Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ARLsF2bxPgjFCGEkrcNU4zSlvM8.roa
File: ARLsF2bxPgjFCGEkrcNU4zSlvM8.roa (raw, json)
Hash identifier: L2y0T7yMhlyjKRjczELgdlAoCWNEjkF3xyRrL2b6s04=
Subject key identifier: 01:12:EC:17:66:F1:3E:08:C5:08:61:24:AD:C3:54:E3:34:A5:BC:CF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA03FC855DF79CDC355D5551F0B64D602
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ARLsF2bxPgjFCGEkrcNU4zSlvM8.roa
Signing time: Sun 05 Nov 2023 16:10:16 +0000
ROA not before: Sun 05 Nov 2023 16:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:3f:c8:55:df:79:cd:c3:55:d5:55:1f:0b:64:d6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 16:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0112ec1766f13e08c5086124adc354e334a5bccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:08:9b:86:72:4d:99:1f:27:84:1c:82:f9:
bf:6e:8b:d8:9e:9e:24:e9:dd:56:31:01:d6:2d:22:
fe:68:a5:99:c5:3c:d2:b9:8a:90:5f:01:7e:04:96:
fe:d8:fc:44:ac:68:41:90:d3:b9:50:17:9c:a7:5b:
a9:3e:64:89:cf:70:3c:a1:fe:42:15:2b:5d:44:48:
ff:07:81:da:5e:7f:23:a1:69:11:d4:94:42:90:09:
33:ef:4b:01:9a:34:dd:25:b4:48:89:4c:14:fb:8f:
a3:15:8d:4a:69:c7:fe:df:a3:f3:0d:8c:df:d1:a0:
ca:37:4b:ec:16:0c:dd:9c:1e:b8:2e:dd:a3:e0:78:
72:31:b2:a0:0c:90:f7:35:4a:43:a3:2e:34:c2:47:
e5:8a:40:b2:ca:20:7d:9f:9c:e8:ee:34:5d:96:5a:
44:8e:7f:18:80:6c:04:d0:ae:23:f1:8c:23:d9:e3:
1b:8d:54:35:a0:c3:ce:a9:57:7a:49:b3:f1:09:02:
fa:bc:17:08:58:9d:61:60:50:82:2f:6d:45:0a:be:
bb:4c:d5:39:0d:72:c2:f9:63:c5:8e:e8:aa:27:65:
af:ab:d7:5b:07:4d:b0:96:cb:08:36:22:78:70:66:
7b:1b:b1:70:0e:93:f1:5d:16:2a:ba:86:5a:37:f5:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:12:EC:17:66:F1:3E:08:C5:08:61:24:AD:C3:54:E3:34:A5:BC:CF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ARLsF2bxPgjFCGEkrcNU4zSlvM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:9a:6c:0e:85:cb:cc:56:e3:c2:91:e6:ca:8f:e7:14:b5:e0:
22:22:a6:d2:36:c6:cd:32:a0:d1:27:00:11:17:bc:bf:a2:2c:
eb:c0:7b:98:65:66:cf:68:61:ef:d6:5b:91:72:c7:a4:9d:ef:
8a:75:3d:08:57:6d:64:b6:7e:77:df:44:d4:4c:05:a2:fb:f7:
2f:73:f9:43:ef:fb:ce:4e:62:36:01:43:f6:5f:09:0c:21:5a:
c4:dd:8b:99:ec:72:25:46:90:9e:44:89:18:4a:a8:6e:99:ff:
77:e4:b4:cc:1f:fc:04:d6:30:cc:b0:9b:c8:62:d9:7c:6e:9a:
3f:0b:13:97:aa:cf:82:4a:14:d9:09:7c:84:d1:1c:d2:d4:63:
57:7d:ae:73:39:52:b4:3d:b6:4b:79:56:56:4d:9f:8d:5d:ef:
e5:61:ad:b1:4f:46:9a:8a:e2:7d:59:e4:5c:fe:15:f2:3a:88:
a9:26:52:12:8e:76:cc:c9:76:2e:cb:04:b4:b2:97:98:88:8c:
8a:60:93:00:b4:ed:11:e1:01:e3:d0:4a:13:04:b0:c3:d8:55:
c1:9c:15:7e:5b:0a:2e:dd:74:26:f9:ba:01:f5:d7:ca:f7:6c:
bc:b0:a4:89:2b:d4:b7:4e:bd:0b:54:c3:18:bd:9a:3e:dd:2e:
e7:5b:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:48 2025 by rpki-client