Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ywvfn2qCR64X5tFWjlkX9netHE.roa
File: 1ywvfn2qCR64X5tFWjlkX9netHE.roa (raw, json)
Hash identifier: YkOw5Qp4u4MUCP2xLKSXvggLhTxD2a3FUUldeEibG/M=
Subject key identifier: D7:2C:2F:7E:7D:AA:09:1E:B8:5F:9B:45:5A:39:64:5F:D9:DE:B4:71
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9FD2D4FE0877474ED73C2151D453E7E9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ywvfn2qCR64X5tFWjlkX9netHE.roa
Signing time: Sun 05 Nov 2023 14:11:16 +0000
ROA not before: Sun 05 Nov 2023 14:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9f:d2:d4:fe:08:77:47:4e:d7:3c:21:51:d4:53:e7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 14:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d72c2f7e7daa091eb85f9b455a39645fd9deb471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:bc:6b:e6:58:ee:e9:18:7f:f7:f4:58:5b:
95:85:13:5c:59:25:55:0b:e0:28:ff:c8:15:17:d0:
ab:86:cb:0b:38:0a:f3:12:7b:b9:5d:0b:c8:4a:49:
80:25:67:28:ee:e9:30:9e:6c:b5:00:73:10:fe:f4:
dc:c8:0e:5a:67:a2:29:cd:80:81:86:c0:d8:ea:d8:
d2:3d:96:e6:1b:12:9a:aa:98:fa:96:f8:94:1e:9f:
31:ed:c5:45:ba:03:f8:3e:02:ef:eb:07:6e:09:54:
d7:b0:fc:af:3d:d2:4c:96:a4:93:51:3d:6f:2a:a8:
ec:68:ac:98:52:65:ab:92:8d:58:f3:9f:fb:3a:3e:
84:71:db:66:82:64:26:8b:10:87:00:9c:b1:9b:03:
7c:a4:4d:19:94:21:3c:f1:10:8d:f3:5f:33:27:4d:
94:6d:35:e0:60:cc:17:f9:68:51:93:88:7e:76:f4:
69:c6:bb:b0:47:94:f5:68:72:03:57:ee:b7:6a:ce:
5f:2d:93:95:d3:07:19:60:f2:56:9c:8f:9e:9b:94:
d9:37:2c:3f:d9:aa:65:45:c7:a1:3c:17:51:57:3a:
67:17:bf:27:00:88:2f:2c:ee:5a:81:39:fd:a7:c8:
c0:bd:27:ce:d7:55:c5:b1:dd:f6:f2:e1:b8:4f:3b:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:2F:7E:7D:AA:09:1E:B8:5F:9B:45:5A:39:64:5F:D9:DE:B4:71
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1ywvfn2qCR64X5tFWjlkX9netHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:e4:ee:45:93:e5:b0:02:9b:60:7d:38:28:cd:3b:45:4e:6a:
16:29:78:00:55:b2:b2:40:14:29:ed:73:67:ea:52:57:e7:c7:
9d:22:9a:05:75:78:d1:02:a5:ce:6c:ef:5f:b5:01:ce:3c:01:
84:35:7d:f1:65:70:c7:dd:6e:d1:a6:22:fc:70:61:8a:be:78:
7f:69:bc:98:0e:5a:56:de:a4:67:6c:36:77:c0:cd:fe:8c:62:
6f:50:4b:5b:5f:2a:b2:d5:26:82:3c:d0:a1:e6:e9:5d:b2:fc:
89:76:75:32:99:62:36:89:1c:d9:81:45:2c:72:1a:4a:8c:38:
aa:44:ea:d2:e7:93:2f:fb:80:4b:ca:ed:c8:56:a1:63:0b:13:
8d:55:c1:ad:52:ef:10:b8:4e:92:d8:0d:26:f0:2e:bf:18:df:
8c:89:99:43:38:89:d9:d8:f5:c4:1c:28:78:e4:5f:b9:14:0c:
01:33:d8:37:f0:e4:a2:56:dd:9a:0d:14:2b:7d:68:2a:44:e0:
b9:b2:eb:75:79:db:08:b1:3a:8e:59:32:ef:b8:6e:c2:c9:53:
3c:99:31:42:ab:69:d3:39:90:7d:be:8e:80:9a:80:9b:4e:06:
ba:4b:6b:d8:0f:8a:16:e5:a8:1a:bc:a5:c3:74:29:71:26:1f:
cf:d7:38:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:36:42 2025 by rpki-client