Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4vbggt1q2iVIEwIjgRsh1MI3rus.roa
File: 4vbggt1q2iVIEwIjgRsh1MI3rus.roa (raw, json)
Hash identifier: kdmEwFt0oEMA9MG3MWAzjHKeA34o6hcboVVMgIuC6JA=
Subject key identifier: E2:F6:E0:82:DD:6A:DA:25:48:13:02:23:81:1B:21:D4:C2:37:AE:EB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C480DC01BE5DECB4048ACACCEADD24D8E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4vbggt1q2iVIEwIjgRsh1MI3rus.roa
Signing time: Fri 08 Dec 2023 06:11:49 +0000
ROA not before: Fri 08 Dec 2023 06:11:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:0d:c0:1b:e5:de:cb:40:48:ac:ac:ce:ad:d2:4d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 06:11:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2f6e082dd6ada2548130223811b21d4c237aeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:78:96:fa:f3:0c:fe:9b:9c:63:8a:30:10:
9a:e2:78:84:b5:80:cf:b5:42:06:45:0b:26:a9:8c:
11:d9:09:a7:87:b6:c1:fa:18:48:0c:a0:74:32:cd:
4e:15:e1:ac:12:dd:87:c7:0d:3e:aa:04:25:3b:b6:
87:2d:68:e0:cb:15:86:49:7f:ee:23:b5:5d:55:b9:
01:0c:e2:09:46:a4:83:73:4a:db:3d:8a:b3:59:74:
af:da:92:6e:15:6a:9f:c3:ff:aa:0e:8e:08:6a:5c:
0b:6e:29:42:cb:ae:22:80:03:80:05:f3:96:bb:45:
60:51:88:68:5d:8a:3f:38:74:fe:7e:0a:59:64:3e:
9e:49:cd:fd:a4:82:f7:cf:2f:15:5f:3e:27:e3:11:
2a:df:76:a7:5a:3f:01:b6:9d:1b:b3:17:a7:cb:ce:
ad:59:2b:53:3d:9b:ab:a0:41:c9:c0:6c:81:db:0a:
cf:5a:9e:d0:4f:42:5c:4e:83:05:1e:a9:11:48:92:
66:af:9b:63:da:b2:3f:f9:1a:50:cf:c5:6b:25:d2:
04:a6:d9:73:73:e4:31:95:7c:d2:81:74:9f:4b:87:
c3:45:cf:fa:80:06:63:19:00:93:f7:65:05:b1:03:
52:15:80:b3:7c:28:20:e5:64:b0:56:b4:01:a9:df:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F6:E0:82:DD:6A:DA:25:48:13:02:23:81:1B:21:D4:C2:37:AE:EB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4vbggt1q2iVIEwIjgRsh1MI3rus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:ad:26:2b:52:bc:45:f4:05:2b:80:48:cb:f9:9e:2a:2d:bc:
1d:11:aa:35:13:35:48:03:7b:cd:5b:9d:76:e0:e7:97:c3:63:
2f:6b:94:97:1c:5d:65:78:d8:38:e7:a6:ae:b2:53:93:8f:89:
6c:48:2b:de:0d:6b:08:01:53:1a:9d:67:09:e4:9e:67:1f:4a:
f7:04:3d:c4:83:fe:14:1e:06:c4:bf:1e:75:84:80:f5:c2:08:
ca:dc:98:98:58:6d:c1:06:d3:6f:dc:0a:5b:63:c9:c2:61:ee:
76:44:c8:91:78:44:15:17:68:03:bb:e2:43:1e:17:ac:30:db:
30:2a:b2:da:1b:f2:ff:d4:b1:ce:b4:37:11:e5:ca:ff:51:c1:
fb:46:7a:d2:ef:65:d1:ff:2d:59:d8:73:66:3b:15:64:ee:5d:
fd:7b:ad:09:41:a7:64:50:18:22:24:6b:0c:dd:73:89:f3:52:
6b:26:6f:ee:7a:9c:e8:67:69:54:12:08:9e:8f:b8:61:3f:57:
19:02:a6:df:0b:e6:02:7f:d2:c1:14:9f:b9:6d:16:3f:43:14:
56:33:6b:13:db:4c:94:0b:0d:b7:8b:4b:ec:25:ca:bf:84:ac:
a7:4e:9d:69:5d:f5:ba:6c:5d:65:92:ed:d6:f9:22:d2:f3:f8:
f3:99:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:19:16 2025 by rpki-client