Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zt78hJ9NTIhRxGZ_29t-dqS3t2k.roa
File: zt78hJ9NTIhRxGZ_29t-dqS3t2k.roa (raw, json)
Hash identifier: bt/7hWAHrZ5oq0MntQutmi5GhWrhGkS3rEkZRFvyKTU=
Subject key identifier: CE:DE:FC:84:9F:4D:4C:88:51:C4:66:7F:DB:DB:7E:76:A4:B7:B7:69
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5E28D449AD45AF87432694E93244FFC9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zt78hJ9NTIhRxGZ_29t-dqS3t2k.roa
Signing time: Mon 23 Oct 2023 20:10:15 +0000
ROA not before: Mon 23 Oct 2023 20:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5e:28:d4:49:ad:45:af:87:43:26:94:e9:32:44:ff:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 20:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cedefc849f4d4c8851c4667fdbdb7e76a4b7b769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:42:63:03:e2:7b:a9:a8:8a:77:5b:7d:12:
c1:d7:dc:79:93:3b:ae:f8:af:4b:d0:dd:95:7a:76:
59:2c:60:39:4e:43:5f:1e:5e:b7:8d:ba:4c:72:55:
13:8d:55:70:dc:68:6d:d4:a7:d8:aa:ee:76:da:17:
f8:ed:ae:a6:61:ff:75:86:fe:d5:b8:55:0f:85:11:
19:9b:ea:e0:53:49:0b:e3:42:af:bf:40:ba:6c:73:
45:bf:f6:4b:9c:e9:ec:f5:2e:f1:15:5f:8e:ce:73:
93:36:a0:ee:92:55:e3:8c:81:af:55:af:49:b7:16:
f6:8e:57:1a:02:c4:47:31:a4:b4:cb:aa:ed:b1:3a:
22:97:20:b4:b7:27:2d:8a:da:66:bc:19:a9:ff:35:
58:5f:c1:5e:fc:e6:66:d9:3b:be:c1:cc:89:2c:9c:
f5:01:1b:59:15:e5:e4:36:7a:75:aa:15:0b:40:59:
97:35:b6:79:79:24:2a:fa:62:b1:3a:8e:fe:6a:13:
fa:e2:d7:6f:d1:ec:bc:9f:db:b2:3f:da:e5:f5:34:
66:a8:6b:d0:09:e1:d2:58:53:34:46:95:c0:a3:81:
bf:b0:6a:db:6d:a3:c9:17:d2:20:b5:6e:62:d8:68:
55:ae:3f:6b:23:04:8c:49:16:09:c1:a8:ae:d6:b4:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DE:FC:84:9F:4D:4C:88:51:C4:66:7F:DB:DB:7E:76:A4:B7:B7:69
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zt78hJ9NTIhRxGZ_29t-dqS3t2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:8a:76:6a:0d:72:2a:7a:2d:9c:50:a5:f2:82:38:f8:ea:d7:
02:97:d5:4c:4b:e7:4f:2a:62:e2:c9:43:89:f2:dd:e1:bb:ea:
56:fc:f3:de:7c:96:19:03:84:d8:a6:75:4d:2f:2d:5e:48:88:
2e:3f:99:95:4d:88:1d:2b:d8:6e:18:51:86:8c:6d:02:48:b9:
d5:23:a4:00:b8:57:62:1d:9e:ee:85:34:9f:b8:13:b4:84:0e:
a5:9e:54:36:c7:95:c0:58:ca:f6:58:d2:28:f8:28:1c:ce:5e:
18:26:c3:3f:05:78:27:a9:e1:58:4c:46:6e:24:cd:10:bd:0f:
73:dc:fa:e6:a4:0c:03:3c:f3:54:71:02:ee:90:4d:4c:83:19:
fa:6f:31:b5:a0:e5:d7:79:57:7c:a9:19:1c:f7:dd:98:bc:cf:
80:6f:a1:2c:8b:2c:dc:88:13:83:2c:e1:bd:87:6b:68:12:eb:
15:64:33:16:66:34:28:fe:66:64:6c:5b:a2:85:c0:23:1e:3e:
ad:99:db:fd:87:23:4d:b8:2c:dc:a8:28:c1:ae:4d:3c:23:16:
65:61:f3:61:66:09:7c:6f:49:8d:be:38:e4:ca:69:ce:5f:c3:
c1:83:c3:80:34:c8:95:f5:c0:b0:57:92:0a:86:2e:30:e3:f9:
20:e7:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:37:54 2025 by rpki-client