Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8KuIpSXyLZQpY-4OnmaA5FvMWCI.roa
File: 8KuIpSXyLZQpY-4OnmaA5FvMWCI.roa (raw, json)
Hash identifier: gIE9GtaT7QYjbwbtBb/I9fK3Z8msSz6bl0mmXonooy0=
Subject key identifier: F0:AB:88:A5:25:F2:2D:94:29:63:EE:0E:9E:66:80:E4:5B:CC:58:22
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C24A87BE4C5689EE2A4061DD8806D1608
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8KuIpSXyLZQpY-4OnmaA5FvMWCI.roa
Signing time: Fri 01 Dec 2023 09:14:30 +0000
ROA not before: Fri 01 Dec 2023 09:14:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:a8:7b:e4:c5:68:9e:e2:a4:06:1d:d8:80:6d:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 09:14:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0ab88a525f22d942963ee0e9e6680e45bcc5822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:68:b8:a0:05:72:56:69:c3:49:f1:bc:f8:
ed:b4:06:9f:a4:5d:45:42:31:24:52:5d:a1:6b:69:
21:8b:8d:86:65:04:ab:87:2f:77:90:b2:b5:39:02:
b3:d0:08:ca:7b:50:50:ee:03:45:93:c5:4d:da:c2:
f9:bc:67:e5:18:45:7e:b5:f6:0e:c9:03:92:2d:7c:
49:3d:9a:d1:2d:48:d9:a2:87:87:f1:33:c6:e0:30:
d6:97:a4:e7:f9:52:9b:5c:2c:68:1f:b4:5e:f2:8b:
ef:cc:59:a8:40:9b:08:74:f5:5e:92:26:5a:b7:7d:
93:00:4a:e5:75:14:00:14:56:b0:67:c8:d4:e9:25:
33:79:b6:77:e2:5a:d1:01:48:30:45:b7:f7:8f:64:
eb:ee:84:fe:36:7e:11:eb:1f:08:97:c4:82:e0:50:
12:cc:77:c0:14:b1:e0:d1:f4:a2:04:e2:61:18:ad:
5f:31:df:c5:3f:4b:49:3d:af:d8:34:33:88:00:6d:
8c:cc:15:1c:03:c2:95:92:58:cb:1f:65:fb:f4:23:
7e:08:c2:22:3e:2d:fc:50:f4:7c:3e:fa:3d:78:33:
e1:1d:53:ea:19:67:6a:16:aa:4c:11:73:92:03:b5:
96:fb:31:39:19:6c:b9:ea:01:21:7d:22:14:d8:27:
e0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AB:88:A5:25:F2:2D:94:29:63:EE:0E:9E:66:80:E4:5B:CC:58:22
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8KuIpSXyLZQpY-4OnmaA5FvMWCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:29:da:69:b2:25:c2:f0:48:18:0c:26:3b:5f:df:70:b2:21:
cb:e8:bf:3e:1a:7e:b3:ef:4c:88:30:ab:9f:f7:2b:78:fc:59:
37:6d:37:7c:fb:d5:bb:94:74:ca:5d:82:6d:46:6f:6e:51:bf:
9c:e6:e3:72:1f:80:81:45:16:4d:00:e3:3e:6e:79:e3:fe:0a:
82:7a:ec:a4:64:8b:4a:3b:5c:8a:b4:f6:5b:61:8b:22:3b:32:
91:de:05:18:e4:4a:74:2f:48:23:97:29:06:39:eb:f8:f3:7e:
10:11:67:61:bd:30:0b:eb:e9:a9:27:47:0c:06:88:5d:fa:8d:
d6:64:7f:72:b5:52:0e:f4:47:10:f1:f8:fd:85:9a:22:49:a5:
52:55:65:ab:8b:10:e5:21:82:90:1c:d1:33:8a:fc:86:77:69:
24:45:0d:2c:43:46:31:74:28:13:c7:4f:c1:c9:32:ae:2b:c1:
3f:28:a9:59:e6:f5:fa:d2:31:f8:58:8f:2d:ca:c1:b0:96:44:
04:84:ea:ff:e0:e2:b3:81:b8:49:f4:1f:11:87:02:dc:19:a1:
7c:09:d7:4c:a8:69:98:39:0a:78:c0:ff:75:78:64:5a:b9:21:
5f:8c:84:77:88:67:6f:36:6c:dc:4a:b1:2c:5a:44:78:44:45:
d3:9f:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:53:40 2025 by rpki-client