Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/568anewxBewL_c63lt_iiaWUPS4.roa
File: 568anewxBewL_c63lt_iiaWUPS4.roa (raw, json)
Hash identifier: QRTQbevrprbT1uz00QG4k7tjMOMyQvzaNucfjyvSYrs=
Subject key identifier: E7:AF:1A:9D:EC:31:05:EC:0B:FD:CE:B7:96:DF:E2:89:A5:94:3D:2E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B91A957738743AE78BCBB16A107813781
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/568anewxBewL_c63lt_iiaWUPS4.roa
Signing time: Thu 02 Nov 2023 20:11:16 +0000
ROA not before: Thu 02 Nov 2023 20:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:a9:57:73:87:43:ae:78:bc:bb:16:a1:07:81:37:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 20:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7af1a9dec3105ec0bfdceb796dfe289a5943d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:6c:6c:c4:96:7b:19:2d:bc:52:fe:85:15:
53:1a:58:e1:e7:cd:5b:94:70:a0:fc:c1:8a:fc:c4:
cb:d9:e8:84:31:79:a0:01:50:11:8c:58:fa:4b:f3:
0b:c4:75:67:7d:09:d2:f1:6c:da:cb:68:bf:8c:8e:
83:e6:c5:ab:86:40:ec:80:ae:6e:8b:f5:d1:80:87:
56:d4:95:a3:35:c7:4e:a5:c8:5e:15:74:73:af:08:
04:2d:7b:c4:4b:67:90:51:2c:45:2a:05:b4:63:bc:
aa:df:c4:7a:bd:38:cd:a4:5a:ce:68:43:25:7f:0c:
be:8c:6f:d3:d0:97:c0:c2:f1:6a:48:d8:f1:4f:27:
77:86:5c:54:79:1f:66:7c:94:86:98:44:ad:1d:87:
5a:dc:61:cf:12:a5:63:77:c5:a6:72:25:1c:3f:cb:
d5:69:b3:99:22:b7:bd:98:a8:a2:d7:ea:25:a2:36:
45:9a:b0:49:ae:37:35:74:ae:d6:a6:48:9b:ac:ea:
01:5a:f9:e3:b8:27:3a:ec:93:5b:8b:30:19:56:19:
ff:55:11:99:32:7b:09:c5:1a:a3:20:19:9e:9e:ca:
bd:b8:f3:18:6f:fc:b6:71:f0:f9:0a:c2:f5:76:fc:
fb:38:77:42:fe:fb:b5:ed:c7:5e:67:09:29:b7:bc:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AF:1A:9D:EC:31:05:EC:0B:FD:CE:B7:96:DF:E2:89:A5:94:3D:2E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/568anewxBewL_c63lt_iiaWUPS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:58:79:fc:40:e4:58:96:8f:0a:4d:c2:37:a0:4a:fb:47:a5:
e9:f7:9d:ad:6e:ec:6b:78:23:2c:89:9c:57:7c:a6:54:15:e2:
f8:b5:75:15:a3:88:b2:23:0d:14:20:71:72:11:87:05:3a:0d:
17:f8:2a:33:fc:62:fb:0f:dd:79:15:50:a3:6b:a2:aa:5c:ba:
ad:26:d3:6b:d9:b9:3e:60:63:7a:57:28:f7:9b:7d:5d:0b:18:
01:54:f7:28:8c:f8:0c:fa:fd:e5:44:d5:c3:46:c1:a8:1e:78:
54:81:30:2c:31:9a:a5:b7:aa:af:01:19:c3:b7:13:c7:6d:47:
a1:25:08:45:be:87:73:a1:40:2e:0a:49:40:58:91:99:16:5c:
53:7a:ec:ae:a9:bb:34:96:6f:a0:34:fc:35:50:06:07:9c:79:
55:01:61:4f:3d:45:ea:f0:26:13:b7:f8:ac:cd:13:54:1f:58:
f9:2a:bf:14:f2:03:12:e1:4a:97:3c:e4:f0:64:f6:eb:e8:62:
cf:d2:cd:e4:4b:a9:50:cb:21:8c:75:2e:8f:ae:31:03:1e:73:
32:bb:bf:67:ec:f0:3a:59:2d:98:e3:eb:d9:5a:20:6e:b5:93:
3d:f6:9d:bc:4b:4c:98:fa:5b:55:c7:67:76:58:1a:7e:19:29:
16:b5:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:45:36 2025 by rpki-client