Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2dIvtM5P6nX7dqZefCUeLBc9-LQ.roa
File: 2dIvtM5P6nX7dqZefCUeLBc9-LQ.roa (raw, json)
Hash identifier: k+XMwQO5SqhEq1lOfbf7zp/h8nHZmCsWbDGKQ5isbAE=
Subject key identifier: D9:D2:2F:B4:CE:4F:EA:75:FB:76:A6:5E:7C:25:1E:2C:17:3D:F8:B4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C19B92692F755016F29FD3C9E08B0137E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2dIvtM5P6nX7dqZefCUeLBc9-LQ.roa
Signing time: Wed 29 Nov 2023 06:16:53 +0000
ROA not before: Wed 29 Nov 2023 06:16:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:b9:26:92:f7:55:01:6f:29:fd:3c:9e:08:b0:13:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 06:16:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9d22fb4ce4fea75fb76a65e7c251e2c173df8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:0e:58:78:cc:be:e1:d3:6d:dd:26:80:57:
03:7c:e6:ea:ca:a7:10:7a:09:a0:a8:79:ae:c7:e6:
33:6e:12:93:76:15:11:be:1e:e9:1b:fa:54:43:de:
e3:b3:6d:02:c3:78:bf:d4:85:2d:e2:00:58:cd:65:
08:bc:51:66:c2:69:ce:fd:ed:ad:b4:bc:03:e0:6e:
66:4d:cd:94:46:1a:c5:34:3a:18:be:6a:75:25:bb:
58:4d:6a:3e:2b:34:3b:d9:9b:cd:8b:10:30:17:be:
05:f0:52:d5:ad:94:83:3b:40:65:f5:b0:bc:4d:2b:
43:9d:b6:99:85:8d:b1:f5:b6:e8:e7:66:86:22:16:
73:24:c0:53:73:2e:98:d1:8d:3e:43:c8:2f:c9:6f:
43:dc:ae:1a:d0:47:33:65:dd:0e:03:f8:77:d0:7d:
86:a2:14:60:c1:ea:69:38:61:ae:5f:25:50:f8:b1:
a7:58:c7:75:70:ff:bc:7e:d2:05:8c:9f:47:0b:6c:
96:c7:0b:a8:32:da:95:65:71:55:84:fe:69:39:13:
2b:a7:a1:e7:c4:03:b7:4e:f6:26:4c:8d:ef:b8:a9:
0a:82:a7:8e:0a:41:9d:d8:06:d4:53:d5:92:be:10:
f6:f3:dd:16:d3:a5:97:88:8e:04:4f:7e:22:c6:9f:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:2F:B4:CE:4F:EA:75:FB:76:A6:5E:7C:25:1E:2C:17:3D:F8:B4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2dIvtM5P6nX7dqZefCUeLBc9-LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:4e:1c:b7:86:a2:78:cd:c3:eb:c2:be:d3:20:eb:1c:62:de:
d4:e0:64:90:f7:ce:ee:66:a4:ef:dd:b7:b2:d0:77:db:b6:f1:
58:f9:82:4c:14:0a:42:72:97:f0:21:2d:42:04:32:93:01:6f:
0e:72:2e:5b:69:4e:b8:3d:b1:3e:3b:ee:4c:49:69:45:b6:62:
4f:3e:13:e6:02:ea:c3:3e:16:62:48:15:d3:df:bb:5a:b9:0b:
0c:75:ca:8a:2a:48:8f:1a:5f:6a:2a:05:37:52:52:26:7b:0a:
e8:e1:59:8f:09:9e:0e:ef:9d:1a:85:7a:1d:ad:20:fb:bd:6a:
62:d8:00:c2:b3:3b:67:76:39:9f:27:d3:b6:40:27:1a:ea:6f:
31:f9:e6:6d:44:07:08:70:d2:7f:2d:30:8a:51:3f:1b:44:65:
09:35:61:7c:8b:bc:d8:a7:fd:f6:13:7b:fa:ce:84:0b:07:da:
e5:37:54:c2:46:ea:a1:81:74:98:31:91:fb:7a:dd:a9:db:85:
ec:65:38:0c:5c:cd:29:bf:17:bd:bf:39:49:d2:59:1c:75:69:
c1:2a:07:e4:93:3c:fb:bb:00:7f:4a:08:41:4e:1a:8b:fe:6c:
0a:6a:d1:0c:7d:ed:15:e1:a2:28:e4:8d:3e:f8:35:90:94:5b:
5c:81:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:04:01 2025 by rpki-client