Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zENTHoIm8KM02zH3AKCJTbzKidc.roa
File: zENTHoIm8KM02zH3AKCJTbzKidc.roa (raw, json)
Hash identifier: 8FfPHR6YJfV8iEljtaQDWPj6sKZQK4NX/viVUfrFOag=
Subject key identifier: CC:43:53:1E:82:26:F0:A3:34:DB:31:F7:00:A0:89:4D:BC:CA:89:D7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5C05582046C50679785A41F27FA1DBEE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zENTHoIm8KM02zH3AKCJTbzKidc.roa
Signing time: Mon 23 Oct 2023 10:12:15 +0000
ROA not before: Mon 23 Oct 2023 10:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:05:58:20:46:c5:06:79:78:5a:41:f2:7f:a1:db:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 10:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc43531e8226f0a334db31f700a0894dbcca89d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:71:aa:cd:24:35:db:32:e9:7e:87:37:e2:
8e:1f:c2:e9:e3:1d:22:29:66:f4:c2:4f:4b:ce:26:
23:e8:30:1e:e6:ff:27:15:f5:f9:4a:8e:34:19:de:
7d:8a:3e:49:4b:d9:1d:0e:4c:a5:25:31:b7:98:f5:
c6:dd:34:7b:9e:50:50:bb:12:f4:9c:8c:ee:f0:0c:
cf:2a:93:c9:73:5a:b5:d2:30:6c:4e:b3:93:49:3b:
d8:0f:26:cf:97:e3:8e:c7:bd:a4:9c:d3:7f:a9:dd:
57:4b:b9:ea:7c:bc:e5:b1:04:0d:4e:70:19:5b:53:
e5:28:bf:01:89:9f:c8:d7:7f:5e:33:fb:1d:90:a6:
cf:11:0c:35:f2:e8:1f:2e:06:13:20:8d:da:23:44:
f6:bf:f3:40:06:34:76:2f:ab:ea:a7:0d:9b:c2:aa:
d5:0a:ae:8d:9f:da:41:41:08:06:26:e8:d7:64:ab:
62:cb:57:3e:c5:87:c0:58:cf:da:83:4c:19:27:93:
52:de:49:60:a2:0c:06:ab:e1:66:94:26:77:c6:96:
60:6b:4f:04:3e:5e:87:54:cc:c4:9e:98:91:5a:42:
05:46:eb:59:1d:09:5c:1d:76:b9:1a:5e:f2:7a:92:
2a:29:78:34:5c:81:dc:97:bd:1b:4a:9e:05:91:03:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:43:53:1E:82:26:F0:A3:34:DB:31:F7:00:A0:89:4D:BC:CA:89:D7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zENTHoIm8KM02zH3AKCJTbzKidc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:02:cb:d1:94:71:4b:c9:48:f5:02:35:29:86:ca:41:a3:57:
19:1a:c6:a8:24:ef:e4:d6:76:7e:bf:46:f1:82:6a:26:d6:c1:
ae:f8:90:6c:b2:1f:c3:7b:67:a2:17:70:23:97:84:b6:8d:e5:
22:9a:26:e2:00:e4:78:70:3b:aa:7d:d5:88:f5:57:fc:ab:ec:
02:d6:4b:86:46:46:ec:27:13:dd:5a:72:d0:8a:a9:00:0a:b0:
b4:90:8c:1d:9f:59:bc:e8:09:10:77:6e:83:33:8b:d4:23:5b:
75:7b:38:fa:e3:59:84:2f:02:a8:0e:55:d3:24:95:a0:7b:71:
92:82:b2:17:65:1f:cb:43:76:eb:7c:0d:ca:d9:ba:eb:88:be:
a8:d5:15:c1:ab:a4:b8:6c:a8:1f:fd:ad:ea:6f:46:49:e5:bf:
16:b8:c5:22:2f:7d:76:c6:43:14:94:1e:bd:d9:b1:59:0e:e5:
35:15:8b:45:8b:d5:54:ab:7b:c6:02:81:48:4c:4a:ad:e2:23:
51:1f:74:e3:e2:f9:07:1b:07:59:71:46:4b:0d:a2:50:70:87:
1e:28:c9:b5:92:cf:82:6c:cd:02:cc:95:4e:66:38:54:1a:84:
f9:f1:e7:03:23:02:39:43:ff:15:7a:a1:5a:ed:ac:40:8f:c8:
17:c1:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:02:21 2025 by rpki-client