Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/70YYIfj_BChIY6pT5XDOFzkqeR8.roa
File: 70YYIfj_BChIY6pT5XDOFzkqeR8.roa (raw, json)
Hash identifier: zEmlhppkKVWg4M7u/DQAOVtLDQi2RQHiQiko27+W1G4=
Subject key identifier: EF:46:18:21:F8:FF:04:28:48:63:AA:53:E5:70:CE:17:39:2A:79:1F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3076D3953FFC54D390ED717CD31A7F44
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/70YYIfj_BChIY6pT5XDOFzkqeR8.roa
Signing time: Sat 14 Oct 2023 23:12:55 +0000
ROA not before: Sat 14 Oct 2023 23:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:30:76:d3:95:3f:fc:54:d3:90:ed:71:7c:d3:1a:7f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 23:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef461821f8ff04284863aa53e570ce17392a791f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:65:e1:20:c1:25:00:e7:5c:89:99:00:8d:
ce:29:00:fb:dc:f3:16:9f:6b:2f:4c:53:d1:16:99:
5b:bf:75:82:84:b5:8e:c8:f2:52:a5:5c:04:03:68:
fa:2c:2a:44:e7:ff:0e:fb:0e:db:a4:66:2f:b7:bb:
62:0b:30:63:7a:dd:5d:3a:fc:76:10:3a:f1:69:16:
75:d6:7b:81:08:81:44:74:e3:e7:ac:54:17:d8:be:
bd:85:48:c6:2c:71:3a:39:30:91:6e:9a:c0:72:41:
d7:18:be:b7:b7:01:92:e6:fb:8e:4c:c3:54:1c:50:
b3:b8:78:3e:78:75:ff:49:73:88:fa:b6:19:fa:34:
ef:28:4a:42:39:3f:4f:cf:b3:e9:3d:10:82:7a:cd:
fd:6a:3e:ac:de:20:1e:95:3e:7e:66:87:85:34:e3:
92:ce:e8:f0:25:7f:7b:ba:1c:e0:50:f4:46:92:74:
00:e1:02:3c:e9:eb:2c:0b:f9:df:f8:53:b2:c4:95:
61:ba:dd:d2:c4:35:d3:0f:2f:19:5a:3f:7e:24:2a:
d8:f3:fd:24:a5:e0:db:56:cb:29:03:2e:88:ef:9a:
75:f3:bf:55:66:8d:7a:ba:14:69:aa:99:af:f5:8f:
eb:90:70:3f:48:fc:d7:38:cc:f3:ae:58:50:9f:89:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:18:21:F8:FF:04:28:48:63:AA:53:E5:70:CE:17:39:2A:79:1F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/70YYIfj_BChIY6pT5XDOFzkqeR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:a7:68:24:c3:4b:99:4a:f3:b7:44:05:16:07:31:ac:95:8e:
29:ef:10:7a:e3:28:69:84:93:6d:fc:dc:04:3f:ed:ab:b6:29:
61:77:96:d3:cd:23:e2:fd:9d:e5:da:8f:c6:d1:5f:73:a7:90:
71:62:b0:a2:70:25:64:9f:44:c2:d5:38:50:3a:2d:a0:f2:7e:
32:27:2c:b0:b3:ba:6e:e7:3d:08:bb:f4:ca:8f:e8:1c:a7:cc:
ec:af:0a:41:23:92:ee:dc:46:2e:6a:f6:68:b3:ee:8b:67:ae:
ca:09:19:70:63:fb:30:ec:f1:6e:bc:3c:49:89:bc:11:ac:21:
fd:97:01:6d:44:39:17:17:07:27:af:03:01:25:6d:92:ab:5f:
34:1f:2c:14:9c:8b:77:06:44:b3:07:01:e2:08:bb:42:90:90:
4e:a7:85:ee:db:b3:bc:f3:ad:48:44:39:4f:5b:cb:e4:ce:d4:
32:b2:06:71:95:06:c4:56:b4:b0:82:13:a5:c2:fd:0c:2f:2e:
45:3e:50:7e:15:45:50:55:81:5c:65:2f:03:e1:fa:d6:a0:53:
a9:7a:dc:d7:fb:4d:c4:5b:95:ef:66:cb:d8:3c:49:09:a0:86:
de:5c:91:ec:d3:94:4c:bf:67:92:75:95:4c:00:db:64:7f:90:
32:d4:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:32:56 2025 by rpki-client