Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-yyiB4a7Tl3OZUFOaV3DbzoJ5Oc.roa
File: 1-yyiB4a7Tl3OZUFOaV3DbzoJ5Oc.roa (raw, json)
Hash identifier: uLRc/0JUWrdgpXsBGEVHrjjmk/cMcGrXbEVQ79JzucI=
Subject key identifier: FB:2C:A2:07:86:BB:4E:5D:CE:65:41:4E:69:5D:C3:6F:3A:09:E4:E7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B53AE552FACB543E34A4D5D21AD3B1B4D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-yyiB4a7Tl3OZUFOaV3DbzoJ5Oc.roa
Signing time: Sat 21 Oct 2023 19:20:15 +0000
ROA not before: Sat 21 Oct 2023 19:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:53:ae:55:2f:ac:b5:43:e3:4a:4d:5d:21:ad:3b:1b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 19:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb2ca20786bb4e5dce65414e695dc36f3a09e4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:0c:d3:08:da:bb:7d:2d:bc:1d:50:a7:9f:
28:21:55:5c:7d:0d:93:68:68:dd:1e:56:2b:fa:8d:
8a:66:3f:3d:5f:23:02:b0:d2:b6:74:c0:70:f3:1c:
50:7e:8d:cd:21:ee:1f:55:d7:a1:45:f0:d0:8e:47:
6a:13:40:ec:a3:4b:6e:f1:4a:82:5a:15:df:0b:27:
8d:d5:a5:71:4e:4b:72:fe:76:07:b3:52:1b:48:93:
b5:9d:92:e1:46:42:aa:2f:8c:15:56:a2:df:f8:ea:
b3:d3:3b:f4:78:15:05:60:92:2d:bd:6d:40:98:89:
04:92:52:06:72:89:45:fc:53:85:b1:ca:94:5d:40:
94:8b:c5:58:bc:d1:cb:f0:20:ac:6b:26:aa:d5:f7:
bd:de:aa:e7:64:d8:fa:07:b9:2d:fa:0d:cc:78:0d:
1c:14:33:9f:ae:1d:5e:35:88:f2:4f:da:ef:17:55:
d3:c0:cf:fd:7f:24:97:7d:1e:d7:96:61:43:1f:92:
df:9f:b8:03:c2:64:4d:c7:9b:f2:84:a3:5c:e3:82:
b8:5c:e5:ec:f2:c4:f9:95:6d:31:ff:91:72:c3:4a:
07:f6:9d:7a:6d:4e:f8:1a:f1:34:99:ef:a7:70:74:
5b:b1:d6:ae:8b:5c:09:74:d2:5e:d3:0c:1b:4c:6b:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2C:A2:07:86:BB:4E:5D:CE:65:41:4E:69:5D:C3:6F:3A:09:E4:E7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-yyiB4a7Tl3OZUFOaV3DbzoJ5Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:cd:e3:40:75:10:d3:a0:e6:38:1b:53:f1:73:69:26:3e:26:
7a:56:03:a6:66:25:02:af:30:6e:36:22:c4:75:e1:35:1c:f6:
e1:9b:1d:c4:98:17:e7:86:5b:b6:7f:f5:83:bd:6a:5c:8b:c2:
e1:85:79:89:40:e1:a9:53:67:ce:55:e8:6d:a7:c0:d0:3c:cb:
81:32:fc:de:8f:6e:a6:29:14:bd:4f:73:bd:ae:0e:9d:46:73:
92:64:32:8f:0f:b2:4e:96:b1:7e:75:35:52:61:ea:42:eb:cd:
fe:23:29:43:7a:29:10:eb:a7:42:f9:4b:0f:5a:5b:9e:49:6f:
17:45:f5:94:26:47:42:f0:1e:e5:00:e9:41:ab:1c:75:42:35:
70:0e:90:d8:d9:f0:95:10:8d:d6:2d:ee:2d:47:ff:a6:5e:ac:
4c:74:b6:09:f9:82:53:e6:52:4a:9b:d5:92:46:6a:71:b2:aa:
e7:68:1c:6f:8b:bf:b0:c7:4a:9e:b2:b6:8d:6a:be:26:ee:a0:
4c:4e:2a:fd:80:2a:a4:1e:08:75:ef:d5:b3:85:17:0c:07:19:
eb:4c:59:0c:7e:43:b6:b7:a8:4d:bf:1a:a8:5e:de:e3:0c:49:
b7:bd:35:f3:f0:2c:55:9e:dd:c3:62:1f:91:01:72:8a:4f:e5:
7f:2f:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:21 2025 by rpki-client