Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1bf7eT2Ku2khmfiwak5nZYCngzQ.roa
File: 1bf7eT2Ku2khmfiwak5nZYCngzQ.roa (raw, json)
Hash identifier: clMHJfHYKcKZMNSQuSpWNbZ9KH/JITwOfoFtYsmtHvQ=
Subject key identifier: D5:B7:FB:79:3D:8A:BB:69:21:99:F8:B0:6A:4E:67:65:80:A7:83:34
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2104BE369278F8553719264D9A44B13C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1bf7eT2Ku2khmfiwak5nZYCngzQ.roa
Signing time: Thu 30 Nov 2023 16:16:48 +0000
ROA not before: Thu 30 Nov 2023 16:16:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:04:be:36:92:78:f8:55:37:19:26:4d:9a:44:b1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 16:16:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5b7fb793d8abb692199f8b06a4e676580a78334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:90:05:e4:7f:62:6f:55:26:ca:82:fa:47:
24:d6:eb:f9:57:5b:39:0d:2a:0a:fd:c5:62:cf:d5:
34:aa:e8:f2:96:64:74:ab:8a:f3:97:e0:71:58:92:
b0:2a:2f:59:f8:0a:76:a8:0b:00:f8:b8:29:58:1b:
a2:8b:ab:50:dc:b7:46:25:44:1f:82:6e:f3:f4:7a:
63:88:b8:18:9c:a5:d6:15:a1:4f:7f:46:fe:ec:cb:
c9:7b:7b:68:93:7f:de:6c:f2:ea:00:f6:b9:54:3f:
fb:95:58:f7:68:7d:c7:7a:51:46:bb:39:aa:06:aa:
50:84:ad:ac:e9:24:87:50:aa:3a:6d:e4:f1:cb:ce:
d8:bf:02:eb:d4:27:2d:cf:9d:76:8a:8c:4a:76:2f:
62:7d:9f:d0:65:80:0a:ef:4e:8f:3c:09:ad:34:09:
ee:d9:f2:43:36:a4:ea:b7:7e:ce:02:16:a0:a7:5e:
1f:6c:e0:d0:c1:f7:3a:54:ec:d6:c1:ab:3b:ed:c0:
67:c2:86:21:3b:a3:c7:a6:b9:3c:a2:06:33:7a:17:
07:da:cc:4a:35:ee:42:9f:03:11:a6:cb:4e:02:96:
6f:6f:1f:b0:58:d9:87:ac:e6:fb:b2:31:71:b6:65:
92:f5:45:26:4f:ce:6e:42:02:96:af:51:7b:48:3c:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B7:FB:79:3D:8A:BB:69:21:99:F8:B0:6A:4E:67:65:80:A7:83:34
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1bf7eT2Ku2khmfiwak5nZYCngzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:c7:49:80:0e:8a:92:72:54:d3:52:12:0b:f3:09:bf:62:0c:
9f:08:22:35:41:d1:d4:c3:85:b3:45:ac:8f:cf:48:8c:cd:c6:
4b:7d:b5:9e:e6:9f:7a:63:30:6b:d3:51:ec:96:65:e3:01:3d:
2f:23:06:18:0d:9e:14:fc:99:e7:66:9f:aa:ed:01:77:d6:2f:
58:ab:fe:fa:fa:db:13:01:89:18:a7:a9:ff:7f:48:1a:8c:e5:
85:c7:8e:a8:48:a2:7c:62:52:10:14:8a:ea:f6:92:8e:57:ab:
12:8e:a9:d0:f2:87:c3:05:67:27:36:d3:b9:2a:a0:51:71:76:
67:4f:40:25:9a:94:03:78:5f:43:32:9c:27:4f:97:9c:6e:3a:
af:c1:9e:0b:b4:11:ee:e9:58:52:c7:2a:22:fa:c9:62:89:5e:
e7:6e:0f:f9:b6:c0:32:6d:86:fa:b3:f3:10:11:9d:f4:46:fd:
74:b1:86:dc:a3:cf:93:00:af:b5:9b:07:81:c8:2a:b7:43:cc:
2a:1d:ba:e3:f9:00:c6:d1:12:24:32:6e:f7:de:e9:63:49:b9:
28:fd:53:99:1c:6d:cb:cd:fe:31:80:89:eb:7e:94:56:b1:73:
4b:9f:52:5f:a4:a8:6a:f9:f7:80:9f:07:85:94:ad:67:a1:34:
ed:f1:ca:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:37:50 2025 by rpki-client