Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4f6RcU3XKv9wS9YZLW6XJXwtJh8.roa
File: 4f6RcU3XKv9wS9YZLW6XJXwtJh8.roa (raw, json)
Hash identifier: aVycCyr1d1vspdN0xJp+IFwtP87SvA1gai8tYMcDHQQ=
Subject key identifier: E1:FE:91:71:4D:D7:2A:FF:70:4B:D6:19:2D:6E:97:25:7C:2D:26:1F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B29D1C6FE85CC59C55E3907D78E0BEC71
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4f6RcU3XKv9wS9YZLW6XJXwtJh8.roa
Signing time: Fri 13 Oct 2023 16:14:55 +0000
ROA not before: Fri 13 Oct 2023 16:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:d1:c6:fe:85:cc:59:c5:5e:39:07:d7:8e:0b:ec:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 16:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1fe91714dd72aff704bd6192d6e97257c2d261f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:a0:56:56:82:df:c0:8e:d6:8b:93:6d:0c:
46:71:60:a8:87:8b:4b:2e:73:55:36:c9:ea:55:6f:
74:c3:87:64:03:dc:68:d5:39:eb:79:a3:d5:fa:b2:
cf:64:ab:5a:12:aa:a3:ce:1d:73:e7:7f:87:32:17:
0f:85:ed:69:b5:7f:f2:b8:2a:38:75:f5:91:46:8e:
8c:f5:b2:99:bd:1a:a0:dd:4c:fc:47:18:9d:67:d9:
79:48:6e:3b:de:d5:5b:6d:3d:b7:26:18:90:fe:6f:
b5:54:50:d0:2c:12:ce:10:92:af:c9:13:b2:e7:81:
ef:5b:35:79:ac:f7:7a:b4:59:7c:5a:39:cb:2b:56:
3b:78:c9:1d:a5:1c:4f:19:c4:d6:03:5e:80:55:8a:
d0:ca:13:b8:2c:78:84:27:03:42:22:ad:98:cc:fe:
af:ab:bf:af:f9:ed:1b:a0:b3:fc:65:1b:42:c2:cf:
08:ca:6b:51:96:a3:65:7d:44:38:94:f8:fc:fa:2b:
3c:b8:d5:e3:2f:0f:69:26:f2:64:9b:bd:d2:2e:84:
fd:9a:55:07:4f:f3:04:1d:10:17:f4:90:bc:d0:1d:
a1:18:9a:a9:c9:7a:bd:18:4e:21:86:7b:29:8e:ed:
c8:6b:6c:8d:c9:5b:9e:e5:2d:e1:f9:8b:b7:5f:89:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FE:91:71:4D:D7:2A:FF:70:4B:D6:19:2D:6E:97:25:7C:2D:26:1F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4f6RcU3XKv9wS9YZLW6XJXwtJh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:ce:a2:e6:3e:38:14:51:8a:18:d3:61:3b:43:e1:43:7a:3d:
dd:7b:62:01:bc:08:e9:b3:6f:98:88:f1:c8:0b:ca:a7:83:05:
87:d1:77:87:e2:11:a3:4b:4a:38:ea:90:c3:92:a8:08:8b:d3:
b9:91:d5:a7:bb:23:39:ff:9b:95:29:8b:d2:88:39:e7:80:04:
8f:1e:83:56:be:71:1b:e5:6d:81:82:2c:c1:17:5b:13:f5:ad:
85:8e:ea:d2:e4:17:e7:c5:06:0c:38:55:ce:69:2a:b4:38:8d:
ba:42:33:ef:68:06:b1:66:cf:f2:ab:fe:ca:dd:7e:5b:50:70:
dc:3a:6a:cc:25:45:ae:61:ec:3b:6f:82:5d:af:ef:45:29:8d:
9e:29:ec:87:61:5a:0e:87:6b:e3:a0:64:8d:68:f8:60:12:3f:
8f:0e:de:ed:a5:f1:36:11:2f:53:db:22:d3:3c:0b:30:1e:da:
77:4a:66:ac:0e:0f:92:30:24:18:4a:8c:6b:d3:d6:33:09:2c:
4e:f5:fb:d8:9c:30:e5:e0:04:77:c4:ca:72:f2:6f:7a:37:25:
b8:c5:90:ed:54:1c:56:bb:8e:f0:f7:0b:cd:e4:53:38:bd:a5:
ee:33:84:e6:cf:e2:3f:52:11:78:4b:03:9e:8c:c1:f2:a3:81:
9f:41:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:46:58 2025 by rpki-client