Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zuJH8FMa8w5rOTrfuk7aHqi2mzY.roa
File: zuJH8FMa8w5rOTrfuk7aHqi2mzY.roa (raw, json)
Hash identifier: KALFu0bHaa+/IqwDwxL940mcLFXiDpV18c1c4WIgKhA=
Subject key identifier: CE:E2:47:F0:53:1A:F3:0E:6B:39:3A:DF:BA:4E:DA:1E:A8:B6:9B:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC6DB8781198C9AC326B6F08DABD44FF6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zuJH8FMa8w5rOTrfuk7aHqi2mzY.roa
Signing time: Mon 13 Nov 2023 04:05:57 +0000
ROA not before: Mon 13 Nov 2023 04:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:c6db:51f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c6:db:87:81:19:8c:9a:c3:26:b6:f0:8d:ab:d4:4f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 04:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cee247f0531af30e6b393adfba4eda1ea8b69b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:2b:3f:dd:0d:da:97:6f:0f:4e:99:59:43:
b8:af:be:e8:c1:54:af:ad:a9:bf:79:97:9e:03:b7:
f0:70:7a:97:bf:c3:23:ab:17:c0:63:9f:c6:94:36:
73:95:2c:24:4a:58:dd:08:bd:b4:30:24:fb:cf:ed:
a4:83:a9:16:c6:7c:cd:a9:09:43:6e:a2:dd:cf:9e:
4e:41:15:e6:d6:56:79:41:73:b4:6f:cb:e1:5e:07:
7a:fc:2b:9a:3c:ea:eb:6e:36:b1:03:49:71:af:03:
0f:a9:17:8a:f5:56:7d:6f:4e:92:a1:9c:66:2b:d1:
c5:6d:76:ee:88:ae:53:1f:f7:ff:fe:00:4c:08:54:
50:46:91:a3:00:19:a3:ed:1f:3c:61:fd:69:e5:0c:
5c:34:38:bd:dc:78:e7:82:49:44:cb:c9:fd:2e:7d:
23:76:97:5a:13:b3:2d:f5:16:ff:b8:cb:e0:0b:c2:
b0:66:f2:8a:b0:41:18:c1:ff:c5:a2:f1:8e:55:54:
f6:35:07:0a:77:b8:d8:35:c3:d1:32:6b:13:c7:36:
ac:ce:74:7a:b0:93:4f:be:60:a8:b2:da:69:62:85:
b1:3e:1b:08:ae:9e:eb:52:a6:91:44:cb:75:c4:4e:
f3:37:2b:f9:50:cb:bd:da:3b:b9:2f:cb:5c:a5:2e:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E2:47:F0:53:1A:F3:0E:6B:39:3A:DF:BA:4E:DA:1E:A8:B6:9B:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zuJH8FMa8w5rOTrfuk7aHqi2mzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:c0:30:9a:c0:91:24:7e:7d:7a:66:98:da:a8:47:2c:11:c3:
bc:22:97:9c:d5:f9:91:b9:3a:1d:58:ba:89:17:87:13:94:d5:
fd:66:32:69:0a:70:fe:ae:91:bf:33:ed:75:9e:62:54:99:48:
68:8d:13:da:70:2f:37:1f:fb:d7:aa:f9:14:bf:e1:9e:5c:69:
99:50:b4:a6:c7:fc:57:53:e4:08:05:67:df:aa:56:e4:d2:50:
c1:2d:35:27:47:7a:07:2a:5f:0e:0a:56:65:8d:dc:0a:a9:b6:
fa:46:cf:bd:03:a9:da:7c:00:37:4d:f3:62:27:6d:88:d6:1c:
75:93:6e:87:8d:dc:cf:ae:87:82:13:4c:05:28:ce:74:a9:f2:
6d:2d:f4:9f:cd:d0:5c:75:1e:ff:d7:5b:8f:03:28:26:0f:75:
c5:b9:cc:3a:fa:10:c2:af:bb:1e:f0:5e:fb:df:2a:94:2e:4b:
69:5a:c2:09:b7:ce:40:6d:8e:6e:8e:84:df:98:4d:cd:ff:d0:
31:f2:02:16:95:1c:8b:34:da:49:10:e5:4d:1d:91:a2:0b:cd:
9e:12:99:7d:a1:2f:80:d0:1e:37:3d:64:9e:7b:43:72:ea:8d:
c6:da:92:61:b1:d2:93:73:f7:f3:c9:54:44:79:1f:38:55:60:
1e:5c:3f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:06:48 2025 by rpki-client