Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2WRMkW0FMj8dEqIIAz_ITbWJcWA.roa
File: 2WRMkW0FMj8dEqIIAz_ITbWJcWA.roa (raw, json)
Hash identifier: tK/N+80u4iLvhi8Fd7/nWQXJwA3K47NsDkT1G86TGEU=
Subject key identifier: D9:64:4C:91:6D:05:32:3F:1D:12:A2:08:03:3F:C8:4D:B5:89:71:60
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF4CEDAD838D1B7221D327251919AE9D5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2WRMkW0FMj8dEqIIAz_ITbWJcWA.roa
Signing time: Tue 03 Oct 2023 09:11:51 +0000
ROA not before: Tue 03 Oct 2023 09:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:ce:da:d8:38:d1:b7:22:1d:32:72:51:91:9a:e9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 09:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9644c916d05323f1d12a208033fc84db5897160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:58:b9:55:e0:b2:ef:98:7d:45:bb:6a:75:22:
de:f7:e3:5e:27:de:85:b4:5f:39:da:af:9b:ad:91:
2f:b4:77:d7:6d:c1:07:da:e8:74:17:2c:0e:f7:15:
eb:c0:e8:f3:25:12:ef:a9:d3:d5:df:74:ec:24:8f:
a8:66:13:69:db:89:7f:dc:ad:b9:a6:4c:5e:e5:ed:
62:87:d7:81:c6:10:0f:ce:bb:85:ee:35:d8:8a:39:
73:73:65:cf:97:fd:ab:e9:e0:e7:57:50:87:89:7f:
cb:2f:7d:d6:00:08:ea:cc:d0:7c:d1:8f:f0:5d:3b:
0c:2f:9f:63:73:ea:96:55:b3:d7:34:67:df:ab:89:
0a:ed:82:42:fa:69:a5:36:f4:dc:a4:eb:75:8e:49:
65:fe:48:2b:15:b6:c9:c8:e0:27:84:48:c0:56:d1:
71:6f:00:a9:b4:5a:ed:b3:53:8d:08:e8:0b:01:98:
12:17:ca:33:73:2a:e6:b5:69:6e:f3:19:8e:34:79:
f3:44:dd:57:b5:93:31:d7:8a:28:5c:79:24:4e:ed:
0b:ed:25:f0:6e:d0:ab:d9:50:6c:8d:15:df:8f:93:
5c:6b:2e:39:41:cf:92:15:75:18:49:33:4a:8b:1c:
fc:58:94:b7:94:cf:df:42:da:2b:74:d6:8a:e8:5a:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:64:4C:91:6D:05:32:3F:1D:12:A2:08:03:3F:C8:4D:B5:89:71:60
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2WRMkW0FMj8dEqIIAz_ITbWJcWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:42:e8:68:78:13:a5:30:0c:3a:19:e7:14:d8:24:0a:cf:52:
f3:ce:1d:2f:7f:00:ca:9f:b3:91:d1:8d:79:18:ba:26:b7:24:
23:f9:e2:eb:fb:f6:1c:82:b4:10:2f:80:6e:ec:df:52:87:57:
5b:d6:39:6e:43:75:7c:c9:ea:50:36:54:8e:f5:fa:18:48:3e:
38:d9:ca:28:b7:d8:6a:97:e2:0d:0d:1e:4f:e6:a3:b4:33:93:
1a:d9:a6:14:c5:c1:5e:68:58:ea:35:ac:0f:b0:ca:8a:b7:5a:
83:7c:b2:8e:10:b8:0f:fc:3f:2e:c0:a7:35:67:14:7a:b8:d0:
af:e5:61:8f:79:ad:91:8e:86:a9:e4:5a:e8:21:04:7a:9e:8d:
bd:01:36:ff:85:de:68:f1:80:5f:b9:52:06:97:85:9c:8e:bd:
be:da:4e:73:4a:4b:60:2c:d0:1e:90:45:24:ba:7e:63:88:33:
4e:78:63:ff:04:9e:e0:bb:f6:4a:3a:36:cc:7c:c3:0a:bc:03:
26:d8:73:c0:23:43:84:28:1e:53:e1:92:8c:b6:8e:05:41:1e:
60:61:c1:74:f4:bd:e0:ad:26:96:34:f2:e4:55:60:76:02:a5:
5b:70:5d:f8:bc:c9:d6:ed:67:16:2b:74:eb:d6:ce:7b:02:6f:
cd:9a:79:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:01 2025 by rpki-client