Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zo7ab8i3_89Mzpiw-_gyaYF25cw.roa
File: zo7ab8i3_89Mzpiw-_gyaYF25cw.roa (raw, json)
Hash identifier: jy4X0bW827zEK9e9ncsMIYqKUXaHloMobalChyuvhVM=
Subject key identifier: CE:8E:DA:6F:C8:B7:FF:CF:4C:CE:98:B0:FB:F8:32:69:81:76:E5:CC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C303DBD206936512E8D4F7C773539306A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zo7ab8i3_89Mzpiw-_gyaYF25cw.roa
Signing time: Sun 03 Dec 2023 15:13:21 +0000
ROA not before: Sun 03 Dec 2023 15:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:30:3d:bd:20:69:36:51:2e:8d:4f:7c:77:35:39:30:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 15:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce8eda6fc8b7ffcf4cce98b0fbf832698176e5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:bc:9e:b7:3a:f7:d3:94:6a:08:e6:14:b0:
bd:56:97:0e:c8:9a:00:03:83:d3:14:14:99:21:51:
ae:16:d5:4a:da:bd:cb:a9:3c:81:f0:4e:a3:e2:43:
01:16:06:25:62:f4:8f:e0:de:e0:54:1a:ae:b4:e5:
5d:ff:75:0b:6e:44:31:ea:bf:20:7e:ca:d5:d5:bb:
02:00:7e:5c:da:d5:37:06:7b:bd:05:2f:36:c4:3c:
2c:ce:70:ac:73:a2:47:cc:0d:e4:28:72:c3:ab:25:
70:bb:a9:31:06:d3:48:4b:c0:1a:40:92:30:1b:b4:
3d:67:9f:5b:62:2f:b7:60:da:3b:bf:35:f7:8e:8d:
2f:50:d6:92:72:09:13:f0:c3:d4:da:73:87:d5:34:
81:95:b4:ca:bc:97:a9:33:c4:a5:3f:47:d2:72:a8:
58:57:d2:56:43:35:2c:06:b7:56:67:1e:f5:bc:a8:
f7:3c:38:4a:b9:4c:8b:57:90:d2:51:e4:19:c9:74:
2e:59:8f:f7:a5:b3:3e:4b:23:3a:a5:48:6f:75:16:
e1:28:a9:73:16:f5:d1:48:10:1f:c1:5d:ae:3c:47:
bf:d3:dc:79:ee:d3:1f:10:9c:2b:68:9b:7f:bb:c0:
18:08:33:21:29:e7:16:f7:5d:43:d1:8b:71:d8:e6:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:DA:6F:C8:B7:FF:CF:4C:CE:98:B0:FB:F8:32:69:81:76:E5:CC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zo7ab8i3_89Mzpiw-_gyaYF25cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:4e:df:b5:be:33:4a:0b:ec:73:3b:8b:c1:3a:cb:82:4e:25:
fe:67:85:e2:47:ee:46:77:20:f6:db:3a:5a:8e:26:f7:7a:16:
4d:2d:9f:75:6f:8d:7a:c8:ef:11:cc:5c:99:ab:85:2a:f0:03:
08:4d:04:28:de:75:18:f8:10:e4:35:4c:97:bd:e8:b2:ab:f0:
22:33:ec:bb:12:84:f8:04:05:5d:80:66:73:24:18:d5:55:5a:
50:a4:0c:47:78:4f:de:4b:5e:59:d2:68:62:00:db:dc:f5:da:
e9:42:5e:53:16:97:ff:80:9f:d3:d1:38:7a:16:cc:04:07:d7:
64:5b:fa:84:54:3f:ac:1e:5c:b8:17:35:46:7d:1e:09:49:18:
ce:ca:ca:50:fe:54:d2:ee:37:e3:c4:a5:7b:d7:27:32:41:e9:
6c:bc:a3:d7:73:e2:2b:90:e9:65:ad:1b:e4:63:e2:b6:4c:12:
d6:f5:ad:40:32:19:5c:94:b1:5d:04:14:fb:fa:60:48:e4:4e:
49:fd:5c:d9:bf:de:b1:2d:66:07:43:5a:fc:67:ba:1e:58:de:
b5:7f:73:bc:a3:34:c7:c5:ff:7f:bd:e4:90:28:86:6e:74:07:
50:eb:db:5f:16:93:f3:3d:31:ff:bc:50:88:b2:25:03:83:81:
67:e1:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:20:38 2025 by rpki-client