Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AeD3M3rujkwBaxE3-p25FuSNoks.roa
File: AeD3M3rujkwBaxE3-p25FuSNoks.roa (raw, json)
Hash identifier: ANBj/pqXLSUxQyI5fexqiDSQz6Cd+xjRX234UcLkI4E=
Subject key identifier: 01:E0:F7:33:7A:EE:8E:4C:01:6B:11:37:FA:9D:B9:16:E4:8D:A2:4B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C051F707A9CD4F73A3379C07154505548
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AeD3M3rujkwBaxE3-p25FuSNoks.roa
Signing time: Sat 25 Nov 2023 06:16:35 +0000
ROA not before: Sat 25 Nov 2023 06:16:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:1f:70:7a:9c:d4:f7:3a:33:79:c0:71:54:50:55:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 06:16:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01e0f7337aee8e4c016b1137fa9db916e48da24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:2d:84:12:d1:e5:4d:3b:fb:d2:ef:ba:c6:
34:d3:f2:c1:46:ef:bf:66:1d:fc:67:3f:89:40:7b:
d6:3c:5a:a8:59:f1:80:be:05:ce:e6:95:55:ab:74:
b0:ea:be:46:73:66:67:54:42:6a:0e:84:82:4f:77:
5e:9d:5d:4b:0c:2f:bf:2e:16:f4:dc:2a:4d:c0:ea:
5c:f2:c1:42:cd:38:29:eb:91:28:80:83:ce:69:2c:
28:31:a0:92:6f:db:1e:dc:5c:47:cd:d5:12:49:be:
cd:a8:0d:f6:ac:37:13:a3:a4:cd:8e:fa:73:1b:bb:
13:dc:31:25:65:97:a2:89:58:fa:7e:53:c8:1b:3d:
82:e2:0b:78:e0:0d:dc:32:f6:f4:4f:79:6d:d0:59:
84:2c:33:e1:8b:0b:00:81:5a:1c:97:6d:b4:46:78:
db:5e:d3:25:6d:5c:7a:fb:10:34:a7:34:74:7f:39:
19:e8:9a:d0:50:d2:51:fc:4c:29:04:cb:b3:b6:af:
01:89:26:5a:18:fe:b2:f2:d9:7f:e7:93:c4:b9:77:
26:55:92:2f:68:63:96:78:6d:54:e8:46:be:06:e9:
80:28:fd:03:3c:40:7a:51:cf:ae:8a:b5:22:75:09:
6e:0c:46:81:11:e3:18:3c:47:50:ce:d7:15:c4:03:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E0:F7:33:7A:EE:8E:4C:01:6B:11:37:FA:9D:B9:16:E4:8D:A2:4B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AeD3M3rujkwBaxE3-p25FuSNoks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:d9:59:89:21:ef:d4:56:39:83:31:22:8f:39:23:49:4b:b0:
49:74:48:c8:d2:ad:b0:c6:2d:87:00:43:96:ae:a4:33:ec:c3:
40:34:7e:c6:5e:0f:d8:37:9d:cf:f8:9b:f6:a4:13:81:80:d1:
08:a3:4c:e8:6a:91:8a:4d:ea:42:c7:99:19:52:93:33:8e:de:
a8:78:f4:d6:8b:71:c1:a1:41:da:19:69:8e:88:b8:55:96:ac:
70:e6:51:c7:e4:99:37:05:04:32:e9:95:57:1c:77:5d:46:fc:
20:cb:0c:2e:13:e1:4e:3e:ea:a6:30:53:1d:d4:4d:ae:24:01:
ee:45:6d:c2:c7:0f:6f:da:9b:89:8d:0d:bc:74:7a:83:83:53:
15:88:23:2d:47:11:8d:f5:22:4b:9d:a1:62:7f:f4:58:06:d1:
43:f1:38:e8:b3:0c:e3:02:ed:71:fc:0d:b1:9c:dc:11:27:b4:
f8:b2:e4:a6:0a:b8:64:2c:d8:76:02:a3:af:e9:28:fe:e3:9f:
98:2f:5c:19:02:07:a2:cd:67:fb:6c:82:72:a4:6c:1c:43:18:
92:6f:c3:c7:c2:11:3d:c4:c7:03:26:7b:15:7d:ad:df:c4:6a:
ea:9b:04:fe:da:d8:9d:19:b2:0c:b3:be:77:ba:9a:54:b1:33:
d6:81:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:37 2025 by rpki-client