Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z0NL-yllpWwXSFCoZxrKXLvEfic.roa
File: z0NL-yllpWwXSFCoZxrKXLvEfic.roa (raw, json)
Hash identifier: abV/eGc2GGW/EH9EtnKhj55C66SBlbCORYIyXwRu+qo=
Subject key identifier: CF:43:4B:FB:29:65:A5:6C:17:48:50:A8:67:1A:CA:5C:BB:C4:7E:27
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C5A7BB66ECDB0D5F1FC172EADCC91B5A0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z0NL-yllpWwXSFCoZxrKXLvEfic.roa
Signing time: Mon 11 Dec 2023 20:05:06 +0000
ROA not before: Mon 11 Dec 2023 20:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:5a7a:caea/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5a:7b:b6:6e:cd:b0:d5:f1:fc:17:2e:ad:cc:91:b5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 20:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf434bfb2965a56c174850a8671aca5cbbc47e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:75:7e:7a:95:9f:bd:a8:20:31:0a:96:9a:
09:80:b3:33:52:9f:6b:e9:d5:d2:49:4b:b0:d2:61:
16:91:32:b4:de:3c:e8:7f:ab:d7:b2:f0:61:23:f7:
a9:25:73:21:f7:a3:f9:00:64:45:5c:a6:c5:e9:a3:
fa:50:e4:72:af:c2:14:73:54:b9:69:6c:a8:c9:45:
13:fa:56:a6:0f:45:78:1e:2a:cb:12:d4:13:7b:8a:
c3:7e:2f:76:d2:fc:d2:84:c8:ea:dc:55:c3:c7:d1:
50:82:93:31:bd:e2:75:d0:de:f7:b7:60:a9:26:ea:
0f:33:46:09:bb:2d:3e:11:e1:0f:91:92:f2:39:9c:
5f:d9:cd:51:2b:5d:a5:e3:58:08:bf:a2:9e:f5:2c:
90:05:1b:0f:a2:6f:ce:f4:cc:98:12:79:53:09:87:
ba:0f:f1:e2:dd:36:35:c0:93:98:e4:c9:15:b0:fe:
86:fe:5c:50:6c:06:53:f8:bd:4a:1b:eb:b8:38:16:
d7:e5:28:c5:1f:fb:7d:0f:40:1d:d7:4e:f6:b3:93:
47:a6:7b:24:0f:f3:87:f3:98:2b:e5:f4:6b:b7:03:
53:95:34:c3:fb:04:fc:1c:e6:14:8f:0b:21:d6:3d:
24:fa:5c:62:4c:ce:f6:cb:20:58:c7:79:71:40:2a:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:4B:FB:29:65:A5:6C:17:48:50:A8:67:1A:CA:5C:BB:C4:7E:27
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/z0NL-yllpWwXSFCoZxrKXLvEfic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:1b:0e:78:73:13:a3:54:2c:27:1b:0d:ba:1a:5e:c1:9b:b5:
4e:ed:52:52:71:15:70:e9:d9:50:8d:51:e1:99:1b:3f:49:78:
d9:fb:df:47:ad:33:8b:ca:dc:f2:ba:41:5c:88:49:ac:16:27:
9d:a0:17:99:d3:3f:1f:56:cd:21:27:38:eb:c0:d6:c9:55:ea:
76:1f:b4:44:4f:bb:e7:75:4e:74:13:95:ff:78:02:a9:b0:18:
db:f9:19:04:37:c2:14:9c:70:fa:ae:1f:c3:08:d8:f5:ec:97:
39:fa:e5:7f:45:8c:24:e6:c2:a3:d2:29:50:56:bd:e1:97:be:
94:53:6b:b5:52:06:ec:6d:29:95:c2:b3:52:6f:f7:39:39:2f:
9b:14:80:d0:9d:f8:41:de:b1:e6:0d:1b:0f:a2:f2:8a:b7:51:
19:ed:92:de:cd:da:8c:82:ba:48:7e:17:55:8a:86:fc:8f:54:
a1:47:87:93:3b:57:96:ac:57:53:b4:83:e6:20:5d:d8:6e:fb:
27:66:3a:ac:50:28:98:19:b9:59:d2:51:a3:00:f4:65:97:d8:
ad:30:cc:c7:e1:75:21:a1:52:85:01:b8:ec:ed:86:c4:02:a1:
22:0b:53:1d:72:e2:d9:92:9b:39:df:df:d6:c3:96:45:34:ee:
c0:93:14:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:21:38 2025 by rpki-client