Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zbQl4xu3q3tviUAj0lLwig6qnUM.roa
File: zbQl4xu3q3tviUAj0lLwig6qnUM.roa (raw, json)
Hash identifier: ZaPPbwGDvkmuuUWSP7D85JrLcWi8SQ3qi2QNBjOPqVw=
Subject key identifier: CD:B4:25:E3:1B:B7:AB:7B:6F:89:40:23:D2:52:F0:8A:0E:AA:9D:43
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C032D2D6C33E5569401903B8ED939A57E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zbQl4xu3q3tviUAj0lLwig6qnUM.roa
Signing time: Fri 24 Nov 2023 21:12:21 +0000
ROA not before: Fri 24 Nov 2023 21:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:2d:2d:6c:33:e5:56:94:01:90:3b:8e:d9:39:a5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 21:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdb425e31bb7ab7b6f894023d252f08a0eaa9d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:76:0c:79:e1:b7:6d:f7:85:5b:70:7a:be:
06:f6:96:4b:96:0c:8d:53:b5:ad:a2:4d:0f:b6:e5:
14:cb:9b:f7:15:4d:98:c9:ef:e1:d6:0b:d7:37:d6:
e1:09:5a:eb:f1:54:09:ea:f1:5e:9c:a1:fe:84:13:
ae:b4:f4:85:b3:ca:08:08:9f:38:ef:c5:f7:49:db:
35:0e:6c:76:b7:3d:7b:cf:67:6f:51:13:de:83:66:
91:ce:c8:77:1f:64:56:b2:7f:c7:e2:ba:83:89:c2:
34:63:23:38:ed:25:49:40:0e:cd:d7:72:9d:92:7c:
38:5d:e5:de:22:44:da:58:c6:b2:ea:f8:c8:42:f4:
f6:e1:d5:3e:c1:6b:13:9b:c2:3c:f9:ad:b1:9a:56:
ce:8c:81:67:4b:0f:8a:68:dc:4a:ab:ed:99:18:9f:
42:63:35:9d:7a:13:da:a6:64:bb:41:a7:5a:15:3c:
0b:6c:33:6e:c6:aa:5c:5e:64:fa:56:d3:62:95:c5:
0a:aa:ea:98:86:e4:28:6b:b8:7b:2c:ae:7b:b5:b3:
e7:5d:54:06:a4:f8:77:e9:75:2d:3d:42:ef:c3:81:
e2:6a:e8:e3:f9:83:e8:7c:09:70:f4:fa:c0:ab:40:
4e:a0:e8:2a:46:f1:4e:5c:02:c5:eb:fb:2a:8c:45:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:25:E3:1B:B7:AB:7B:6F:89:40:23:D2:52:F0:8A:0E:AA:9D:43
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zbQl4xu3q3tviUAj0lLwig6qnUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:d2:72:67:a3:0a:53:09:92:d1:f4:74:77:22:a4:47:97:38:
be:cf:85:ae:09:8f:e4:8f:09:48:76:ae:0e:8e:35:3d:92:7d:
83:68:bd:37:1f:09:ef:1b:6c:34:dc:91:28:fa:ed:19:41:92:
d4:63:5a:69:99:55:63:ff:67:0b:0b:11:f1:22:90:73:6e:a4:
2b:c7:a2:8f:bd:d3:ee:25:f7:13:0e:9f:59:7e:27:3e:c4:9e:
7f:92:30:1b:13:b8:72:10:76:ca:ba:ac:ae:aa:25:09:06:38:
bb:b1:15:75:17:07:7f:18:7a:b0:c4:ad:69:9b:a9:98:9c:2f:
d3:6a:6e:75:b6:b0:d5:6d:fc:5f:5d:b0:f2:fc:7e:79:ea:0d:
d9:39:f8:54:3a:ed:f4:86:eb:2c:93:4d:bf:83:98:5d:79:41:
a1:4e:1d:1f:73:04:e6:d7:88:65:15:06:80:e3:af:7d:6d:66:
c2:8b:72:37:f4:ad:b3:eb:86:db:9f:f6:6a:b6:c3:3a:21:5e:
fc:6e:9e:07:9c:7e:f6:bd:7c:b7:ac:28:62:a8:f7:0a:97:f1:
77:44:51:ee:14:a9:e8:d1:73:34:81:51:3d:6e:04:fa:16:cb:
fe:65:06:3b:34:75:21:5b:cd:b3:58:9d:58:bf:d4:a1:bb:f6:
71:6d:45:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:28:22 2025 by rpki-client