Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8duuf3_5oVOyaWNznSz2HfCa15A.roa
File: 8duuf3_5oVOyaWNznSz2HfCa15A.roa (raw, json)
Hash identifier: hrYxT0FuIYJDHLf3L3wOafdzDBbBgEpK9DEtBQegT7g=
Subject key identifier: F1:DB:AE:7F:7F:F9:A1:53:B2:69:63:73:9D:2C:F6:1D:F0:9A:D7:90
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C50717092CF99FAB3DB8DDAB675B46352
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8duuf3_5oVOyaWNznSz2HfCa15A.roa
Signing time: Sat 09 Dec 2023 21:17:40 +0000
ROA not before: Sat 09 Dec 2023 21:17:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:50:71:70:92:cf:99:fa:b3:db:8d:da:b6:75:b4:63:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 21:17:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1dbae7f7ff9a153b26963739d2cf61df09ad790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:03:72:4b:4e:1e:ae:77:65:d0:f5:de:c0:
76:fd:33:5f:71:a1:6e:ec:5d:b1:a5:7f:b7:fe:24:
7d:8c:b5:7e:ec:85:53:86:bf:e5:d2:dc:7d:f3:22:
2a:24:c6:98:d6:e5:42:89:8b:58:0f:cf:c6:73:a3:
b4:41:a3:8e:04:9a:f3:b4:d0:cd:bf:aa:ea:09:04:
b8:49:6d:eb:94:12:b4:78:2c:47:63:fe:9c:50:3d:
9e:22:5f:e0:dd:9d:82:f6:b4:5b:a6:e5:72:e2:6d:
9e:89:6b:b9:57:5b:a8:02:45:a8:30:ac:e7:b5:a9:
11:7a:9f:80:dd:67:6f:0e:c2:55:14:7d:4f:97:ae:
49:c4:d6:3f:f2:8f:56:5a:0a:83:67:93:50:cb:1a:
26:6e:d1:b2:f2:e7:2e:a5:7f:93:0c:45:db:f7:7f:
61:db:7a:99:31:3e:75:b1:79:98:73:65:26:44:67:
ac:d0:75:e7:7c:80:9f:37:5b:30:6c:50:a7:b4:46:
59:89:4e:7a:89:e7:65:99:d1:a7:fd:2d:2f:9e:fd:
e2:ba:4e:e0:e6:55:0e:90:e1:99:3b:84:b7:f0:73:
b0:41:ad:37:58:a8:27:1f:01:e9:f1:b3:97:9e:23:
b4:3e:8d:24:d2:28:67:04:ab:e2:71:b1:2b:3d:e9:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:AE:7F:7F:F9:A1:53:B2:69:63:73:9D:2C:F6:1D:F0:9A:D7:90
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8duuf3_5oVOyaWNznSz2HfCa15A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ba:f1:b5:13:6e:e3:67:fa:d7:f2:cc:4c:c6:6f:c5:43:e2:28:
75:f8:72:a1:5d:f5:0b:28:9c:66:48:7c:e2:2c:49:8f:13:9b:
24:24:41:19:d0:15:14:a6:9e:69:9d:b8:fc:76:8d:82:cc:ed:
84:60:3f:76:f1:e8:a7:99:19:05:ed:17:dc:82:bb:04:02:63:
c9:e9:00:4a:aa:3e:fe:e8:12:9e:86:6f:c1:d5:1d:b1:c9:05:
87:e0:19:be:48:36:b1:1b:39:f0:cb:5a:39:19:fb:bf:7a:00:
06:1b:c3:4c:45:bc:8d:4f:73:98:27:c9:9c:cb:43:e6:35:43:
d3:23:9e:30:d3:a2:58:8c:53:d2:57:6f:0e:90:12:e0:a9:b8:
66:b3:2a:f2:cd:be:26:cc:36:27:22:95:85:6c:6d:08:1e:cb:
ab:d2:e4:18:82:f1:29:45:91:89:76:78:68:c5:c4:f2:a5:97:
6f:6d:d1:d7:5e:48:cb:b4:9d:fd:61:4e:d2:d3:05:fd:18:74:
3d:9c:fb:88:9c:ec:6e:ae:fc:32:48:5d:0a:3a:ad:00:90:9e:
8e:06:7e:61:33:03:bc:2d:3e:48:5a:4e:f4:d8:fe:08:dd:0d:
1a:66:36:df:65:90:8f:65:f9:fc:d3:bf:59:1b:bc:43:51:b0:
12:cd:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:05:44 2025 by rpki-client