Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4QsowGhJg8CTIIqy_MUkswzxkcA.roa
File: 4QsowGhJg8CTIIqy_MUkswzxkcA.roa (raw, json)
Hash identifier: dKazdS+fqP7jxKdN/0SZMTgde+PUxpTN+Uw1E1+un3w=
Subject key identifier: E1:0B:28:C0:68:49:83:C0:93:20:8A:B2:FC:C5:24:B3:0C:F1:91:C0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE9A9489F59E37B3C047F89707A89E5A1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4QsowGhJg8CTIIqy_MUkswzxkcA.roa
Signing time: Sun 01 Oct 2023 05:14:59 +0000
ROA not before: Sun 01 Oct 2023 05:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e9:a9:48:9f:59:e3:7b:3c:04:7f:89:70:7a:89:e5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 05:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e10b28c0684983c093208ab2fcc524b30cf191c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:dc:78:67:79:ed:f4:11:bb:29:7e:d5:23:
56:21:ce:c9:f8:b5:52:18:c4:6e:79:03:f9:77:5a:
28:3d:f9:89:bb:99:ff:e7:b1:30:83:c7:af:8a:56:
a2:4e:54:8f:ff:48:6e:9d:05:1c:87:a9:a9:c0:40:
69:d7:04:85:87:fa:c6:33:7a:bc:52:49:36:81:1a:
dd:11:c6:d8:10:64:91:8d:90:e9:4f:91:11:05:52:
0d:47:28:7f:e2:7d:35:2f:92:85:9a:cb:2f:a5:a1:
da:29:54:fb:0e:d6:89:f3:ab:f6:35:4c:10:be:9e:
ff:fb:21:3d:73:66:4d:9d:da:c6:f1:fc:85:8d:8a:
7e:22:ea:ee:a7:ce:af:aa:6d:8a:15:3c:e6:66:4e:
dc:44:3e:18:c0:7f:e4:d3:4b:21:50:4d:6b:a3:3b:
bf:6c:c0:f3:bc:a9:34:17:29:bd:8b:74:2a:44:17:
b7:48:fe:de:92:f6:fa:1b:c3:28:88:e4:16:93:ef:
6d:1c:71:62:97:ac:a9:26:45:c5:36:8f:84:79:38:
9c:3b:9e:0a:85:19:1a:51:23:20:81:33:43:f7:83:
72:2b:f0:8e:df:64:34:01:50:9d:6b:43:68:ef:26:
a3:03:98:7f:a9:69:80:d5:f1:4a:cb:0f:b2:09:c0:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:28:C0:68:49:83:C0:93:20:8A:B2:FC:C5:24:B3:0C:F1:91:C0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4QsowGhJg8CTIIqy_MUkswzxkcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:3f:51:b2:26:8a:e7:0f:3a:26:bd:24:21:24:e9:54:d6:9e:
47:f6:c0:62:1e:61:fd:f0:ae:65:48:ab:cb:d5:35:8c:f6:fe:
01:d2:7e:75:c7:f5:22:4c:42:e1:74:e8:3b:08:17:c4:b6:c0:
64:10:f8:f0:da:08:7a:a1:c4:e8:2f:63:a0:eb:4a:d5:ab:a9:
37:28:6b:e9:82:52:b2:70:35:a3:73:b2:b7:db:62:c5:d0:c7:
91:64:5f:5c:e0:b3:fa:18:76:0d:fe:6e:60:6e:3b:f5:34:81:
98:d6:36:e4:e1:32:28:5e:89:d5:a4:b4:2b:07:fe:0e:16:f8:
5b:00:40:8f:86:4a:4a:93:c0:6c:3c:f0:69:d6:94:a4:46:d4:
29:39:8c:eb:f5:85:ef:e0:fa:a2:02:ad:c6:80:90:f0:be:91:
8c:5c:fb:c4:ed:d4:1f:8d:41:45:3d:f7:3b:1d:d8:c4:d2:e2:
fe:4b:26:1c:32:93:a8:77:e7:e6:90:cd:6f:e1:dd:cd:3f:5d:
3c:04:8c:76:4a:a6:62:55:1a:69:a4:65:3c:d3:19:d4:9c:54:
a0:de:a7:d7:78:48:95:2e:48:ff:37:59:5b:b5:2f:6d:28:d1:
6a:66:55:5e:6a:07:6e:8a:1e:3c:73:8a:a7:d9:bf:42:2a:85:
93:0a:be:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:43:38 2025 by rpki-client