Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8NkeSiLwbvQX0J9yzKdFBh0w22E.roa
File: 8NkeSiLwbvQX0J9yzKdFBh0w22E.roa (raw, json)
Hash identifier: w2cGgfACYwfN43Q9wHfl0AFhVIgzhZnAT7Hbr/ptMUA=
Subject key identifier: F0:D9:1E:4A:22:F0:6E:F4:17:D0:9F:72:CC:A7:45:06:1D:30:DB:61
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC3DFF91FCFB929D6F7C8A5BA75E57DA8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8NkeSiLwbvQX0J9yzKdFBh0w22E.roa
Signing time: Sun 12 Nov 2023 14:11:57 +0000
ROA not before: Sun 12 Nov 2023 14:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c3:df:f9:1f:cf:b9:29:d6:f7:c8:a5:ba:75:e5:7d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 14:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0d91e4a22f06ef417d09f72cca745061d30db61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:18:46:8b:2f:49:fa:94:19:ef:aa:e2:10:
19:16:98:f6:e7:10:ea:0d:1b:a4:03:22:dd:f2:ce:
39:75:e6:ba:62:87:1f:0f:c8:d1:00:f5:dd:75:37:
52:f1:49:9f:39:36:8d:48:ff:64:a2:50:66:07:8d:
ab:24:ce:d0:d5:e1:e9:11:97:92:ab:4f:b7:5f:b2:
24:c6:ed:bd:04:76:cf:ff:0e:f9:a5:bb:59:35:30:
bb:f5:7e:34:13:5b:b2:05:76:0b:d6:97:0f:9f:df:
69:8a:4b:df:38:a8:d2:59:af:4e:c3:0c:20:4b:0f:
cd:9c:d3:3f:a6:a0:50:62:ff:3c:7d:fa:1b:3d:47:
f0:17:a3:df:eb:7f:b8:e1:d1:51:10:83:09:b1:57:
7a:62:f7:5b:0a:c0:d4:37:64:d9:a6:c0:47:89:f8:
2a:59:39:9d:2c:52:40:90:9a:6c:81:c2:6a:44:c2:
44:8e:c1:19:d3:7d:bb:dc:21:90:e8:e0:13:13:c4:
ba:61:48:4c:ac:86:0e:b2:3f:24:50:fe:b9:92:d6:
a6:5e:b1:b8:9a:c1:e0:71:d7:5e:4c:69:ca:34:ea:
42:12:4f:96:f3:2e:d2:21:a9:d5:75:dd:09:8c:2c:
dd:6c:47:4d:70:4e:b6:32:b8:50:44:79:99:aa:1f:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:1E:4A:22:F0:6E:F4:17:D0:9F:72:CC:A7:45:06:1D:30:DB:61
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8NkeSiLwbvQX0J9yzKdFBh0w22E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:89:36:5e:b1:22:14:fd:db:32:f4:32:65:aa:6a:5f:87:f8:
0e:6e:7d:7d:fa:5d:ef:66:5b:83:b8:09:54:39:6d:65:10:a8:
f2:20:f1:ee:e1:92:5e:d7:c7:dd:2a:96:8a:2d:e7:3c:eb:17:
72:bf:86:16:0a:9a:7b:ad:97:6a:0e:97:9b:ba:ce:de:68:fb:
14:0a:38:ae:0e:00:38:69:83:b5:f9:38:fe:73:2a:0a:e1:2a:
06:b7:f8:6e:64:74:88:ad:90:73:c5:3d:c2:11:d0:c7:41:d8:
ab:4f:44:70:16:a2:3a:9f:71:37:ab:a6:de:c3:ff:dd:dd:5e:
37:d8:09:17:04:3a:56:cc:76:e1:48:c8:fc:31:71:15:ce:d2:
91:0d:fa:e9:7b:98:bc:f2:a2:9e:6b:36:5f:5b:8b:6a:e6:6d:
70:f3:aa:2c:72:c5:6a:c9:e7:78:da:a8:9a:ce:88:8d:56:68:
da:c0:2b:a2:4a:c1:a8:2b:44:dd:d7:01:4b:90:7c:95:2b:62:
7f:af:d9:34:6f:ff:56:c4:19:26:bf:99:1d:33:8c:ba:e1:f2:
1a:97:12:2a:06:2d:b2:b6:fc:72:f5:da:3f:b8:d9:ca:d9:08:
c6:b9:d2:db:aa:84:1d:fb:2d:ff:0e:f3:49:c1:fd:69:fb:55:
b2:98:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:02:30 2025 by rpki-client