Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ABmHIj3FmF-Qo8fH4jChKpI2lHc.roa
File: ABmHIj3FmF-Qo8fH4jChKpI2lHc.roa (raw, json)
Hash identifier: RJB3yAcWlIEOeovetzrSfh08V7kRpCMVvpxJAaDz5z8=
Subject key identifier: 00:19:87:22:3D:C5:98:5F:90:A3:C7:C7:E2:30:A1:2A:92:36:94:77
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF53F771365DD176CA3744931CD87FA0A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ABmHIj3FmF-Qo8fH4jChKpI2lHc.roa
Signing time: Tue 03 Oct 2023 11:14:51 +0000
ROA not before: Tue 03 Oct 2023 11:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:3f:77:13:65:dd:17:6c:a3:74:49:31:cd:87:fa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 11:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=001987223dc5985f90a3c7c7e230a12a92369477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:cd:f6:90:52:6e:40:96:12:0e:9b:46:07:
7c:e3:87:e9:85:df:f0:98:7b:a7:02:86:38:33:1f:
36:3e:59:46:37:8b:45:a7:e2:87:2a:0a:05:ca:84:
19:d3:0e:f1:60:2a:5d:51:fa:3d:cb:41:6b:fd:28:
04:8f:3d:99:bd:b2:8b:79:d9:a1:2c:5e:71:cc:d4:
62:6b:96:19:36:74:54:46:55:60:ee:4a:0b:de:4e:
a7:8e:ff:fa:c7:7e:97:c1:af:d7:d4:f2:39:d5:af:
a7:be:2a:35:8e:79:4e:df:cc:ad:56:49:94:7d:14:
1e:48:4c:d7:d0:9b:a6:5d:0a:2a:c8:51:fa:3d:b9:
1d:5d:69:fc:55:1a:7d:2d:4e:9f:6e:3a:ae:17:85:
61:8f:a6:2a:97:5f:d0:b4:2b:a8:1d:d0:4e:d7:5a:
37:6f:6e:37:37:65:1b:52:37:73:57:57:be:cb:e5:
00:20:41:f5:f7:8d:45:14:12:72:4a:e1:2e:eb:45:
c8:06:27:95:48:df:b6:8c:9f:1d:5d:2b:f4:de:6b:
4d:9f:aa:d7:79:87:27:38:40:13:98:91:a8:e3:8a:
6a:f0:42:f2:da:c2:9c:27:81:03:e4:31:d3:cf:68:
cc:17:c6:bb:0a:f7:3d:db:21:5b:f5:4a:bb:76:b2:
6a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:19:87:22:3D:C5:98:5F:90:A3:C7:C7:E2:30:A1:2A:92:36:94:77
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ABmHIj3FmF-Qo8fH4jChKpI2lHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c7:a8:9a:75:15:12:64:36:06:80:dd:c2:9f:a6:a3:6c:56:42:
36:63:e5:35:5b:81:67:ee:81:4a:07:14:64:c8:df:a9:f0:da:
9e:7d:31:8f:17:54:ba:1d:4c:9a:ba:1a:36:7c:2f:cc:0d:b8:
5a:56:8b:71:6d:39:c1:ce:c4:1d:e5:65:f6:e5:6b:c7:05:49:
ac:10:b0:e0:16:a9:8d:f9:a5:45:97:e2:8e:b8:e9:e6:8b:6b:
b4:c1:3f:e9:3d:e0:5f:53:76:cf:64:99:38:e3:49:5a:98:83:
17:27:da:1f:a1:b9:32:02:71:32:99:96:a4:71:8b:fa:ec:be:
8c:ce:de:ba:0b:94:51:b8:a2:a4:b3:c7:b3:92:80:a9:a0:52:
ef:fa:9e:2a:ff:40:dd:16:18:df:0d:d5:93:fa:e6:8a:ce:0d:
62:8b:ea:ac:b4:57:d3:28:8b:80:b8:92:e5:d1:c4:da:ae:f7:
e5:d0:8b:08:07:40:93:4a:13:97:32:b4:da:62:9f:27:96:53:
a7:f0:81:06:3b:a3:8d:8f:b3:b2:d0:72:d1:0f:73:7f:70:62:
61:bb:7b:fd:f7:a5:46:23:52:6c:58:a5:5e:41:69:c6:74:b5:
64:95:ae:37:97:f9:3d:2b:fa:b0:1f:e0:b4:2e:4f:31:25:83:
89:79:55:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:06 2025 by rpki-client