Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2jk4QY1mlYpuPr_oUaM0F44EChs.roa
File: 2jk4QY1mlYpuPr_oUaM0F44EChs.roa (raw, json)
Hash identifier: TCN4HHrkpI2TWRwBe4w3Md3AQDfzqJLwGvmBLVMP518=
Subject key identifier: DA:39:38:41:8D:66:95:8A:6E:3E:BF:E8:51:A3:34:17:8E:04:0A:1B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C50DD788FD68C8F8CFF4901CE379EE4C1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2jk4QY1mlYpuPr_oUaM0F44EChs.roa
Signing time: Sat 09 Dec 2023 23:15:40 +0000
ROA not before: Sat 09 Dec 2023 23:15:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:50:dd:78:8f:d6:8c:8f:8c:ff:49:01:ce:37:9e:e4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 23:15:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da3938418d66958a6e3ebfe851a334178e040a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:3d:8b:69:4d:95:70:88:60:62:a6:bd:38:
d8:29:64:31:12:ca:c7:84:57:af:4f:69:ed:1c:e3:
6a:35:00:92:1f:22:77:9d:b1:14:68:16:92:1b:fb:
5d:94:24:bc:67:5e:50:38:7f:e9:8e:05:78:86:11:
fa:95:60:8a:31:fd:b4:73:7b:93:8f:55:83:7b:11:
e9:de:02:1e:7e:ac:9b:05:12:4d:43:5d:b3:f0:42:
f9:db:ec:de:56:07:d7:bf:7f:f0:6e:4e:36:e1:9a:
9a:e3:4b:90:d4:ba:92:d0:92:59:01:85:3e:39:9c:
41:31:66:df:ca:62:74:ab:f0:70:18:2f:3f:9e:c6:
90:84:70:45:54:b8:12:f6:73:35:bb:4f:7a:c9:e4:
25:03:94:30:41:8b:e9:6a:9e:46:b3:60:16:58:e3:
1a:84:64:4e:89:f3:64:7d:09:c2:9e:ae:a3:d8:b7:
f3:dc:a6:13:32:92:d2:48:65:f6:8e:d6:12:9c:5c:
54:32:24:f2:c0:34:d1:8b:02:e6:5f:55:a2:c3:f9:
df:6d:d7:d1:8b:23:07:80:90:0a:de:6c:57:b2:84:
f1:06:a3:80:1f:e0:b0:61:2a:f8:7e:d3:e0:df:df:
0e:fe:4b:e7:be:fb:84:ea:d6:f5:84:67:57:98:c7:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:38:41:8D:66:95:8A:6E:3E:BF:E8:51:A3:34:17:8E:04:0A:1B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2jk4QY1mlYpuPr_oUaM0F44EChs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d4:3b:97:f3:4d:c7:97:9a:a8:6a:ed:42:f9:28:b6:7e:6e:48:
af:9d:17:7e:13:dd:4c:74:78:72:2d:54:3f:8f:a9:da:10:17:
d2:22:20:40:b9:4a:5a:2d:56:32:53:c9:c7:d3:41:4c:db:e4:
de:dd:3a:82:b4:f2:55:ac:69:d7:1d:d1:01:fc:6e:91:01:3f:
b2:6e:87:01:38:fc:32:4d:55:7b:1e:e5:de:a3:9a:bb:51:65:
43:4b:cf:1b:0c:59:b3:68:d2:e4:95:38:80:cf:00:3e:0a:c5:
2d:4c:00:cb:ef:d8:a2:16:2b:6b:2b:56:4a:04:d7:5b:e5:ba:
7f:ee:07:d4:a0:4d:47:36:92:6f:fc:75:59:9f:e0:f2:66:2c:
25:0c:2c:84:67:7a:a8:87:b1:f1:47:76:5a:8c:83:88:d9:ec:
f2:cc:dc:e4:d7:42:0b:a5:1d:ae:b8:86:2d:20:3c:3f:a0:dc:
86:dc:74:38:f8:aa:23:0f:06:c4:de:ee:74:d5:89:8f:b9:fb:
21:91:37:e0:48:54:d9:0f:db:16:c8:fc:36:b4:45:a9:b4:95:
94:0c:66:8a:c1:3e:2b:9a:d4:40:ef:11:6a:c2:df:2c:1c:4c:
ef:c2:70:b5:1d:79:7e:b5:a1:06:c3:21:21:ce:a1:14:43:c8:
a6:37:29:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:53 2025 by rpki-client