Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-tohn29gvZVjrkVSE0eqDyUp6_c.roa
File: 1-tohn29gvZVjrkVSE0eqDyUp6_c.roa (raw, json)
Hash identifier: tDxBMramk07UFBPt3rjNH/uq5Aiab7BULYaOuiT3h3Y=
Subject key identifier: FA:DA:21:9F:6F:60:BD:95:63:AE:45:52:13:47:AA:0F:25:29:EB:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEA4EFDA7E6A096B0DFEAA71250877E52
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-tohn29gvZVjrkVSE0eqDyUp6_c.roa
Signing time: Sun 01 Oct 2023 08:15:59 +0000
ROA not before: Sun 01 Oct 2023 08:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:4e:fd:a7:e6:a0:96:b0:df:ea:a7:12:50:87:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 08:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fada219f6f60bd9563ae45521347aa0f2529ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:a8:bb:80:27:cb:90:58:80:5f:d5:87:ac:
19:d7:ab:60:01:1e:a0:84:57:c6:61:0a:f0:55:c0:
cb:0a:34:04:19:44:b5:8e:de:91:6f:9b:2a:b8:96:
00:37:a7:2b:1e:97:81:0a:9c:dc:00:f3:7e:73:5b:
a7:4e:c4:ea:7a:37:04:94:f8:86:4b:7a:3e:52:e1:
e4:fe:58:26:fb:86:9c:d5:0b:ab:2f:d0:a7:96:b6:
88:8c:55:66:8b:77:c7:d4:1a:a3:c1:ff:e1:3b:63:
ea:0c:b4:6a:71:9a:7b:42:33:a9:ee:6d:3a:20:e2:
f7:63:a2:b4:97:e7:db:e3:83:d5:d8:3e:12:8b:90:
e7:7a:9e:3d:c5:5e:47:42:35:2d:a7:8d:60:46:15:
0a:c5:79:2c:39:b9:ce:8e:f1:bb:16:56:31:67:34:
98:2e:85:ce:2b:c3:a1:fa:f5:97:22:24:f2:7a:e6:
ed:41:98:17:92:99:11:3e:ee:7a:ed:76:f3:46:94:
c8:1e:01:0d:c6:1a:33:3d:bf:1f:f1:b5:99:a9:e7:
17:c6:ae:77:13:40:a8:d4:fe:a1:2f:89:55:6e:21:
73:38:68:e3:50:0f:7f:11:48:63:a2:77:07:92:00:
0b:4d:7c:66:db:af:2b:a6:79:de:c1:48:9b:c6:be:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:21:9F:6F:60:BD:95:63:AE:45:52:13:47:AA:0F:25:29:EB:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-tohn29gvZVjrkVSE0eqDyUp6_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:e9:bf:bf:d2:59:f8:4e:4a:9c:b1:93:19:42:52:d3:31:23:
58:6d:72:c3:99:25:c6:bd:3f:b6:a6:fd:56:26:05:f5:fc:8f:
e1:93:0e:25:6c:5e:3a:6b:84:cd:89:20:d9:f3:17:7c:3c:a8:
36:a8:77:de:58:bf:92:96:08:e5:ff:af:f4:0e:e0:01:cc:cc:
1e:55:18:23:1e:45:13:3a:46:d8:08:04:e4:e4:49:ed:03:6a:
cb:69:56:7f:ea:1d:3c:f6:65:90:af:3a:c4:27:25:17:9b:e4:
23:8d:d7:24:8d:9e:2d:57:19:93:a1:af:4a:12:df:be:d8:68:
92:31:cd:c6:46:1e:34:10:f5:21:39:60:85:27:5a:38:bb:9a:
e0:c4:67:a9:ee:a7:8d:dc:c4:64:2c:30:a4:5c:c3:83:f9:d2:
c8:f8:7a:1b:f6:eb:5c:99:1c:c0:a5:2a:fa:42:ec:fa:7e:d6:
47:19:bc:8c:8a:89:55:68:aa:9a:32:44:b2:7a:6a:57:9b:60:
d3:ac:98:9a:ea:30:ad:7c:ca:da:10:c3:56:98:a5:b7:b1:39:
6b:75:2e:0b:56:53:09:46:a0:29:69:3f:d3:83:2e:86:65:65:
dd:9c:94:9e:e5:2f:54:a5:38:70:34:c5:fd:28:26:d2:1c:dc:
03:75:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:51:30 2025 by rpki-client