Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7AlUlgla9qIosDrRRA_IoPWTClE.roa
File: 7AlUlgla9qIosDrRRA_IoPWTClE.roa (raw, json)
Hash identifier: YfacyI/sGxf8vPGlMISqkc6McE6KYfpLwDW0n9Wrydk=
Subject key identifier: EC:09:54:96:09:5A:F6:A2:28:B0:3A:D1:44:0F:C8:A0:F5:93:0A:51
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AAFB06EBA8A05F9DB80537849430D9D89
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7AlUlgla9qIosDrRRA_IoPWTClE.roa
Signing time: Tue 19 Sep 2023 23:04:50 +0000
ROA not before: Tue 19 Sep 2023 23:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:afaf:db2a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:af:b0:6e:ba:8a:05:f9:db:80:53:78:49:43:0d:9d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 19 23:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec095496095af6a228b03ad1440fc8a0f5930a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:f8:41:ef:ea:f2:b3:c2:b0:c3:07:17:87:
c1:be:ac:16:94:78:9d:0c:3a:11:dd:de:c2:68:4a:
06:f6:6e:01:50:12:87:8c:36:6b:5d:a4:4b:32:9d:
fc:92:12:b0:3a:55:ad:16:df:6b:d9:77:00:a0:96:
4f:a9:ed:dc:93:db:48:ad:44:4d:4c:18:e4:8d:6b:
e5:2d:b4:b4:7d:8a:7a:47:42:ca:30:8c:c8:3b:bf:
86:eb:07:70:da:fc:1d:41:f1:a7:86:ee:e4:0d:79:
12:d3:dc:37:e5:4e:91:c8:80:5d:e8:7c:01:be:c8:
d5:64:f4:1d:33:54:1a:32:e0:e6:02:aa:32:b8:90:
eb:7c:ff:44:55:26:1c:0f:6d:5c:ab:5c:ab:b6:16:
36:51:18:d1:fd:8a:c9:b8:ed:dc:de:8c:0f:f4:25:
8a:d5:a0:96:40:74:b5:76:81:69:3c:45:9a:15:7d:
30:7e:6b:60:00:0b:ee:77:b4:cb:38:bf:fb:a2:ba:
08:96:03:ae:6b:e0:d0:09:e2:03:b3:05:d9:9c:b4:
eb:5d:09:74:5f:dd:f8:d3:bc:11:a3:7a:db:b9:98:
86:2d:80:a5:1c:05:4c:5d:fe:39:c7:dd:c2:71:47:
ec:d1:32:69:34:a9:bb:b6:8d:31:f7:ff:28:a6:57:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:54:96:09:5A:F6:A2:28:B0:3A:D1:44:0F:C8:A0:F5:93:0A:51
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7AlUlgla9qIosDrRRA_IoPWTClE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:dd:e0:be:a4:c1:14:bf:80:9c:dd:d0:9e:a9:b0:61:53:24:
c5:59:1a:b3:cc:4c:4a:03:c1:be:c2:be:b7:0c:be:87:04:97:
e1:4a:e5:0c:2c:87:3e:3f:a3:e7:33:55:19:f6:a8:0c:47:d3:
71:4d:8c:75:88:bd:5b:74:6d:05:9a:f7:39:32:76:1f:f7:d6:
95:ee:d0:73:64:3d:09:86:af:b5:3b:df:79:f7:5e:89:0f:4d:
78:bb:0a:b0:61:f2:c9:df:ab:60:c5:c8:70:fd:cc:83:bf:ba:
20:6b:c7:5d:5d:0b:1f:a8:52:01:fa:57:0b:c6:53:b1:73:fa:
3d:a9:2d:f9:c3:48:52:50:df:da:e7:29:2b:23:b7:e1:b4:70:
1c:da:cb:99:7f:b2:55:9f:fa:36:3f:ee:ac:7e:ff:ee:c6:0d:
25:24:0a:ea:96:6a:4e:a5:d5:48:de:2f:9d:cb:a8:73:d8:78:
54:4f:2d:bf:e8:23:b0:6f:4c:f5:ce:50:bf:e4:63:54:71:e0:
05:43:93:d8:0e:58:9d:43:b0:35:41:bc:23:94:21:d9:3d:ba:
b6:3a:03:16:c5:68:e2:d5:6e:4d:60:6b:a9:30:99:d8:71:64:
ac:78:52:25:77:0b:4a:7a:c8:e8:f9:3e:ae:7e:b3:9a:42:c2:
d1:38:64:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:45 2025 by rpki-client