Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zFhnRxBcajKW5BtJ6FKuLY8sGIo.roa
File: zFhnRxBcajKW5BtJ6FKuLY8sGIo.roa (raw, json)
Hash identifier: +Jbt5vIvWHv+EXMbMvtQAMGGshPSMevgFANtLqVBYq4=
Subject key identifier: CC:58:67:47:10:5C:6A:32:96:E4:1B:49:E8:52:AE:2D:8F:2C:18:8A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9BF34F85A5CCAA35125B7A581A36BC54
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zFhnRxBcajKW5BtJ6FKuLY8sGIo.roa
Signing time: Sat 04 Nov 2023 20:08:15 +0000
ROA not before: Sat 04 Nov 2023 20:08:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9b:f3:4f:85:a5:cc:aa:35:12:5b:7a:58:1a:36:bc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 20:08:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc586747105c6a3296e41b49e852ae2d8f2c188a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:29:5a:a4:ee:72:95:16:26:35:eb:f7:62:
54:cf:d7:33:d9:54:b5:58:59:65:0c:c0:47:85:4f:
4d:9a:35:5d:52:4a:a0:ef:fb:47:a1:d6:cf:54:6c:
c4:ef:69:a0:e2:05:ce:e1:33:53:b3:87:d3:14:d0:
50:f2:47:2b:85:00:1f:32:79:75:7e:c4:a3:76:b7:
90:62:7c:3c:de:10:0f:fd:06:7f:68:06:72:24:28:
df:c8:87:28:fc:bd:cc:a0:55:9c:d9:24:e2:43:f5:
1e:c0:b7:69:94:6b:c8:72:c7:c4:e8:56:89:89:f6:
f7:30:1c:5b:33:c4:3e:1b:8c:ee:22:c5:e2:96:31:
35:ea:5c:bf:1a:4c:1b:23:e4:7b:b1:c7:c1:4b:5d:
a3:ce:f8:9f:21:49:e7:4c:62:23:d4:1e:45:ec:ba:
6d:b4:60:b9:3b:a4:1d:43:92:b3:cb:f7:1d:b8:40:
76:f2:4d:c8:a3:f2:77:e1:b1:fa:a5:28:79:64:1d:
a8:b5:b3:3e:2e:a9:56:94:f6:e6:90:69:87:db:8f:
df:ec:ad:0b:f4:5f:c6:dc:a1:02:0e:72:97:ea:c1:
d3:fd:5c:db:4c:74:a9:ca:b7:f9:ac:50:b1:b3:fe:
27:1c:64:f3:ae:d8:95:d5:2d:bb:93:52:23:ed:aa:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:58:67:47:10:5C:6A:32:96:E4:1B:49:E8:52:AE:2D:8F:2C:18:8A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zFhnRxBcajKW5BtJ6FKuLY8sGIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:74:66:b2:12:53:88:b4:07:97:88:b3:ec:04:9c:44:81:65:
e7:8d:47:39:ad:e2:bc:81:51:36:b1:ba:bc:ba:3e:b5:84:c3:
dd:78:26:73:57:fb:5d:8b:d1:33:fa:11:8e:43:f4:f0:38:23:
59:6e:c1:d6:ba:43:70:60:61:51:ec:ce:bf:4c:b9:e8:24:8c:
8a:e7:71:27:a5:23:52:5a:3d:5c:63:dd:b9:88:54:4b:09:68:
a4:e0:c2:29:f8:b5:f2:a5:03:d6:43:7c:33:de:bc:30:8e:11:
1d:80:a0:73:38:87:36:a4:26:f0:6e:23:ac:c1:38:3a:34:1d:
3f:d6:d8:6c:e4:44:22:d5:68:5b:b9:bc:e6:c5:b5:63:94:9d:
f5:a3:bc:e3:e8:c6:ba:36:5f:eb:e7:ec:eb:f4:c3:46:da:3c:
bc:81:a8:47:78:31:e1:42:fb:ad:fb:49:e9:f7:62:2a:60:c4:
cf:4a:b0:87:f6:8f:e0:8c:d9:9b:cb:35:d7:8a:c8:25:60:d8:
5c:c8:64:b2:6a:56:d6:cd:75:85:82:e6:1f:af:6e:59:c7:47:
bd:17:f3:38:9d:3e:40:1f:46:ad:62:63:82:0d:49:32:90:ca:
fb:7b:12:e6:26:82:a8:17:9f:06:b1:71:56:2d:a9:0e:9e:b5:
30:86:31:24
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYub80+FpcyqNRJbelgaNrxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA0MjAwODE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzU4Njc0NzEwNWM2YTMyOTZlNDFiNDllODUyYWUyZDhmMmMxODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAkpWqTucpUWJjXr92JUz9cz2VS1
WFllDMBHhU9NmjVdUkqg7/tHodbPVGzE72mg4gXO4TNTs4fTFNBQ8kcrhQAfMnl1
fsSjdreQYnw83hAP/QZ/aAZyJCjfyIco/L3MoFWc2STiQ/UewLdplGvIcsfE6FaJ
ifb3MBxbM8Q+G4zuIsXiljE16ly/GkwbI+R7scfBS12jzvifIUnnTGIj1B5F7Lpt
tGC5O6QdQ5Kzy/cduEB28k3Io/J34bH6pSh5ZB2otbM+LqlWlPbmkGmH24/f7K0L
9F/G3KECDnKX6sHT/VzbTHSpyrf5rFCxs/4nHGTzrtiV1S27k1Ij7ao+AQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMxYZ0cQXGoyluQbSehSri2PLBiKMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvekZoblJ4QmNhaktXNUJ0SjZGS3VMWThzR0lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKZ0ZrISU4i0B5eIs+wE
nESBZeeNRzmt4ryBUTaxury6PrWEw914JnNX+12L0TP6EY5D9PA4I1luwda6Q3Bg
YVHszr9MuegkjIrncSelI1JaPVxj3bmIVEsJaKTgwin4tfKlA9ZDfDPevDCOER2A
oHM4hzakJvBuI6zBODo0HT/W2GzkRCLVaFu5vObFtWOUnfWjvOPoxro2X+vn7Ov0
w0baPLyBqEd4MeFC+637Sen3YipgxM9KsIf2j+CM2ZvLNdeKyCVg2FzIZLJqVtbN
dYWC5h+vblnHR70X8zidPkAfRq1iY4INSTKQyvt7EuYmgqgXnwaxcVYtqQ6etTCG
MSQ=
-----END CERTIFICATE-----
Generated at Thu May 15 04:00:22 2025 by rpki-client