Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4yuc27m2Bw4mvlVJzNrjYcb4X90.roa
File: 4yuc27m2Bw4mvlVJzNrjYcb4X90.roa (raw, json)
Hash identifier: IMyraxoCehaQ5/BzjbGy4tUoWrTGyxkeVCf5X0aWnrU=
Subject key identifier: E3:2B:9C:DB:B9:B6:07:0E:26:BE:55:49:CC:DA:E3:61:C6:F8:5F:DD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B59036447CCBE9922DB8F0963C5606009
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4yuc27m2Bw4mvlVJzNrjYcb4X90.roa
Signing time: Sun 22 Oct 2023 20:11:16 +0000
ROA not before: Sun 22 Oct 2023 20:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:59:03:64:47:cc:be:99:22:db:8f:09:63:c5:60:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 20:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e32b9cdbb9b6070e26be5549ccdae361c6f85fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:7c:e5:ff:79:c4:0b:7f:10:c4:96:19:aa:
92:98:db:4c:3d:5b:a9:da:05:b0:47:8a:98:c9:4e:
da:83:b3:11:8b:b3:64:da:50:b1:75:6e:14:6a:d1:
35:a8:76:37:74:d8:d6:81:a5:36:40:89:c5:dd:e5:
2b:2e:7e:f8:10:9d:11:98:07:69:05:c4:53:59:49:
a4:6d:84:0e:b8:12:a3:6f:ff:af:4c:fe:49:ca:f2:
3a:1b:7d:89:a0:be:1e:6b:43:57:2d:84:fc:27:53:
5c:53:d9:90:e6:ab:69:7e:45:31:26:52:b1:4a:a6:
52:7e:72:e3:9e:eb:af:a7:f2:38:97:b9:22:9c:95:
db:9a:f4:54:1e:6a:41:4e:10:63:72:39:07:16:a5:
27:13:be:11:ee:e6:26:c6:d7:ae:c3:63:c5:55:5a:
f5:45:72:84:23:1a:da:b8:f4:3d:9d:93:a9:1c:ef:
4d:f2:09:9b:11:5c:1c:ff:16:f0:ee:d0:fe:e6:b0:
40:92:fd:e1:fa:61:95:ca:c7:fb:16:b3:94:20:a2:
84:88:7b:ef:cf:d7:64:8e:02:cd:2c:78:ae:d0:c7:
6e:65:88:50:fa:e9:e4:60:68:83:ed:8d:80:f0:ee:
c3:95:ab:cb:71:a6:96:40:fe:fa:4b:a9:27:de:f7:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2B:9C:DB:B9:B6:07:0E:26:BE:55:49:CC:DA:E3:61:C6:F8:5F:DD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4yuc27m2Bw4mvlVJzNrjYcb4X90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:b1:8d:99:96:ac:aa:b2:1a:a7:91:8d:b8:09:37:ca:99:6b:
d5:a3:57:e6:ed:88:3b:e3:42:06:5a:c9:19:75:c8:77:0c:e9:
c4:8f:fb:35:43:60:a9:67:2f:5b:29:35:5d:9d:d9:c9:50:dd:
e9:fa:9c:7b:94:bd:95:01:b9:e1:cf:30:c6:4d:15:66:18:33:
33:1c:62:63:18:ed:cf:15:8e:fc:12:a7:73:04:9d:f7:2d:7c:
c7:57:06:34:c5:df:ec:22:22:fa:f1:eb:52:d7:9d:a5:30:3d:
2d:a3:ac:4e:ad:74:40:bb:e1:23:07:fc:21:e2:cb:9b:3b:21:
8b:e0:d9:e8:92:ad:7a:c8:81:01:0e:cd:e1:9e:c1:1f:1a:d9:
ee:70:63:6d:c4:6f:c8:16:06:be:85:e5:b3:8e:dc:98:9a:48:
76:bd:52:b3:27:2e:ca:24:a5:11:bf:4a:5c:4b:72:4b:b7:4b:
6e:c9:fc:de:2f:f0:bb:be:e5:b4:3c:69:e2:7d:5a:d7:60:7d:
90:61:1a:89:d7:69:13:5f:fd:ec:78:15:96:d7:3d:fb:0f:50:
9d:2c:90:ed:31:e1:76:b0:f7:8a:c7:76:e5:42:ee:be:82:6f:
bc:bd:c6:29:df:0a:31:36:01:a2:33:9b:48:77:2d:19:da:15:
62:64:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:20 2025 by rpki-client