Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z44hNy1EIeyxwerfmpZTEnlICdU.roa
File: Z44hNy1EIeyxwerfmpZTEnlICdU.roa (raw, json)
Hash identifier: 9ox7CIK18zHkdfEiGaL+DPHxlf5mCynx3y7xIAYrOEg=
Subject key identifier: 67:8E:21:37:2D:44:21:EC:B1:C1:EA:DF:9A:96:53:12:79:48:09:D5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C45E20668624BD1DF4D541FFE790FC253
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z44hNy1EIeyxwerfmpZTEnlICdU.roa
Signing time: Thu 07 Dec 2023 20:04:49 +0000
ROA not before: Thu 07 Dec 2023 20:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:45e1:8d55/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:e2:06:68:62:4b:d1:df:4d:54:1f:fe:79:0f:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 20:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=678e21372d4421ecb1c1eadf9a965312794809d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:25:5d:1d:73:52:bc:06:3e:11:d7:41:56:
5c:c9:48:2b:60:21:9c:ce:82:c6:41:d3:7c:93:63:
96:38:f9:83:49:77:5f:04:a8:80:0a:34:35:77:2a:
64:c7:70:f7:6e:7a:3a:fd:df:af:9c:74:69:0f:b0:
14:2a:aa:bb:9e:d0:0b:82:1e:f9:be:28:fa:7b:bb:
25:19:ba:f0:22:29:16:5b:40:16:1e:e3:81:dc:bf:
cf:1e:bc:17:38:4d:a0:d9:0c:eb:93:54:b0:b7:62:
e8:73:c9:01:5f:ef:fe:46:33:ec:6a:cd:35:66:78:
9d:59:d2:ee:07:80:ed:c0:fc:12:94:e7:c0:f0:d9:
92:26:f4:2d:14:b5:3c:9e:3b:a5:a9:a8:07:9f:a6:
5f:c6:44:a7:f3:38:13:5f:cf:91:28:58:fb:d0:38:
4b:fb:13:69:f8:1d:84:6d:ea:ee:d0:ab:56:97:f9:
64:34:78:24:39:43:e0:85:99:27:bd:1e:a2:20:56:
a9:45:cd:11:f7:5d:6e:46:b5:27:16:fa:f3:60:b8:
a3:11:2b:65:9b:16:aa:75:db:64:52:b2:2c:51:0a:
23:50:a1:80:24:69:ec:10:66:d1:a2:49:86:ab:f1:
51:4e:3c:00:b4:32:88:4a:16:bd:63:ed:df:92:c8:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8E:21:37:2D:44:21:EC:B1:C1:EA:DF:9A:96:53:12:79:48:09:D5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Z44hNy1EIeyxwerfmpZTEnlICdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:a0:82:00:63:13:a7:51:2c:6b:c5:49:42:de:cb:49:cf:07:
1c:e1:30:cb:13:dc:4b:31:4e:d3:2f:03:65:f0:7e:f9:8e:de:
8d:ea:3a:4b:e4:79:f6:3b:68:6b:99:37:05:f5:b0:ab:7f:16:
be:e6:39:7e:c6:65:97:ba:d3:6f:56:b2:60:f8:ef:75:e1:30:
1f:e9:9e:f4:43:36:d1:b4:1a:4a:1a:0e:77:29:2d:bc:f5:97:
86:68:b7:fe:72:d7:5d:ac:7b:a6:01:65:f4:24:9f:ef:3f:78:
63:25:4a:61:d2:73:26:2d:6c:db:45:17:b8:90:5d:37:27:20:
ae:4e:9d:1b:50:b7:93:26:9d:52:a7:f7:1f:5c:ed:81:2d:10:
83:3a:12:12:1e:1b:98:fd:6b:17:f2:c3:85:ad:56:38:e5:86:
59:e1:3b:e0:32:49:db:61:f2:e9:72:53:24:44:05:c4:c1:e0:
bc:b3:4c:44:56:46:0b:84:31:0f:ca:51:37:e9:0f:fd:12:d9:
dd:25:f0:49:4b:d7:56:26:82:f9:e5:62:2f:d4:ff:5d:93:91:
61:82:27:b6:a3:b1:d5:dd:a8:19:43:d9:2b:9a:9f:53:d3:05:
ed:85:c7:65:f3:4c:5e:36:fa:ee:29:e7:85:66:a1:81:a0:45:
9c:41:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:56:45 2025 by rpki-client