Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4v2STNJXyvNhfOj03y5r33AcaKA.roa
File: 4v2STNJXyvNhfOj03y5r33AcaKA.roa (raw, json)
Hash identifier: hhwCxsq8Njz2l3ADMxjk8Li1rrqe5WqGUKOrqYy0Ucc=
Subject key identifier: E2:FD:92:4C:D2:57:CA:F3:61:7C:E8:F4:DF:2E:6B:DF:70:1C:68:A0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDAA35579441F97ECC49EAE4C83518168
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4v2STNJXyvNhfOj03y5r33AcaKA.roa
Signing time: Fri 17 Nov 2023 00:16:59 +0000
ROA not before: Fri 17 Nov 2023 00:16:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:da:a3:55:79:44:1f:97:ec:c4:9e:ae:4c:83:51:81:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 00:16:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2fd924cd257caf3617ce8f4df2e6bdf701c68a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:19:a7:c1:d3:19:ec:dd:2e:5e:76:1e:31:
ec:e1:06:34:a2:2d:52:51:76:66:55:7c:d9:62:31:
4e:ad:c9:13:81:c9:08:6d:b2:0f:05:ac:20:e7:12:
75:a2:83:dc:d5:ad:f2:aa:f4:08:90:9a:a8:8f:38:
d8:75:10:72:e7:e5:c4:e3:9c:9c:88:5c:ce:bc:e3:
47:be:97:b6:01:dc:00:00:8a:c5:c2:9d:b8:7f:b2:
2d:8f:d7:0c:28:e4:75:1a:b3:d2:d4:fb:5e:85:b2:
ef:51:7d:d1:05:57:3c:6b:8a:b4:8c:7a:3a:e4:ed:
88:5a:7e:3a:2b:d4:8c:d8:81:81:94:29:bb:35:37:
23:79:ca:b4:1c:b4:28:b1:21:f0:da:22:e7:2f:26:
11:ee:9a:c2:76:e7:27:78:20:c6:ca:c5:f5:4e:04:
7c:49:99:dd:12:29:9a:5a:e4:28:32:54:a4:bd:5a:
33:31:43:a8:b6:80:66:28:c9:b7:07:63:59:ff:b9:
af:c0:29:9a:10:d7:e8:83:d7:14:57:76:fd:0a:15:
e3:31:8b:69:be:f8:2a:3c:e7:47:14:10:06:e6:02:
7c:ba:af:fa:1c:b3:10:c4:26:53:73:bf:79:47:3e:
29:47:34:83:70:8c:a3:0e:3a:4d:e9:b2:12:c1:fd:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:92:4C:D2:57:CA:F3:61:7C:E8:F4:DF:2E:6B:DF:70:1C:68:A0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4v2STNJXyvNhfOj03y5r33AcaKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:40:3c:49:eb:50:22:e2:a0:58:df:f2:93:fe:6b:b7:7e:70:
fc:eb:fc:7b:24:95:31:d5:49:15:68:ee:c8:28:97:0c:a6:b3:
2a:4f:8d:87:6e:52:55:e0:23:ad:21:e5:8d:81:36:35:cf:1f:
77:8b:fb:16:91:ee:f7:b5:4e:40:69:a0:cd:70:89:6e:5a:c1:
ab:d3:39:a6:d3:70:60:9d:e3:9c:35:6f:1f:88:ac:c9:57:fc:
4e:aa:c3:f9:e6:19:e6:34:fe:36:7c:2d:a7:96:68:6a:dd:55:
48:e9:38:7a:2a:2b:bf:62:fd:32:b6:ba:bc:b8:18:76:fc:57:
bb:51:0d:e6:d5:fe:b9:61:f9:36:29:e0:91:19:1d:b5:0e:bc:
77:53:0d:61:15:ac:91:9a:d7:2d:d6:5b:a5:84:13:49:87:f0:
c9:9a:70:21:15:fe:33:67:0e:26:68:ec:62:12:e1:4b:5d:8f:
d5:2a:2e:a7:99:ad:34:f0:55:6a:69:f2:07:f2:c9:c7:47:9e:
4f:fb:fb:43:74:af:94:cc:7c:d5:4e:13:c2:63:2c:22:29:f4:
f1:55:cf:c0:50:7a:5f:36:9e:e7:47:ce:7b:fb:fd:7c:51:e2:
36:18:96:40:b2:08:3f:2a:b2:53:a1:5f:2e:1c:04:fb:80:f7:
13:19:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:56:49 2025 by rpki-client