Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-1WEnD91qHWm7EwYLP9oTA7_4Zw.roa
File: 1-1WEnD91qHWm7EwYLP9oTA7_4Zw.roa (raw, json)
Hash identifier: bHjPftapvQxF7u1sh64VW9dL7rJJNPm8L2XNlqn7Jgk=
Subject key identifier: FB:55:84:9C:3F:75:A8:75:A6:EC:4C:18:2C:FF:68:4C:0E:FF:E1:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0BFE18EC0FC9960D3D90BBC1F7B38154
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-1WEnD91qHWm7EwYLP9oTA7_4Zw.roa
Signing time: Sat 07 Oct 2023 21:14:43 +0000
ROA not before: Sat 07 Oct 2023 21:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0b:fe:18:ec:0f:c9:96:0d:3d:90:bb:c1:f7:b3:81:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 21:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb55849c3f75a875a6ec4c182cff684c0effe19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:85:a6:38:df:14:46:78:c3:0f:ab:4a:79:
22:a8:22:dd:97:63:fe:c0:ac:62:5f:22:f1:67:10:
bb:b0:cf:f9:f5:88:bb:96:43:39:c2:af:ea:d1:d6:
e3:44:17:84:10:3f:79:40:28:6e:4e:3f:e6:a7:3b:
a2:15:9f:3e:bf:d7:11:21:39:cc:91:43:cb:63:80:
9c:2f:86:a4:a7:13:d6:92:cc:ad:e9:52:63:a8:47:
be:92:79:6c:df:ff:ef:96:cf:64:34:a1:03:a3:71:
5c:76:d7:7e:81:88:ae:2d:c6:63:a4:f1:93:1c:02:
44:0c:21:8a:bc:16:65:04:01:16:bc:3a:e2:7d:51:
d5:d3:57:61:b8:24:e0:5d:f1:d4:35:be:8a:6b:58:
39:89:cc:6c:d9:27:6b:91:7f:c4:7b:84:b2:82:13:
10:46:b2:d4:50:87:ee:1f:40:65:aa:a6:59:d9:76:
bf:6b:55:3b:23:9c:8b:70:bc:8b:c7:2e:3f:4b:7b:
9b:a0:a0:6c:a5:8e:a1:b5:85:43:24:47:a9:a3:32:
b4:c9:9d:3f:20:f7:ed:29:99:e5:c4:a6:31:3d:4b:
73:a9:24:1d:6c:1c:07:ac:40:59:fa:53:3f:e7:fc:
3f:a5:4b:9f:6f:fd:14:36:84:9f:5d:66:7b:64:82:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:55:84:9C:3F:75:A8:75:A6:EC:4C:18:2C:FF:68:4C:0E:FF:E1:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-1WEnD91qHWm7EwYLP9oTA7_4Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:53:a5:a8:7a:cb:67:b5:a2:cc:45:24:c9:9a:fd:77:0e:52:
9a:d3:fc:99:e3:9f:8d:c8:46:55:e6:50:97:4b:d5:2f:ea:ba:
08:45:63:f7:12:43:1d:71:71:72:b2:04:52:6e:17:df:a7:11:
37:c1:9a:60:db:df:e9:7b:4c:d1:48:78:23:ab:6a:f1:68:41:
92:cf:b0:ee:43:c6:81:eb:09:fd:af:ec:b3:57:cc:70:02:58:
dc:c0:91:16:ec:5c:30:dc:c6:1d:0b:95:c1:78:ad:f6:28:e8:
c1:c5:53:66:2d:de:37:fe:06:4d:90:d1:8c:35:4b:9d:b8:6d:
4e:cd:cd:8e:09:52:72:14:d7:ff:a2:f9:ec:34:e1:cb:3f:1c:
8b:26:78:b8:f0:dd:e2:25:84:0c:2a:9f:b0:bb:20:3c:33:c9:
24:fe:5a:a0:e6:d6:bf:a2:85:ad:87:45:cc:f3:78:ef:75:5b:
82:fe:a3:97:6a:c9:21:7e:c4:a4:71:bf:18:fe:02:86:59:a2:
7d:90:99:01:3c:cc:39:77:a5:34:01:66:57:63:ed:5a:dc:83:
0a:91:c8:2f:6a:65:77:b2:67:42:97:b5:1d:6f:04:05:cb:ec:
d9:b2:1d:54:2a:db:e6:4a:82:c4:5b:3d:64:af:f1:50:0a:37:
1d:59:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:45 2025 by rpki-client