Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3T4VUjQA-lQvumIMNoRtaasqlm4.roa
File: 3T4VUjQA-lQvumIMNoRtaasqlm4.roa (raw, json)
Hash identifier: UNPn5SNec0tb3EzzMe7Itz7GWdShybNFto56X04NAKo=
Subject key identifier: DD:3E:15:52:34:00:FA:54:2F:BA:62:0C:36:84:6D:69:AB:2A:96:6E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C06694236B6E4D86482784B7E024296EC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3T4VUjQA-lQvumIMNoRtaasqlm4.roa
Signing time: Sat 25 Nov 2023 12:16:50 +0000
ROA not before: Sat 25 Nov 2023 12:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:06:69:42:36:b6:e4:d8:64:82:78:4b:7e:02:42:96:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 12:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd3e15523400fa542fba620c36846d69ab2a966e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ff:09:d8:30:a8:d7:db:ed:f5:c8:cc:a4:5b:
d2:b9:6b:d4:82:7f:7d:96:d4:7b:43:43:1f:0a:00:
4c:57:ad:98:a3:ea:32:13:e1:ad:ef:59:d1:8b:14:
4a:f8:7f:cc:fe:5c:0a:93:89:62:53:ba:f3:18:b6:
74:87:36:d3:b0:bf:7f:56:91:07:5c:12:31:a0:9e:
fd:a7:4a:a0:ac:1b:2c:ed:9f:7f:73:d2:18:f3:70:
66:37:cf:7a:99:79:78:2c:83:93:e4:bc:7d:f7:9e:
a6:9c:a8:c3:60:f1:5b:86:c2:77:83:44:09:9f:61:
bf:6e:80:68:dc:1c:41:5e:33:98:85:8c:62:11:bd:
1a:4e:5f:d9:43:f3:da:d3:b6:c2:14:80:33:53:7e:
cc:e4:1f:31:a7:12:3d:ce:c8:51:ec:a5:f5:f7:80:
66:44:df:28:2f:cc:b3:8b:92:77:99:e0:24:e2:2f:
fd:33:66:47:b2:e7:ad:ac:70:08:bf:f2:67:50:6c:
5d:68:3f:84:29:32:30:9c:da:f5:d2:fa:62:d0:48:
64:a4:51:5d:75:bc:55:8b:dd:bf:71:9d:91:31:df:
2d:c1:e3:34:1a:48:c6:22:0a:61:39:c5:1f:43:ab:
c4:1c:35:16:62:c3:60:d5:63:94:7c:18:51:e9:6e:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3E:15:52:34:00:FA:54:2F:BA:62:0C:36:84:6D:69:AB:2A:96:6E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3T4VUjQA-lQvumIMNoRtaasqlm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:a8:3b:ad:97:4a:ee:ca:73:8e:06:2f:8d:ae:13:22:03:57:
a5:ba:1a:b2:48:62:8a:f8:df:79:5d:ad:bd:bb:49:f9:8c:2c:
57:0b:f3:8c:bb:67:86:ff:c4:04:50:49:da:08:46:89:17:ab:
7b:16:55:49:a7:d2:f7:b2:5e:80:90:6f:0a:92:27:13:56:9f:
7a:29:df:a3:17:70:79:27:36:e3:e3:86:8d:52:0e:0c:23:ce:
1d:6b:24:de:f5:95:eb:8f:86:c8:c1:f9:6a:a6:a1:73:2f:d8:
d8:e4:c5:49:27:16:7c:f2:88:10:9b:3c:9d:1f:14:4c:05:9f:
3e:8b:32:b6:39:54:ee:7c:a1:cc:77:12:4f:06:cd:46:1d:63:
4c:bc:ca:4b:95:d0:03:f1:93:ee:7f:6e:c9:bf:6f:90:87:86:
25:be:62:6c:b9:9e:0e:a5:18:c6:c9:48:14:41:f4:86:c6:71:
89:d8:2f:d3:1a:76:ce:cf:f4:32:3f:18:ac:14:1c:87:1a:f0:
0a:17:95:1c:5f:94:90:74:84:9a:ea:46:35:13:0a:38:51:39:
c5:b3:2d:af:dc:25:81:62:b6:9f:59:97:d1:c2:70:58:0d:33:
3b:31:1d:2b:26:14:f5:2f:a6:c4:a5:a8:7b:d9:b8:bf:44:09:
09:94:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:52:36 2025 by rpki-client