Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zBTLQafedFc2fJZF0jEfBxN6bts.roa
File: zBTLQafedFc2fJZF0jEfBxN6bts.roa (raw, json)
Hash identifier: OX6H1bnB6a1W4rgPfnTUWdoiF1pvmJJ5UY7AL8uTsgI=
Subject key identifier: CC:14:CB:41:A7:DE:74:57:36:7C:96:45:D2:31:1F:07:13:7A:6E:DB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1B9F2250284DAFA3DD7160B25B396784
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zBTLQafedFc2fJZF0jEfBxN6bts.roa
Signing time: Tue 10 Oct 2023 22:04:55 +0000
ROA not before: Tue 10 Oct 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:1b9e:6b1f/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:9f:22:50:28:4d:af:a3:dd:71:60:b2:5b:39:67:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 10 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc14cb41a7de7457367c9645d2311f07137a6edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:c1:40:02:b5:23:4a:cd:e4:9a:38:f3:d5:
27:e2:aa:d0:0c:89:ae:74:e2:3c:32:2c:92:51:f1:
e5:91:5b:7a:9f:f9:fd:77:6f:a1:11:04:88:b5:89:
c2:d1:e0:c6:c6:ae:40:34:fe:85:2d:be:0d:9c:f7:
93:6b:e2:cf:43:72:18:c2:91:38:78:ea:2e:63:3c:
14:01:3f:a2:6f:0e:89:86:30:bb:60:8f:c8:4c:95:
78:88:43:f2:00:6e:02:05:0d:81:c4:bb:ba:ae:dc:
83:8b:e4:5f:30:62:5f:1c:0b:a2:bc:95:58:53:7c:
a8:7f:fa:3b:6d:48:12:ad:74:ff:62:84:e2:34:35:
6f:38:2a:4d:ca:b7:41:25:1b:07:f5:d9:f1:96:58:
34:d2:b6:f0:d3:c8:ac:f7:c1:ae:c9:fe:9a:f8:c8:
12:5d:4a:b2:0c:3e:a0:12:2e:b2:22:5a:b8:68:04:
f1:2c:bd:03:82:47:cb:a6:54:4a:55:75:d4:7b:c2:
a4:06:d1:68:30:1f:04:99:90:05:47:bc:d9:d1:a4:
4e:ee:e4:a3:2f:c5:23:90:03:d2:b5:14:3d:19:d1:
41:fe:71:fa:07:6a:a3:2e:33:6f:fe:5b:7c:2d:2b:
de:40:1a:78:9f:75:cd:44:71:0e:64:1f:e3:89:9b:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:14:CB:41:A7:DE:74:57:36:7C:96:45:D2:31:1F:07:13:7A:6E:DB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/zBTLQafedFc2fJZF0jEfBxN6bts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:4b:24:4c:73:e9:b8:fe:ab:6a:a3:8d:18:1c:78:52:92:7f:
b7:d5:db:e7:ee:02:64:af:ee:54:19:43:b9:99:6b:b0:94:d8:
63:3f:d4:6b:ec:f4:f6:52:73:14:20:52:4a:ec:e8:be:0f:a6:
17:ba:57:3d:db:b6:a0:5b:18:a3:bf:ac:9e:84:c3:26:36:ed:
ed:9e:7a:80:c6:1a:56:73:e2:51:52:f6:7c:f9:1e:15:e4:a6:
d3:54:de:0e:32:0b:1a:c5:f5:cc:6d:5f:0c:42:e0:42:85:26:
52:98:b3:b2:fc:88:14:2d:b9:ee:92:e7:3b:2d:ef:5f:9e:24:
f3:a8:a5:d3:ac:3c:bc:d0:c0:de:00:f5:0b:c6:f0:34:4d:09:
9d:7d:af:c6:de:ac:84:f1:40:aa:e8:ed:72:d5:0f:da:df:50:
6f:8a:e3:e7:4c:3f:c9:fd:46:b1:6f:8c:9f:5b:33:0f:7a:a4:
6e:03:24:99:6b:6d:6b:f5:51:49:0e:35:0d:8b:8a:0d:c6:81:
c8:cb:92:18:3a:09:ef:ca:45:ba:20:12:7f:50:71:e7:10:5e:
69:85:0e:68:f3:dd:a0:1a:34:ce:4a:18:a5:a8:23:62:df:88:
d8:fd:09:13:93:e3:2a:11:17:73:03:06:88:d4:66:47:75:2c:
90:50:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:18:20 2025 by rpki-client