Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4mJFiffDh68XVzFHKu1Bx9cijRg.roa
File: 4mJFiffDh68XVzFHKu1Bx9cijRg.roa (raw, json)
Hash identifier: Bjv6PMOHPgk0c/fxaotuLNhvG/6qxFKOJPN7pctD04k=
Subject key identifier: E2:62:45:89:F7:C3:87:AF:17:57:31:47:2A:ED:41:C7:D7:22:8D:18
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5714A65047BCB9E0474D7B344F58D53F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4mJFiffDh68XVzFHKu1Bx9cijRg.roa
Signing time: Sun 22 Oct 2023 11:10:52 +0000
ROA not before: Sun 22 Oct 2023 11:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:57:14:a6:50:47:bc:b9:e0:47:4d:7b:34:4f:58:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 11:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2624589f7c387af175731472aed41c7d7228d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:a3:44:1c:7e:a2:5d:02:99:32:fe:a3:cf:
d6:22:d9:34:f1:bb:80:89:81:0e:63:3b:92:9d:0e:
3f:4d:da:7e:18:55:ed:db:5b:93:2c:7f:d9:a2:03:
e0:74:a6:d4:5c:1e:d6:ed:ee:6d:a3:17:91:d3:c5:
a6:fd:18:aa:d8:9a:9d:d8:b5:a1:51:c8:0a:8a:68:
42:a4:22:23:5d:58:95:61:f0:11:8a:3c:17:60:67:
ec:64:46:2a:09:90:34:2c:1c:30:d9:8b:41:f5:68:
4e:d2:a4:23:2c:de:4d:22:4d:49:6f:87:12:64:dd:
63:98:66:e2:23:56:6b:7b:e4:a2:50:dd:36:75:a5:
4a:2c:ba:e7:d2:49:bf:33:5d:b9:78:64:17:e3:91:
79:06:06:59:b7:d3:ce:b9:8d:0c:ad:df:46:50:d9:
b2:50:ef:ab:59:82:74:5f:ff:96:de:b3:19:14:28:
5f:dc:6a:a3:20:ff:24:ea:e4:a2:4c:a0:10:3c:38:
11:6b:a5:86:a4:ed:59:e0:6a:b4:79:a0:56:22:53:
27:97:a1:56:28:d7:99:b6:e4:aa:d9:a9:d3:8f:32:
bf:fd:8a:a2:d1:b1:e4:83:33:bc:f8:a2:31:1e:97:
84:19:31:bd:fe:8e:41:68:72:69:34:01:c1:ad:7d:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:62:45:89:F7:C3:87:AF:17:57:31:47:2A:ED:41:C7:D7:22:8D:18
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4mJFiffDh68XVzFHKu1Bx9cijRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:62:b2:61:82:2b:2c:92:ac:8f:23:e0:7b:92:06:25:ef:bf:
10:fe:53:ab:99:4f:9f:3c:e3:e8:87:e5:79:2d:cd:ab:35:b5:
33:0c:84:16:ae:b9:8c:cc:64:38:90:dc:a0:91:41:d2:65:05:
e9:b8:f0:24:4c:78:32:eb:71:f4:00:24:07:2f:8d:9c:78:21:
34:d9:69:df:1b:e8:31:34:2f:78:d7:91:a4:13:75:b5:10:77:
ea:50:9d:fa:41:22:d8:ed:66:1e:c4:ab:44:d0:79:56:57:b1:
6f:af:3a:b7:f6:ed:c8:2a:8a:26:ea:3d:6f:5f:02:fc:c5:b8:
3f:4f:f8:a8:48:da:e6:ef:f7:d8:f3:d7:95:56:0b:55:22:e4:
09:ab:92:bd:fa:82:a8:05:46:36:05:53:54:5e:58:4f:9d:37:
9c:41:d4:c6:03:60:fb:ad:98:e7:7f:3e:50:3f:2c:b8:b0:ab:
98:a1:d8:74:7e:a9:b5:ba:11:ec:35:5a:dd:df:f8:19:a7:20:
d7:87:c9:f6:f4:3d:ba:cc:04:72:63:ca:d1:7e:41:63:4c:50:
1e:3e:ed:08:b8:21:4d:92:a8:ea:10:41:50:d2:78:aa:b5:72:
b4:49:7a:cf:01:22:75:65:a0:ae:97:47:ec:48:49:9d:3e:de:
fe:a7:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:38:56 2025 by rpki-client