Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AlnJdCUAEIYHaCEmTrTvs8czFrI.roa
File: AlnJdCUAEIYHaCEmTrTvs8czFrI.roa (raw, json)
Hash identifier: C6Zb14MrLlyBaqzk+Y2wLQSJdpsxGIiOdDcM2AJYp7o=
Subject key identifier: 02:59:C9:74:25:00:10:86:07:68:21:26:4E:B4:EF:B3:C7:33:16:B2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C83B8A83F59F69811EF1C5667DD71D9BD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AlnJdCUAEIYHaCEmTrTvs8czFrI.roa
Signing time: Tue 19 Dec 2023 20:16:06 +0000
ROA not before: Tue 19 Dec 2023 20:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:b8:a8:3f:59:f6:98:11:ef:1c:56:67:dd:71:d9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 20:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0259c97425001086076821264eb4efb3c73316b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:0c:0b:90:4b:f9:c3:6e:f0:7c:62:be:b4:
ab:2a:50:78:9d:e4:c4:6b:80:da:e7:71:17:b4:e5:
20:6d:fa:98:c9:76:35:f8:7f:35:66:5a:74:43:bc:
31:f6:80:4a:29:ef:f9:da:61:b5:c8:ff:41:6f:81:
45:42:91:07:a7:b2:6a:39:6a:6a:52:4e:32:95:04:
49:82:6f:c4:dd:65:cc:b5:7a:ae:d7:38:56:cd:c6:
42:43:82:6c:1b:cd:e6:d3:5e:5b:94:77:54:fd:b0:
43:cb:1d:82:b3:af:cb:fd:8c:03:8c:65:b2:3d:a1:
a9:d7:0f:c0:8a:0a:a9:98:61:f9:14:08:fd:19:f4:
7a:12:e7:fd:8d:fb:6e:71:3d:03:fa:d9:0e:d7:8a:
19:a6:86:83:cf:e9:c4:00:52:c3:bd:99:5d:8e:2e:
02:54:85:75:52:ee:89:21:e5:f5:22:ad:73:e1:c2:
ec:2c:21:e2:04:d0:91:f4:69:11:eb:5a:50:49:21:
79:6f:a4:d4:b5:c5:e1:7c:02:85:c2:6a:0a:5b:41:
ef:55:1e:8a:b8:4e:8c:57:4f:b5:57:2e:83:53:59:
6a:19:0a:0d:55:ef:cd:69:53:b3:2f:c6:49:82:e4:
f4:d0:9e:3b:48:a7:85:32:75:b3:a6:5c:60:cf:a8:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:59:C9:74:25:00:10:86:07:68:21:26:4E:B4:EF:B3:C7:33:16:B2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AlnJdCUAEIYHaCEmTrTvs8czFrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:50:d3:f6:a0:0b:ee:e0:ad:ba:7b:9c:af:33:09:b4:b4:e2:
bb:4d:68:22:39:c0:c8:cf:ea:81:0b:48:0f:30:42:7d:92:ee:
a0:c1:23:db:05:fb:03:dc:76:f8:86:d6:a4:40:f8:a7:66:be:
17:9d:f2:91:95:08:94:62:0b:d1:31:0c:b8:fd:22:7b:db:c0:
62:79:b7:10:96:fb:ab:68:6a:cb:40:75:16:23:22:ea:96:7a:
a6:12:13:63:b8:31:df:a3:5e:48:e2:65:eb:ad:29:79:68:db:
cf:2d:3f:ea:ac:94:85:7c:a9:c5:f8:bd:53:27:28:dc:a9:2e:
89:f3:f2:4c:cf:86:d5:c0:e5:dd:b5:fa:79:dc:49:fb:04:d2:
26:07:a4:1b:b1:31:42:b8:5e:25:33:ad:2a:ed:86:c9:5f:30:
9b:02:25:d3:2e:ac:63:4a:cf:27:a6:ac:2b:d1:90:c9:26:21:
30:d5:36:42:4d:9e:67:0b:e9:78:21:a7:ed:fb:fd:44:5f:d1:
bf:f7:5c:0a:f9:22:63:02:71:93:4e:cc:73:c6:ab:ae:22:8f:
55:ba:d8:0a:e2:21:ce:29:91:aa:9b:c7:be:2a:da:1f:58:1e:
7f:8a:ef:e7:22:70:78:6b:ef:d9:23:63:a6:8d:47:c2:98:5a:
cd:8d:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:38 2025 by rpki-client