Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1A_wRGVBtNlvD1F4e_YZWDxa428.roa
File: 1A_wRGVBtNlvD1F4e_YZWDxa428.roa (raw, json)
Hash identifier: Y2tximQrxF1OWvu6jLGYbDAhu5mLqDU3vGL7EyjSkgY=
Subject key identifier: D4:0F:F0:44:65:41:B4:D9:6F:0F:51:78:7B:F6:19:58:3C:5A:E3:6F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B890E93E016CB39750B074F05E66A7485
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1A_wRGVBtNlvD1F4e_YZWDxa428.roa
Signing time: Wed 01 Nov 2023 04:05:15 +0000
ROA not before: Wed 01 Nov 2023 04:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:890d:d7a1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:0e:93:e0:16:cb:39:75:0b:07:4f:05:e6:6a:74:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 04:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d40ff0446541b4d96f0f51787bf619583c5ae36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4b:e6:2a:3b:07:45:67:26:7d:aa:b2:2b:b6:
c3:4d:50:64:82:25:9f:c8:ad:fb:18:34:0c:98:fa:
b6:ab:ea:27:44:19:f8:2f:2e:84:5d:23:51:3f:c7:
5f:4a:37:7e:a9:4b:ed:49:1c:a5:9d:72:c0:46:66:
34:a7:00:99:d8:77:68:65:70:53:52:8e:0f:79:42:
64:b2:a1:07:b9:ba:c4:3d:b2:76:30:ee:e3:40:1f:
a9:4b:e4:0f:d1:f9:11:6c:e4:db:48:ea:6c:96:44:
4e:c9:26:73:56:8f:da:62:ad:fc:6f:13:cd:e8:aa:
43:5e:26:9b:91:69:f7:f4:d8:d6:55:ec:89:72:c2:
95:be:17:88:3b:71:ea:ac:bd:24:b0:ea:15:c3:7e:
20:99:ba:6c:98:85:85:4f:fb:3f:18:65:e6:92:79:
b4:e6:05:d7:27:af:0d:87:31:ce:ca:95:4b:f8:22:
d3:96:08:01:06:2d:68:8d:c6:e4:eb:58:e5:ce:be:
eb:e3:42:16:e8:eb:29:e4:f4:8b:47:5c:90:ad:7a:
34:70:da:3b:ba:02:9e:f8:2f:77:19:06:6e:ea:bf:
3f:c2:e2:ba:cd:83:4f:a1:08:b0:a4:c0:b6:c1:7e:
bc:50:9b:74:d8:45:da:70:c7:9c:97:34:f9:f9:d6:
44:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0F:F0:44:65:41:B4:D9:6F:0F:51:78:7B:F6:19:58:3C:5A:E3:6F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1A_wRGVBtNlvD1F4e_YZWDxa428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:8b:eb:f2:f0:ef:4b:db:f1:47:b5:31:e5:9a:2c:e5:79:7c:
d4:03:69:5a:65:4b:a6:6c:12:c9:79:28:bf:49:06:f4:c3:51:
93:8f:f1:98:cb:20:30:be:ab:16:49:ae:f6:97:de:05:34:bb:
8a:39:32:d7:b0:30:a5:f6:47:d1:75:d0:7d:ca:4d:68:24:a4:
bd:63:99:64:bd:1e:54:5b:4b:79:7a:c9:58:fd:ce:5d:83:5f:
73:c1:88:53:16:21:e3:96:cc:ed:67:f8:93:1d:dc:ca:c5:d8:
ef:29:4e:5b:b2:f5:d9:a1:8f:d1:80:e7:b1:27:9c:59:4d:09:
21:19:99:98:8a:5f:b2:da:2b:dd:60:11:47:30:54:94:e9:80:
e3:b3:0c:44:bd:94:64:99:6f:ff:fb:ca:86:f9:25:45:ad:92:
5d:65:be:bd:96:99:fb:ce:01:37:ba:8e:71:95:12:67:52:14:
90:5d:1a:b3:03:ae:3c:2f:9a:da:bd:55:4f:97:21:6a:34:43:
bb:ca:e4:63:7b:52:0b:3f:b8:80:9d:09:2e:5d:e4:57:7c:a9:
57:20:18:be:33:e7:2b:90:3f:71:d3:bc:28:a1:77:db:32:cb:
fc:51:56:12:e5:13:4a:48:20:11:a9:d0:ee:6d:31:24:5a:01:
2e:d3:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:55:20 2025 by rpki-client