Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1t42Uu4rj9RWqolqPs90BNp7B_o.roa
File: 1t42Uu4rj9RWqolqPs90BNp7B_o.roa (raw, json)
Hash identifier: ydx5VCGIZHvY06IrtCmeiUzSiVG9pBPSbcIoSXIw1Ss=
Subject key identifier: D6:DE:36:52:EE:2B:8F:D4:56:AA:89:6A:3E:CF:74:04:DA:7B:07:FA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6B46119126A0BC58567F438EB374AED5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1t42Uu4rj9RWqolqPs90BNp7B_o.roa
Signing time: Thu 26 Oct 2023 09:17:15 +0000
ROA not before: Thu 26 Oct 2023 09:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:46:11:91:26:a0:bc:58:56:7f:43:8e:b3:74:ae:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 09:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6de3652ee2b8fd456aa896a3ecf7404da7b07fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:26:ef:3c:7f:a3:84:c8:70:dc:3e:bf:f6:
38:e2:63:ba:52:2f:a3:f4:a7:62:c0:21:c6:fc:67:
2d:63:3f:44:13:8f:ff:d7:65:79:3c:22:5c:98:1e:
c8:c3:67:0d:ac:f1:0c:ec:27:99:ff:2e:39:fa:eb:
e6:e9:fa:15:11:ca:e3:ea:a7:29:1e:7d:43:42:98:
2a:e0:8a:6c:a0:36:a0:7f:7d:4c:f5:66:5e:16:09:
69:9b:16:f7:0b:5c:89:a8:a0:69:15:0c:1b:82:a4:
01:7c:5d:98:e8:27:18:94:35:30:17:5d:de:79:ba:
28:e4:44:ca:36:11:05:6f:00:ca:73:5f:30:1e:08:
a0:ce:24:99:ee:f7:c6:4f:0a:0f:07:b0:21:f0:8d:
07:df:57:9e:b0:4d:3e:d5:c5:f5:51:91:93:72:46:
f1:bd:2b:70:46:75:ef:74:91:c0:1d:0a:ac:48:35:
42:b9:e1:05:e8:7f:52:56:25:69:ef:bb:83:a3:27:
05:12:6c:2e:b0:49:f2:b0:99:77:0a:8a:b7:d9:92:
b4:3e:b5:4e:5a:b8:a0:99:37:b1:65:62:8d:ae:bf:
95:ba:67:64:21:d4:16:6c:76:c1:98:e5:60:42:ab:
a5:3e:62:c1:0f:f5:88:00:9c:32:0e:44:a7:07:9b:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DE:36:52:EE:2B:8F:D4:56:AA:89:6A:3E:CF:74:04:DA:7B:07:FA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1t42Uu4rj9RWqolqPs90BNp7B_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:27:fa:c3:22:d9:b3:dd:5b:3e:0c:9d:91:03:49:3a:8d:0e:
1e:b5:61:b8:f6:38:8e:63:20:e7:62:b9:a2:c0:31:1a:de:e2:
24:a5:5b:ad:7d:a4:31:a9:58:db:d8:bf:04:9e:db:70:d0:90:
39:1f:73:58:0e:5e:c3:26:d3:a8:d8:19:76:ac:f8:57:8d:88:
3f:88:3f:22:ec:1d:39:13:f1:ca:88:e3:ad:30:2d:52:f5:6e:
e7:04:a0:1c:1c:01:eb:22:2d:a3:e6:1a:c1:af:b4:0c:71:69:
ad:18:50:13:50:08:ea:10:08:cb:10:37:0a:7d:0e:e9:5b:e3:
cd:d8:6b:2e:7f:29:05:c2:cc:18:0b:b2:42:f6:0c:c5:af:6e:
7e:ce:db:99:b2:d5:83:d6:fd:00:ab:83:cf:d4:e0:db:51:6d:
ec:3d:7a:72:40:bb:c3:09:f3:63:c6:71:56:d4:79:55:60:e0:
e2:87:68:73:d6:44:77:a8:15:78:73:99:9e:fa:84:6a:b3:81:
06:f8:7d:24:0d:98:de:d0:d9:b1:6f:7f:be:b0:a5:e0:5e:79:
da:6b:97:71:38:bd:8a:5e:84:52:6e:5c:f1:e8:52:e3:f0:68:
05:e1:40:b3:89:a2:79:bf:f8:3c:bb:1c:cb:1a:13:70:11:34:
fa:4a:48:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:28:09 2025 by rpki-client