Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zWuaShu8as0djJn2SZGUUw5xAqw.roa
File: zWuaShu8as0djJn2SZGUUw5xAqw.roa (raw, json)
Hash identifier: 9MgfOo6G7tlqp4qOustchc/+Herk9f82QAsIu8QEni4=
Subject key identifier: CD:6B:9A:4A:1B:BC:6A:CD:1D:8C:99:F6:49:91:94:53:0E:71:02:AC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C63B5C6D2A6472F1163539AC5FCBADF7A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zWuaShu8as0djJn2SZGUUw5xAqw.roa
Signing time: Wed 13 Dec 2023 15:05:06 +0000
ROA not before: Wed 13 Dec 2023 15:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:63b5:1fbf/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:b5:c6:d2:a6:47:2f:11:63:53:9a:c5:fc:ba:df:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 15:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd6b9a4a1bbc6acd1d8c99f6499194530e7102ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:02:16:e5:9a:51:bc:9e:ad:96:1e:14:7b:
2d:1c:b9:12:ef:bb:80:6b:d6:5f:c5:07:2a:fc:72:
17:d1:90:cd:80:f0:5c:91:d9:42:55:67:81:3d:68:
08:b2:dc:49:f6:48:8b:11:ba:79:fc:40:62:9d:48:
0c:39:f1:f9:4e:fb:8e:a5:14:b9:4f:0b:88:be:0f:
2f:1c:81:59:75:af:46:b4:3c:7f:e6:fd:06:5c:33:
05:85:af:3d:87:2b:eb:1a:08:ca:7b:25:2a:55:1c:
34:f2:8f:97:84:f6:17:69:7d:15:fa:64:52:90:21:
d7:0d:2b:bb:d0:c5:0c:41:d0:3a:b9:c2:3d:dc:ae:
14:74:d3:fa:59:f2:d4:00:2a:0b:36:37:0c:27:d0:
2b:7f:46:65:1d:7d:f9:e2:46:9e:53:ff:12:0c:bb:
2d:27:47:6f:30:a0:d3:fd:9a:db:d7:4a:67:b9:90:
af:39:24:9f:28:43:f9:5d:d8:8e:c6:2a:bd:e3:f1:
8b:39:d0:09:69:64:9e:28:78:ac:c0:e0:da:65:c3:
78:92:8c:1b:0e:c4:70:7e:f9:16:95:ba:7e:6b:1a:
bd:c8:f7:8a:48:5a:5d:b2:bf:28:a5:e1:a2:4e:81:
9d:3f:33:5a:fa:25:0c:65:39:be:fd:38:ea:83:4a:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6B:9A:4A:1B:BC:6A:CD:1D:8C:99:F6:49:91:94:53:0E:71:02:AC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zWuaShu8as0djJn2SZGUUw5xAqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:02:ed:b4:6e:ab:b6:14:12:12:f4:d3:d4:78:09:ef:87:9f:
21:38:fb:89:be:6c:e4:03:fd:b0:8b:93:19:4a:a8:34:5f:94:
55:e1:8d:26:5d:e7:7f:b0:92:3f:1e:71:55:eb:a4:2a:9e:07:
fc:3b:42:1b:9b:dc:b9:38:85:e8:d5:96:65:66:da:6d:16:55:
c7:c2:95:84:70:ef:fa:9a:8a:02:16:c0:4c:38:d2:dc:1b:32:
0f:26:92:64:26:69:a0:fb:f3:0a:85:c1:ab:de:8a:7c:1d:98:
9f:7c:eb:c2:3c:61:90:00:c3:1d:f3:0a:67:c9:58:a4:3e:e2:
9a:d3:16:f0:c3:22:5d:e4:75:7b:f5:af:5b:62:0b:c5:64:c5:
c7:f7:86:76:5c:b3:65:e7:eb:36:db:99:db:1d:15:f5:12:32:
5c:dc:66:f3:4d:8d:f2:8c:db:14:7d:73:d7:4d:dd:2e:7b:4f:
92:85:1f:5f:ae:1a:6b:b5:70:ad:61:28:4b:4e:81:21:da:19:
4a:a5:0c:00:dd:11:e6:d4:35:ee:65:77:97:0f:4d:8c:93:26:
bd:43:bd:cd:1c:75:a8:7d:51:3f:0a:8d:b1:68:ba:98:68:0f:
1f:b1:e4:7c:93:c0:a0:01:cf:36:3a:35:0d:59:d3:dd:77:69:
c7:02:ed:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:03:51 2025 by rpki-client