Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4fcP1CIQuuEDT79_pLF1XSzru8s.roa
File: 4fcP1CIQuuEDT79_pLF1XSzru8s.roa (raw, json)
Hash identifier: /+dGls/VDagVJsIp3KGsOaUrrQ8Zaz/twv3VkEftRjQ=
Subject key identifier: E1:F7:0F:D4:22:10:BA:E1:03:4F:BF:7F:A4:B1:75:5D:2C:EB:BB:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B85A44000240039EDE30889899E56EAE7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4fcP1CIQuuEDT79_pLF1XSzru8s.roa
Signing time: Tue 31 Oct 2023 12:10:15 +0000
ROA not before: Tue 31 Oct 2023 12:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:a4:40:00:24:00:39:ed:e3:08:89:89:9e:56:ea:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 12:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1f70fd42210bae1034fbf7fa4b1755d2cebbbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:b2:e1:16:d3:7e:b2:fa:15:27:3b:e3:89:
2f:8e:ba:d2:42:dc:c0:58:f1:e1:04:6c:08:2f:16:
c2:28:21:10:52:73:64:86:9e:cb:cb:90:2e:df:93:
e0:dc:f5:0b:7c:77:d7:bd:d8:7b:e4:dc:2a:de:ab:
93:af:ca:25:e7:13:60:ba:07:7a:87:3b:38:d0:49:
eb:5d:84:9d:b4:18:20:91:af:fc:2f:7c:9e:d0:4c:
a7:b4:25:dc:43:7a:45:dc:aa:85:16:81:4a:4c:c2:
51:45:50:1e:30:31:07:74:48:4f:f0:67:32:7d:fc:
fc:9c:ca:8c:05:8d:98:54:77:dd:0d:06:f9:a4:14:
0e:60:15:ae:bf:1c:65:e8:a8:08:25:48:3b:52:19:
30:10:78:e9:45:59:70:a9:a1:41:eb:e4:1d:cc:b9:
2c:c5:31:dd:88:f6:0a:d7:ee:df:15:7d:02:f6:db:
98:50:03:b0:fd:15:09:f9:6c:8a:df:3f:ca:31:40:
27:b3:23:36:db:ad:af:63:c2:18:3d:72:9f:ef:19:
e7:21:be:e9:b7:39:de:77:c4:b3:c9:38:6d:e0:79:
c0:bb:a7:f9:4b:70:51:28:a8:2b:d8:f2:b3:a6:a3:
15:75:c4:a6:a7:f5:c4:a8:8d:f9:7c:d9:fc:44:1e:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:0F:D4:22:10:BA:E1:03:4F:BF:7F:A4:B1:75:5D:2C:EB:BB:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4fcP1CIQuuEDT79_pLF1XSzru8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:ca:ff:e5:ca:7d:3e:da:ab:9e:90:ef:1b:e2:12:d3:a2:6d:
6c:ea:61:2b:ca:97:84:66:87:39:b4:fc:8d:98:e2:82:fb:df:
94:17:de:12:f0:9c:c6:4a:56:54:3a:c1:27:cc:bf:40:95:32:
8a:8f:7c:fd:4a:92:a8:e0:47:1d:7e:17:dd:4d:5d:68:df:83:
51:0a:44:ea:00:ba:8b:b7:47:50:f4:88:eb:7c:3a:27:af:7c:
db:45:ba:ed:96:62:bc:b4:6d:59:5b:e6:21:f4:d4:ea:75:9c:
7b:fd:88:89:60:07:4f:1f:5c:47:01:4e:bb:52:99:d0:ae:cc:
dc:03:26:5d:28:40:67:6e:e8:0e:3c:27:4d:f8:3f:b2:16:8a:
1c:a2:d1:a2:81:d6:03:91:ed:5c:85:59:7d:0e:0e:5b:3f:70:
46:3e:af:82:b8:14:15:b6:aa:5f:4c:4f:bb:35:d4:96:da:35:
11:83:15:3f:59:88:64:3e:f9:cf:f3:1c:50:7c:c8:5d:68:01:
2e:cf:e6:40:f5:47:d8:f2:3d:cc:85:b5:66:9a:ac:6a:65:b0:
e5:9f:d3:6d:fb:66:81:ae:59:e5:ac:8a:23:74:aa:4f:cf:b6:
f3:7f:93:56:92:0f:21:f0:ac:c4:c0:71:88:8d:8b:dd:53:72:
07:a2:71:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:39:00 2025 by rpki-client