Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4pr_49o2e9mlIphrnTmFwUe50-c.roa
File: 4pr_49o2e9mlIphrnTmFwUe50-c.roa (raw, json)
Hash identifier: /CCeqdM+psEB5IUV66FGwIOetnDJpgRN4eTWlxtoPiw=
Subject key identifier: E2:9A:FF:E3:DA:36:7B:D9:A5:22:98:6B:9D:39:85:C1:47:B9:D3:E7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7CA11F02DDC672F6758F3B4B410B245A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4pr_49o2e9mlIphrnTmFwUe50-c.roa
Signing time: Sun 29 Oct 2023 18:10:15 +0000
ROA not before: Sun 29 Oct 2023 18:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7c:a1:1f:02:dd:c6:72:f6:75:8f:3b:4b:41:0b:24:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 18:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e29affe3da367bd9a522986b9d3985c147b9d3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:32:5a:72:43:88:c9:ec:4d:f0:fc:60:ef:
56:74:6f:41:4a:87:69:a0:36:1f:53:69:79:a8:84:
00:67:0d:d4:7a:7a:86:57:f1:f8:29:d1:09:74:23:
5b:45:c1:5b:ca:41:32:86:0c:19:52:16:02:66:ca:
16:7b:ab:60:fc:e8:eb:99:42:ba:0e:66:f9:59:48:
e5:6a:37:2a:9b:74:eb:05:59:17:30:28:96:37:ff:
95:f6:fb:36:93:aa:5a:b3:c8:00:5a:1a:f8:4c:55:
ad:f1:7a:23:b4:7e:89:48:e4:c0:d5:d7:57:19:dc:
10:cc:9c:83:3f:c1:84:a9:6b:c2:b7:4f:56:1c:96:
43:f0:c3:87:b2:5c:0f:7f:c4:f6:ad:62:97:25:a2:
16:97:4e:1c:2e:9d:02:b9:b2:9a:52:b9:d5:1b:6f:
c4:e8:c3:9f:aa:9d:d9:59:af:d0:e0:4e:99:67:cb:
cc:a7:7e:0c:de:1e:2c:63:3e:f5:c3:b3:c7:46:d5:
1d:78:bc:5b:ce:b8:44:09:39:b3:08:c0:aa:5b:1a:
90:39:7b:1e:c7:98:52:96:7e:32:d7:f4:21:db:f9:
9a:d4:39:2b:3f:eb:64:84:4f:16:e5:db:66:f3:30:
f4:96:06:58:3c:71:d7:0c:72:98:c9:2c:db:00:13:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9A:FF:E3:DA:36:7B:D9:A5:22:98:6B:9D:39:85:C1:47:B9:D3:E7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4pr_49o2e9mlIphrnTmFwUe50-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:c1:68:d9:33:ef:9e:a7:b0:19:71:18:49:6e:db:d8:c0:5b:
24:47:6e:f6:56:77:40:c7:f3:77:1d:62:4c:51:1f:57:1c:29:
1b:08:06:97:a6:76:e9:38:73:7c:b0:98:f9:1f:6c:3d:68:4a:
5d:e2:3e:f1:02:d6:7a:f7:0e:97:f2:8f:5e:53:02:45:19:aa:
8a:f3:f6:6f:cb:62:2b:25:55:23:d1:52:30:10:d5:bc:55:1d:
8c:ff:c3:f1:a9:a5:0d:3a:4d:a0:6a:06:a7:73:a1:3d:dd:4a:
85:c1:39:9b:ee:07:93:29:00:6d:95:90:bb:bc:85:f5:e4:f0:
42:d6:13:ef:1a:e0:cc:72:e0:7d:a8:ad:db:9b:c4:58:62:11:
0c:c3:a1:16:f8:d0:41:10:2d:6d:a0:31:a5:b8:13:74:85:1d:
ad:e7:56:4a:07:e0:29:95:f1:af:46:44:88:d1:f1:bb:51:3c:
bc:34:57:28:eb:71:19:16:6b:c5:46:82:a2:f8:a9:79:87:72:
ea:b5:b1:ba:05:13:2b:ce:b8:ab:54:13:8f:bb:d9:27:9d:f6:
65:47:60:4e:75:a6:0a:72:ca:06:98:9c:4a:76:c9:ba:81:26:
6b:fa:f8:b1:28:75:24:82:93:b3:4e:fb:0c:a0:e7:77:d0:0e:
ca:2f:95:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:45:57 2025 by rpki-client