Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/980VxWbyA6ESOG69iRupdfDvv3g.roa
File: 980VxWbyA6ESOG69iRupdfDvv3g.roa (raw, json)
Hash identifier: rQHO1nr34Cdv79duNnGiNFB0m7pP/g+CjduldRSrSfE=
Subject key identifier: F7:CD:15:C5:66:F2:03:A1:12:38:6E:BD:89:1B:A9:75:F0:EF:BF:78
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B42EEC62C91A23D02D1270726C2D5F06A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/980VxWbyA6ESOG69iRupdfDvv3g.roa
Signing time: Wed 18 Oct 2023 13:17:06 +0000
ROA not before: Wed 18 Oct 2023 13:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:ee:c6:2c:91:a2:3d:02:d1:27:07:26:c2:d5:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 13:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7cd15c566f203a112386ebd891ba975f0efbf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:7b:01:0c:81:ca:f5:10:9d:d6:c9:7b:a7:
02:f4:27:c4:f0:64:97:29:c4:2e:e1:5a:f3:ef:f3:
b9:74:cf:e7:88:6d:8b:a9:a6:cb:dc:4c:58:d7:fe:
0a:2c:c6:9a:57:98:bb:e4:e0:48:5c:80:17:99:cc:
1e:bc:82:15:28:ff:40:90:0c:7c:95:91:59:39:2a:
7d:23:d4:1a:47:15:9d:fb:52:6d:cf:85:76:fa:84:
54:44:10:a4:33:52:e3:c5:b0:41:5e:c0:f0:ce:ed:
a9:b2:7e:e4:3c:ad:b6:d0:95:04:c1:d8:f4:21:67:
8c:05:46:bf:e7:33:3b:7f:21:28:7a:7f:f9:b3:91:
8a:7a:c0:6b:d4:a4:76:71:d6:59:2f:bb:01:1c:11:
0d:62:29:6d:fa:8b:57:b7:22:0b:a4:9e:21:37:64:
04:e6:6c:65:8e:0e:6b:b2:70:e9:96:11:bf:99:97:
0d:f4:07:d2:dc:6f:89:44:b8:13:6e:7d:8e:8b:44:
6c:29:1a:04:c9:64:3a:61:2b:37:b6:f0:d5:0f:6b:
8c:d7:59:bb:f5:4b:b9:2e:cc:00:1c:db:af:46:fb:
1b:ab:c4:66:39:af:26:35:04:93:7e:33:06:97:7f:
b8:57:5e:8b:7f:1f:67:ca:76:a4:6c:36:78:1a:a9:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CD:15:C5:66:F2:03:A1:12:38:6E:BD:89:1B:A9:75:F0:EF:BF:78
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/980VxWbyA6ESOG69iRupdfDvv3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:93:29:db:c2:bc:f7:b8:92:36:01:a8:e9:25:c1:b2:d3:a5:
b3:f3:4f:57:91:55:ff:a5:ed:c7:df:d2:44:60:d2:ea:ff:a8:
57:c1:3a:b2:bf:59:3f:d5:8d:86:b2:a3:c2:bf:43:75:cd:ab:
1f:ed:95:7c:f4:3f:0a:2f:72:40:00:04:b4:8e:94:82:03:66:
a2:b6:0a:5c:5c:24:56:aa:f0:8e:9d:f8:1d:3a:78:85:db:32:
1d:44:5a:44:0f:f5:b4:ae:d8:0f:e3:68:fb:1a:a9:d2:0c:37:
ae:f1:1f:42:4b:67:45:aa:d2:67:94:6b:fd:57:bd:41:1e:ef:
e6:cf:f3:3d:0e:4c:08:6c:7e:3a:bb:be:27:cf:57:73:18:00:
37:64:e6:7b:f5:4b:fd:12:57:3a:8f:24:ce:21:14:86:46:7c:
94:16:e8:fa:b3:72:8f:95:ff:34:1b:a4:66:72:b0:44:fa:5b:
62:b0:b5:6f:a3:76:4b:d1:4a:6c:41:37:25:ce:5c:98:77:05:
ec:75:bf:2f:0a:bb:c9:8a:3b:05:64:0c:bf:fd:94:3b:19:35:
a1:d9:75:ff:ee:88:1b:8e:28:b3:ff:af:40:70:52:cc:70:3b:
84:11:a1:99:49:e0:a6:7a:c8:46:33:1f:28:e7:28:17:2d:1a:
a3:d4:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:01:18 2025 by rpki-client