:ee:ac:14:bf:76:ab:
f0:f4:e4:4f:8f:0b:b0:7b:f5:52:8c:d4:d6:4c:6f:
49:34:ae:86:05:44:2d:c5:0b:40:fe:81:5d:11:6f:
76:ea:ba:1d:54:7f:f1:f7:de:1f:e9:04:af:64:7d:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:12:F8:2D:C6:08:7A:29:68:8B:77:BD:23:27:C7:46:34:53:73:86
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zBL4LcYIeiloi3e9IyfHRjRTc4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bd:86:bd:01:1e:70:d1:d6:76:9c:1f:8c:6b:b7:37:27:45:d8:
4d:74:e8:04:42:ef:54:77:20:b6:6c:7c:ea:ea:6b:01:32:ce:
c4:43:16:c4:3d:3a:9d:28:99:06:43:45:f2:d8:bc:bc:60:4b:
a0:b5:d5:58:35:dd:41:02:00:d8:a8:2e:c6:87:4c:e8:a7:1b:
89:9c:77:69:30:84:f5:ac:b4:13:a2:4a:19:3a:50:8b:e6:ac:
7a:83:99:52:de:f9:26:fa:0c:df:35:01:09:18:3f:52:fc:e9:
4c:5d:b5:07:0b:58:d6:13:2e:7d:ec:3a:76:e8:84:45:74:2f:
ee:51:59:df:df:41:7c:37:e2:1e:f0:a0:e5:d0:f3:b9:b3:bb:
2b:af:55:cb:48:b2:4b:fe:9c:b5:87:e5:64:b1:3e:9b:82:44:
b5:9b:42:d7:7c:fc:c7:a1:3a:1b:aa:b9:e9:ae:7f:0c:c2:dd:
87:ba:3f:32:04:56:2e:39:7d:49:57:0d:e0:eb:af:55:25:97:
5e:34:95:50:ec:77:ab:e7:06:9c:93:b7:32:35:f3:ea:39:7c:
18:b7:1c:5b:7a:bd:95:52:d5:ff:12:f1:c8:1d:6a:1c:c2:d5:
97:7a:3a:61:57:07:4b:ca:64:30:5b:b2:0e:af:00:e7:fc:e4:
0b:96:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:07:12 2025 by rpki-client