Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DAlzjRGu_NZ4EtKBiEg_dtDmxho.roa
File: DAlzjRGu_NZ4EtKBiEg_dtDmxho.roa (raw, json)
Hash identifier: d7JcaI+ShyEQ6R/y2U1EUkEA1V/MzAoVN1fio4vK6Do=
Subject key identifier: 0C:09:73:8D:11:AE:FC:D6:78:12:D2:81:88:48:3F:76:D0:E6:C6:1A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2AD91FC72F568D2886F335923CA2AE5B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DAlzjRGu_NZ4EtKBiEg_dtDmxho.roa
Signing time: Sat 02 Dec 2023 14:05:21 +0000
ROA not before: Sat 02 Dec 2023 14:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:2ad8:3e35/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:d9:1f:c7:2f:56:8d:28:86:f3:35:92:3c:a2:ae:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 14:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c09738d11aefcd67812d28188483f76d0e6c61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:99:64:9e:e3:ba:ae:39:c5:3c:ef:71:70:
1f:1b:fb:b1:f4:76:78:a7:5d:7f:2d:85:a9:10:e0:
e1:7e:c4:0d:a1:1e:56:3d:e0:d9:1e:f2:fc:57:47:
87:6f:d5:0a:20:7f:7d:e9:15:4f:ce:33:f8:aa:4e:
40:e1:b4:c1:20:3a:68:2d:2d:d4:36:f5:1c:92:7c:
80:96:99:d3:56:4f:84:1a:ab:36:f5:9b:39:8b:c7:
4d:83:ab:71:2d:21:a5:96:9f:a7:0c:de:76:27:90:
43:5d:0f:5d:ba:bd:68:82:d9:54:70:cc:86:4e:c6:
e8:7f:69:04:6e:d9:17:c3:69:29:51:9b:71:d7:b0:
b2:ac:6a:e7:73:ea:5f:f7:86:43:a9:60:49:a3:bd:
4b:4c:2c:10:eb:4a:7b:24:a8:7e:34:6c:e9:d1:33:
32:75:9e:b6:f8:fd:2c:45:5e:04:b5:9c:cb:6e:3f:
c6:30:23:9d:68:c3:30:48:70:f5:c4:40:96:6d:ff:
3d:27:07:e0:33:4a:c3:65:1d:e1:a9:ce:88:40:ad:
8b:26:4d:53:58:ab:bd:e7:6b:da:55:dd:0b:cc:41:
4e:3c:15:dc:b4:38:45:e4:77:55:c8:8e:86:f7:04:
ff:b0:6b:ed:bc:71:9b:cc:8c:e1:6c:55:c5:fe:6e:
2c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:09:73:8D:11:AE:FC:D6:78:12:D2:81:88:48:3F:76:D0:E6:C6:1A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/DAlzjRGu_NZ4EtKBiEg_dtDmxho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:9b:bb:6e:39:f7:0c:09:e7:f1:72:74:b8:07:af:88:85:5c:
cc:0c:af:d7:b5:e9:2e:19:17:fd:6c:1e:2c:df:72:e2:d4:bb:
aa:c4:50:50:23:42:31:7c:ad:5d:ce:5f:a3:6d:b8:2e:59:00:
fd:85:78:1c:24:14:3b:5c:f3:2e:f5:33:1e:6a:8e:74:65:20:
86:8c:12:fb:ef:5e:6f:55:5e:1c:d2:b5:93:95:03:2e:08:57:
71:d5:5b:49:ca:7c:33:31:96:00:3a:73:cf:85:fd:87:ec:6d:
8f:81:62:ac:50:6d:5c:c7:a7:d1:34:c6:19:70:47:c3:30:90:
a5:37:74:9c:40:68:e5:22:5e:12:30:70:94:2a:64:d4:e6:e2:
d7:d2:cd:56:e9:85:0d:23:a4:fc:85:4c:c2:6b:fc:32:29:ea:
2c:59:cc:4a:58:68:ff:5c:9a:10:cf:cf:a5:65:71:70:2a:90:
f8:8f:ec:bb:93:f5:7a:4f:1b:6c:c2:e2:8f:f7:5c:f7:41:6f:
6e:2a:c3:aa:48:4d:44:87:29:c1:46:94:26:9c:8f:95:6c:79:
e6:bf:9f:17:ba:c1:73:d0:46:a9:d2:91:ab:51:9a:54:86:ae:
d8:4c:de:f4:77:18:c5:78:0e:85:91:7a:48:ce:15:16:48:c1:
96:5e:0e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:46:31 2025 by rpki-client