Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AEiSCod8AmfgbUYkppTnZSsDkis.roa
File: AEiSCod8AmfgbUYkppTnZSsDkis.roa (raw, json)
Hash identifier: jg7fRX8VXNvCi7qvTLNViiPnuCZM/DbWVmvne1anc8Y=
Subject key identifier: 00:48:92:0A:87:7C:02:67:E0:6D:46:24:A6:94:E7:65:2B:03:92:2B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEC727A21DE622508EB2D78F67B981B79
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AEiSCod8AmfgbUYkppTnZSsDkis.roa
Signing time: Sun 01 Oct 2023 18:13:59 +0000
ROA not before: Sun 01 Oct 2023 18:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ec:72:7a:21:de:62:25:08:eb:2d:78:f6:7b:98:1b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 18:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0048920a877c0267e06d4624a694e7652b03922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:61:cf:27:58:27:6d:92:5f:55:7b:d6:ac:
37:23:23:84:83:3a:8e:5d:1c:78:6d:20:e7:ab:d2:
b4:d8:1d:d3:0a:d9:17:f8:41:0f:18:1c:47:a5:b9:
36:11:90:ae:36:a1:a7:07:a2:b5:b3:b6:ce:ef:36:
33:66:06:0e:75:9a:c0:c4:f2:66:89:60:25:a1:f2:
95:76:de:21:53:36:6a:ee:ce:15:01:0f:c0:94:03:
26:fc:21:97:3d:b6:86:b6:4f:56:b3:ee:ec:af:ef:
b9:a5:46:4e:ae:a4:a9:9b:75:20:93:5f:45:1f:68:
68:e5:e2:70:ad:32:45:bd:ba:b4:3d:47:e4:24:69:
2e:3b:ee:62:b7:88:f8:e0:0c:7f:ce:20:0f:2f:87:
ac:fe:70:7a:9d:ec:e4:b2:ad:b3:68:c7:1f:a1:18:
80:f8:fb:16:a7:ba:03:61:f7:cc:32:e7:0a:8a:a2:
f2:ae:44:16:36:ee:19:0b:7b:e7:26:6f:4c:8a:4d:
10:a6:f9:fa:8c:b6:87:fe:91:df:49:3c:5d:86:9b:
65:63:9e:3a:9b:cf:79:fb:cf:4e:ae:48:9b:7e:84:
13:cf:94:61:8e:8e:63:d0:0f:a6:95:e3:f8:2b:6e:
0d:90:c5:3b:a7:da:d3:40:33:e5:cd:28:9b:d0:35:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:48:92:0A:87:7C:02:67:E0:6D:46:24:A6:94:E7:65:2B:03:92:2B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AEiSCod8AmfgbUYkppTnZSsDkis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:0e:c6:65:5c:c0:43:95:55:62:bf:37:9f:1f:5a:3e:3f:e9:
3f:c2:42:c0:3f:47:06:5b:b0:95:48:4f:f7:f2:e4:89:63:9f:
9e:6b:89:b8:c7:43:00:69:6c:a6:e5:67:4e:6b:77:7b:3d:e4:
72:6c:2d:84:9d:51:6a:25:12:f4:13:b9:0b:b3:b8:4f:cc:bb:
b3:39:56:c4:63:a0:c1:76:1b:b5:24:aa:c4:ef:ea:d2:e4:98:
47:1d:04:52:d5:d0:49:fb:a7:21:bd:87:34:cb:ba:25:b1:79:
4e:ce:bf:bb:35:54:76:81:ad:88:6f:2b:e6:5c:aa:49:3e:43:
a0:1f:ed:b8:64:4f:7c:38:4a:89:30:5b:8f:4c:4f:d9:07:81:
fc:81:bb:80:f2:b3:28:fe:ab:f3:9f:85:70:9c:d4:25:14:72:
f5:3c:98:d3:76:dc:6d:a7:74:e8:2d:6f:d1:a5:6a:0d:84:45:
a7:56:ad:c3:05:ef:7d:4b:68:1a:e2:21:67:73:1a:c2:c0:fc:
7b:f3:fa:5b:ed:08:89:09:be:1b:da:9a:cc:5b:7f:94:fa:54:
b1:73:2f:e7:43:fb:85:45:9e:2d:d8:a4:9e:cd:04:da:9f:52:
2b:d3:4b:c9:91:6c:3c:c9:bf:22:4e:5d:cb:b8:ac:1a:56:8d:
eb:38:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:16:02 2025 by rpki-client