Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8dWJvus_WyCMqzSTn6TMTDx6qt4.roa
File: 8dWJvus_WyCMqzSTn6TMTDx6qt4.roa (raw, json)
Hash identifier: +VWAaKf9FJIbPmEYb+m63jefFt5Cv4WjQqSCtxy3v9Q=
Subject key identifier: F1:D5:89:BE:EB:3F:5B:20:8C:AB:34:93:9F:A4:CC:4C:3C:7A:AA:DE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC0E3EC49249BFC39D0937E162C4A72ED
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8dWJvus_WyCMqzSTn6TMTDx6qt4.roa
Signing time: Sat 23 Sep 2023 07:14:37 +0000
ROA not before: Sat 23 Sep 2023 07:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c0:e3:ec:49:24:9b:fc:39:d0:93:7e:16:2c:4a:72:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 07:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1d589beeb3f5b208cab34939fa4cc4c3c7aaade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:e6:94:26:22:16:61:b7:8e:f7:4c:92:84:
3c:1a:e4:c6:47:33:bf:c9:cc:02:63:2d:7a:f4:07:
f4:02:33:b2:9e:41:6a:14:5e:45:0c:59:f3:17:0a:
09:cc:e1:12:ac:e6:e3:6a:1e:ff:35:37:91:e0:15:
0b:76:75:3c:03:5b:fe:9e:80:85:9f:3f:7f:11:42:
e8:32:8b:36:8f:66:68:ff:12:ca:00:fc:cc:8a:af:
dd:19:3c:ab:2a:7d:df:14:d4:42:ef:c1:55:01:c5:
b2:32:9a:21:79:b8:06:b9:64:7e:0f:66:43:0c:0b:
5d:0b:f8:49:10:01:03:23:a8:1c:e9:27:6f:40:2a:
03:f0:49:15:e2:a9:3a:9a:bf:53:8d:4a:9a:84:5a:
f6:1d:23:99:08:d9:5a:e9:5b:db:d0:a5:84:13:02:
62:f7:b4:04:89:83:ba:e4:d4:fc:af:d7:8e:ac:0d:
5f:e9:b9:d6:5d:23:a9:d5:a8:1a:27:84:6a:83:ed:
3a:50:37:52:c3:51:93:0b:3f:46:2e:ad:39:01:6f:
f8:9e:91:32:c4:45:cd:8d:77:01:93:cc:11:5a:07:
cf:76:a5:c3:00:31:09:05:c6:93:94:7f:26:94:36:
e7:3d:12:35:c5:15:61:33:82:25:70:41:45:47:d6:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:89:BE:EB:3F:5B:20:8C:AB:34:93:9F:A4:CC:4C:3C:7A:AA:DE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8dWJvus_WyCMqzSTn6TMTDx6qt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:83:f4:4c:12:e0:6e:e0:30:fc:b8:5a:06:f9:20:c4:49:a4:
81:06:0d:09:bb:dd:c1:6a:f5:da:3f:4e:37:ff:30:bd:13:87:
d9:fd:fa:d2:d5:7e:93:6e:c1:9a:23:ef:93:f6:f5:40:68:84:
dc:b3:ee:52:b5:60:dd:21:1e:64:ef:95:e8:98:39:2c:e1:ce:
69:99:3a:ea:f4:36:98:32:68:69:d7:bc:4a:5c:8c:6c:a9:00:
f6:45:42:e7:7e:7f:65:30:e6:12:41:55:2c:3b:1b:89:c3:08:
ec:d1:3b:aa:35:f2:45:0f:00:c0:42:f8:38:fb:b1:57:4c:dd:
3a:73:9c:a1:c5:08:54:ff:ae:f9:53:87:82:d1:ae:b8:ac:79:
1c:e7:ea:19:fb:4d:b3:6f:7e:6d:c0:23:28:24:58:6e:e3:11:
a6:88:a8:ae:81:ee:37:28:d1:e5:7f:b5:d3:01:ba:39:6c:28:
1b:31:0b:af:8d:ea:58:c7:a4:91:bd:d5:1c:f0:bf:42:ca:40:
5b:08:00:d7:1e:f9:a2:3d:89:c7:22:da:cb:00:cd:79:37:09:
48:72:2e:dc:fd:d6:d7:c7:0f:da:3d:3e:82:c9:5f:e3:3d:e3:
e4:39:64:4c:de:fa:f6:a1:35:97:b9:62:a0:af:ff:46:f3:de:
d7:cb:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:54:37 2025 by rpki-client