Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4pKwFXdEE6YdpDM9-tuqgsz5QSE.roa
File: 4pKwFXdEE6YdpDM9-tuqgsz5QSE.roa (raw, json)
Hash identifier: Gf5NZR19wcKJnkAhwURolAOQjltmlg45UZBcqqQPKyE=
Subject key identifier: E2:92:B0:15:77:44:13:A6:1D:A4:33:3D:FA:DB:AA:82:CC:F9:41:21
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE176807BBA4ECB4E7117D0F51D98526B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4pKwFXdEE6YdpDM9-tuqgsz5QSE.roa
Signing time: Sat 18 Nov 2023 08:05:21 +0000
ROA not before: Sat 18 Nov 2023 08:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:e175:9d72/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e1:76:80:7b:ba:4e:cb:4e:71:17:d0:f5:1d:98:52:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 08:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e292b015774413a61da4333dfadbaa82ccf94121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:f3:21:3b:9c:01:66:5d:db:9f:83:7b:92:
49:5f:25:82:d6:79:b1:ec:52:67:76:9c:a4:de:61:
b6:dd:71:a5:d3:25:f0:6b:f5:f0:72:4d:7a:69:00:
86:1f:31:9e:a5:b0:3e:53:e1:d0:c0:a8:a7:46:58:
0f:40:1d:cd:33:cc:15:63:42:41:d2:b5:25:8b:80:
ee:6c:0b:b7:48:26:a9:b7:6e:0d:1a:79:d9:25:15:
d6:43:3b:0d:52:7c:82:96:2d:a9:cb:5b:39:a1:f7:
7f:b7:9b:27:a5:74:88:d5:ef:01:dc:e4:04:a1:1f:
6d:77:a5:7c:24:db:a4:82:3b:79:11:5e:8c:9f:5c:
66:70:bf:e9:3e:a6:1a:43:27:ae:a5:2a:79:16:e9:
ab:26:d2:b8:4c:50:47:41:a1:4f:d9:b8:96:cc:b8:
16:4c:bf:ff:d6:d4:07:98:af:64:f0:d9:0a:ea:8f:
c3:ee:d7:3b:d4:b4:44:63:25:33:97:b2:f4:91:b4:
f9:a3:e6:80:38:b5:09:9c:75:b7:f0:70:65:c5:53:
67:5a:b3:52:f9:92:08:60:f9:6d:0b:95:e7:ca:55:
43:4e:f8:25:1d:ec:59:44:04:5c:6e:83:23:b1:0e:
ee:51:f5:2e:06:22:f6:0b:8d:f4:73:d2:d4:45:e2:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:92:B0:15:77:44:13:A6:1D:A4:33:3D:FA:DB:AA:82:CC:F9:41:21
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4pKwFXdEE6YdpDM9-tuqgsz5QSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:74:6f:1d:0a:28:d6:18:2b:24:92:e6:ca:42:05:87:01:86:
82:c5:7c:0e:e0:46:ba:b7:cf:d8:a4:26:b6:2f:15:9c:29:f5:
08:69:21:2a:59:ab:2b:23:c7:34:66:93:35:d0:8b:f4:38:02:
67:50:25:46:11:90:e3:5f:d9:20:ba:d0:65:49:77:5c:cc:f9:
a1:b3:28:bb:90:d9:44:1e:6c:e1:3c:c2:c5:ac:92:f3:dc:6d:
7f:8f:f6:42:45:f0:88:2d:c7:65:cc:ad:9e:79:14:a6:e3:c2:
6f:93:77:d9:85:c9:ff:34:64:c4:6a:43:06:21:4d:ce:85:8c:
00:40:9f:7e:8e:bd:b5:50:6e:df:6c:76:0d:c2:8e:cb:c2:82:
51:b8:78:1f:fc:9e:da:ed:17:62:4f:79:6c:5b:85:9e:b5:cf:
27:06:33:62:29:4d:b6:00:7e:9a:dc:50:30:0e:a7:20:c5:ed:
54:1f:9e:9b:45:0c:21:87:ca:fc:43:a4:40:1b:02:84:d6:e0:
e8:a7:a9:3e:b8:63:b3:c9:77:2e:83:86:7b:86:56:4a:31:b8:
20:d0:ca:a9:50:84:3a:46:08:38:7d:79:01:0a:52:4d:15:b3:
b7:ae:7e:2e:4d:f2:22:ea:e7:80:6f:40:61:35:55:39:21:b1:
bb:af:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:59:10 2025 by rpki-client