Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/95yP6-troR_3dLY6TnA2XAPPcbg.roa
File: 95yP6-troR_3dLY6TnA2XAPPcbg.roa (raw, json)
Hash identifier: OAaLDX+8UL2xlk/8HA+PhbLkETTRrmvxwhbqx90sLrw=
Subject key identifier: F7:9C:8F:EB:EB:6B:A1:1F:F7:74:B6:3A:4E:70:36:5C:03:CF:71:B8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C12A215EE267FE9DFE4B498ED1DE568B5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/95yP6-troR_3dLY6TnA2XAPPcbg.roa
Signing time: Mon 27 Nov 2023 21:14:21 +0000
ROA not before: Mon 27 Nov 2023 21:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:12:a2:15:ee:26:7f:e9:df:e4:b4:98:ed:1d:e5:68:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 21:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f79c8febeb6ba11ff774b63a4e70365c03cf71b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:e8:b9:8f:bf:b5:42:b0:cc:22:31:01:43:
d9:2c:4f:c2:82:2b:ec:81:17:90:55:9f:e0:a5:cc:
15:26:9d:fc:d6:97:56:72:f6:2b:c6:d6:1d:3d:54:
20:80:6a:87:6d:b3:23:2d:ce:c7:48:b5:19:13:55:
f4:91:e4:c2:f0:a3:e4:7c:58:7e:2d:62:de:3a:a7:
cc:a1:b2:c2:73:ac:5b:33:ff:e2:d3:a6:df:30:60:
2e:cf:8c:b5:77:73:1d:3c:83:f5:1f:62:6d:89:94:
54:9a:f4:fb:e9:a8:c6:ea:6a:84:b4:a3:a1:1b:a6:
1f:5c:39:32:23:55:30:0d:33:9b:6f:61:62:e7:7a:
c3:d5:1d:83:b9:71:af:6e:67:9c:98:b6:02:23:bf:
85:79:0c:ab:26:cc:cf:94:80:f0:9d:f5:99:bb:e2:
9e:79:c6:a6:05:c1:85:99:f2:6a:88:d0:02:71:5d:
c5:ed:6c:3d:8f:90:17:9c:11:18:bc:93:d0:49:58:
04:b7:0a:d8:f0:87:1d:92:6d:e0:f3:f6:49:00:45:
b9:e8:51:64:5a:90:3a:6d:39:44:16:41:f1:16:27:
6a:a2:15:12:32:b3:fa:e3:e0:6c:23:a9:1d:bb:82:
b1:56:52:30:28:10:3e:8e:de:6b:bb:2a:85:c4:2c:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9C:8F:EB:EB:6B:A1:1F:F7:74:B6:3A:4E:70:36:5C:03:CF:71:B8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/95yP6-troR_3dLY6TnA2XAPPcbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:ec:82:ac:12:32:7a:74:02:6d:70:c1:3b:4c:f6:46:c1:43:
8d:e3:9e:ab:6c:63:3c:ff:79:82:52:86:ad:ab:54:1e:ed:55:
50:cf:64:14:a1:89:8f:4e:45:a1:f7:77:27:d9:5f:31:7a:b1:
2e:de:58:d5:1a:96:30:d1:0e:8c:2d:63:07:9f:6c:43:52:fd:
c2:1e:9e:83:87:8b:1c:cd:d0:57:d4:91:9e:b6:af:57:b2:dc:
59:dc:29:0a:f8:4f:37:15:5c:11:c0:81:df:1e:9c:dd:55:c0:
a4:f0:68:87:b6:b7:9e:03:0d:3b:52:c1:9b:62:c1:bb:71:41:
6a:69:5b:aa:6c:00:10:91:18:ee:d6:11:92:85:27:2d:8a:c1:
39:19:fd:05:1f:a1:22:e0:10:96:d9:48:b1:51:60:d5:ac:d9:
15:57:47:b8:06:3a:23:e6:79:f4:1a:11:c0:7a:63:04:c5:5c:
b5:a1:8d:65:58:1c:a2:5a:4e:2a:d0:6b:e0:7a:6c:5a:cf:70:
88:de:58:9e:21:93:1e:b0:d0:71:30:1e:4a:7f:6f:96:19:9c:
4d:ec:47:8a:db:ba:aa:9e:97:e9:2b:3a:a1:dd:9c:3c:5a:16:
f2:7e:ae:33:ea:8b:60:2e:ba:28:d9:f2:b4:c8:1a:8e:1a:a9:
16:6b:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:26 2025 by rpki-client