Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/74kST0XV2givSuzDPDbN9wD78-s.roa
File: 74kST0XV2givSuzDPDbN9wD78-s.roa (raw, json)
Hash identifier: 5jBqs+wNI5k+78zm8cg4xzsV9KLQezE4+uklb15jBRM=
Subject key identifier: EF:89:12:4F:45:D5:DA:08:AF:4A:EC:C3:3C:36:CD:F7:00:FB:F3:EB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8BE3AD6AD073F512520DBED03450FC77
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/74kST0XV2givSuzDPDbN9wD78-s.roa
Signing time: Wed 01 Nov 2023 17:17:15 +0000
ROA not before: Wed 01 Nov 2023 17:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:e3:ad:6a:d0:73:f5:12:52:0d:be:d0:34:50:fc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 17:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef89124f45d5da08af4aecc33c36cdf700fbf3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:e1:3c:bd:a0:a4:56:60:c7:d5:3d:e2:e0:
9e:5f:8f:4d:db:3c:b5:b1:79:c8:d0:a2:f1:21:47:
42:86:7d:68:36:8b:bc:e1:40:2e:b2:ed:55:4a:a8:
0d:f6:93:94:91:3a:6f:49:53:0d:d5:f1:6f:37:b8:
eb:1a:50:0d:54:5f:a5:b8:87:3e:76:07:11:80:02:
e6:6a:83:ef:14:38:a9:fb:81:cc:27:9e:43:a1:36:
d6:9c:cd:27:ff:24:90:82:6f:9b:9d:f4:c7:dc:ea:
55:ed:69:0b:84:46:53:b7:d4:64:88:5f:9e:25:2a:
2a:c7:f7:6e:67:59:b3:f1:86:5f:30:30:0a:d5:3b:
46:fb:02:b2:03:58:e1:c5:50:1c:6f:dc:b7:d5:d7:
44:75:4f:76:86:17:2b:1c:f7:d8:f4:a4:76:ef:51:
ea:21:72:59:d4:e6:d0:2e:02:9c:e6:c3:25:3d:ab:
b6:80:46:05:60:19:7b:44:ac:0c:4f:a1:9b:34:49:
8a:48:0d:9a:00:3b:29:cf:92:a3:f3:90:df:4d:a4:
07:99:a4:e1:55:4a:12:8a:2d:3b:cd:ad:eb:a1:8b:
10:cc:c6:e8:0d:ec:5a:57:e3:be:9f:55:71:3a:c4:
f9:de:82:a0:c7:c9:64:38:b8:57:68:ce:aa:5d:25:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:12:4F:45:D5:DA:08:AF:4A:EC:C3:3C:36:CD:F7:00:FB:F3:EB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/74kST0XV2givSuzDPDbN9wD78-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:a4:9e:5f:16:4e:4b:83:85:3f:11:08:0e:95:4c:d3:7a:2a:
d5:a5:18:c9:5f:d5:0c:68:ca:75:f0:9d:6a:13:41:7a:7a:5a:
fe:ab:84:60:1a:e6:4e:17:91:2b:fe:e3:ca:86:02:53:2c:19:
0a:33:cf:a0:d8:4f:61:8d:90:76:c6:8f:4b:6d:9f:98:59:17:
b6:47:e1:a4:8b:ec:87:b4:16:88:05:2c:9d:5c:ca:0e:c8:94:
89:e6:3c:a1:95:65:8a:8c:a5:2a:be:df:c2:c9:c6:35:93:74:
19:e7:c4:ec:d3:8f:42:33:11:1f:8e:bb:d8:b1:4f:05:38:b4:
1b:9e:91:f0:6f:5b:66:06:18:5e:43:41:98:1e:0e:62:27:d0:
a2:70:43:6e:cc:34:f8:d1:9f:40:ca:8e:cd:72:0e:07:0e:f8:
cf:cc:bd:52:74:8f:02:c2:a0:9c:cb:9a:a7:fd:1e:83:ad:a8:
c7:77:1f:ae:86:af:f7:ba:6c:01:0d:5d:45:d6:bb:c4:3d:1a:
7f:ad:d7:f8:c5:52:a0:8c:e7:59:2b:31:7c:f4:59:3e:3a:ec:
c9:e3:59:ef:98:65:1e:45:3e:16:a4:b3:c8:ce:5a:cf:58:45:
06:c1:98:ec:41:75:27:df:fb:18:50:20:b3:25:43:6c:97:e5:
e5:52:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:33:20 2025 by rpki-client