Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2nGztm2xnfic9XWv6kTaxNfH6r8.roa
File: 2nGztm2xnfic9XWv6kTaxNfH6r8.roa (raw, json)
Hash identifier: /BNP2IQbc1b5H6LB4QFUdUvnbGAPRglkx0XYlEG+ILE=
Subject key identifier: DA:71:B3:B6:6D:B1:9D:F8:9C:F5:75:AF:EA:44:DA:C4:D7:C7:EA:BF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B419D7347E7666CD7DC626CB910AE861A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2nGztm2xnfic9XWv6kTaxNfH6r8.roa
Signing time: Wed 18 Oct 2023 07:08:39 +0000
ROA not before: Wed 18 Oct 2023 07:08:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:4199:bdfc/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:41:9d:73:47:e7:66:6c:d7:dc:62:6c:b9:10:ae:86:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 07:08:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da71b3b66db19df89cf575afea44dac4d7c7eabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:aa:5f:75:43:13:2c:c4:7f:0a:ae:dc:73:
76:bf:61:73:5f:8a:4d:52:f8:cc:09:6b:25:c2:a3:
42:ad:92:92:ea:2c:79:af:b2:3b:52:bb:5e:93:15:
27:2c:08:a1:d6:67:19:9e:2e:50:5a:e5:2f:fb:27:
50:e5:f9:03:1a:22:61:bf:ff:2f:b3:0f:91:78:3e:
d2:0c:d8:ab:fc:ab:95:f9:00:74:bd:9d:c4:67:90:
73:e3:80:88:80:c3:f7:3e:11:45:8a:27:c4:4b:51:
12:a3:ea:39:15:17:1f:67:ac:f1:d3:e8:43:47:46:
0a:65:cf:90:07:2e:6f:ec:06:17:d5:dc:d1:fa:66:
38:54:84:ce:d8:e7:d7:97:fa:44:c9:e2:d6:31:80:
5b:d1:c8:5b:a2:2f:b6:3e:e8:7a:8c:31:1b:a4:b9:
85:ad:8e:59:4f:3a:66:9c:f4:53:ea:32:27:e2:e6:
35:11:3f:b4:1a:60:16:42:82:70:1a:bf:9e:b8:11:
9b:95:9f:36:4c:f8:1e:b4:7c:b8:79:14:56:1f:a7:
cc:41:5d:9e:b7:7a:f4:20:8b:43:bd:17:84:8b:58:
05:e2:ae:84:b8:2e:a7:99:71:f5:c5:4b:ba:17:be:
ee:b7:06:1f:ba:fb:ef:ba:6f:33:99:2d:8f:30:d2:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:71:B3:B6:6D:B1:9D:F8:9C:F5:75:AF:EA:44:DA:C4:D7:C7:EA:BF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2nGztm2xnfic9XWv6kTaxNfH6r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:89:d3:8a:d7:6f:f4:8e:f0:65:3b:ba:fa:df:a2:0f:b7:c7:
c1:0d:5b:71:fc:a2:45:0d:f7:e6:78:25:f4:aa:15:20:5c:92:
e1:c8:b2:d8:d2:b0:30:2b:69:1f:04:36:cf:48:43:46:75:40:
7f:4f:fb:71:f6:a3:c9:26:d6:c6:56:0f:68:f8:78:b3:6a:dd:
a7:3d:5e:65:30:b4:1b:f9:f4:f8:bb:ed:7b:b7:ec:29:4a:7f:
74:9d:67:28:c7:51:89:d1:18:e1:f6:c4:ae:16:95:ce:3f:e9:
75:8b:62:fe:a0:e1:ea:81:58:27:75:af:5f:5c:11:27:53:a9:
43:44:72:9d:4c:38:4b:a6:1a:76:b2:09:88:e8:d1:0b:bd:e1:
4a:b4:e1:79:9a:1b:26:17:db:69:5d:ce:91:bd:4f:db:df:ab:
80:df:11:ae:2a:41:c4:35:e2:a1:c8:ae:7c:b7:a1:07:4c:dd:
99:d4:4c:9e:1e:0e:2d:c1:1c:f1:eb:48:0e:07:fa:0b:ee:28:
a1:d1:67:3a:2d:03:0e:e8:89:ac:fc:44:aa:aa:a3:2e:e2:cf:
8c:86:a3:f3:7e:e4:51:56:7b:ad:c4:07:45:5c:8d:60:49:06:
a5:ee:a4:2e:f6:d3:b9:9d:b4:21:77:15:71:9e:d7:37:23:a1:
18:1b:47:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:15:08 2025 by rpki-client