Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AyGA9iQ9HtDREZ0Z4Cb9tvQJPLI.roa
File: AyGA9iQ9HtDREZ0Z4Cb9tvQJPLI.roa (raw, json)
Hash identifier: wD3m4SnfHp3yBo8shKnPoVMtOpfHikFAeMZ+R+3nCpI=
Subject key identifier: 03:21:80:F6:24:3D:1E:D0:D1:11:9D:19:E0:26:FD:B6:F4:09:3C:B2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B07B28D9AE4B527F78B12B2D21135757C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AyGA9iQ9HtDREZ0Z4Cb9tvQJPLI.roa
Signing time: Sat 07 Oct 2023 01:13:44 +0000
ROA not before: Sat 07 Oct 2023 01:13:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:07:b2:8d:9a:e4:b5:27:f7:8b:12:b2:d2:11:35:75:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 01:13:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=032180f6243d1ed0d1119d19e026fdb6f4093cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:04:83:1e:67:18:da:e8:f9:65:f1:75:d5:
d5:92:c6:df:b2:05:d2:27:19:3d:e6:f7:c4:ba:a7:
f0:92:e8:00:52:0c:32:26:88:0c:79:1d:b8:af:52:
68:7c:bc:8d:e7:ec:bf:54:f7:df:d8:f5:0c:01:fa:
e5:7c:6d:3b:19:5b:dc:04:2d:40:5c:06:74:9b:28:
f0:cd:88:ce:0e:49:be:e3:ea:e6:7f:0f:6b:f5:14:
c7:91:ad:c1:bd:89:bc:8c:43:ee:84:8d:31:83:66:
77:7b:bf:b4:e7:b2:66:80:0f:7c:f6:46:b0:38:e4:
27:a6:50:94:07:eb:d4:e1:e4:b1:6c:fc:a5:32:0b:
f6:35:3e:32:4b:e6:44:a9:fd:b9:85:02:78:1f:5e:
95:f1:4e:b8:b9:53:86:e0:f5:6f:5e:4b:9c:94:fd:
89:86:d9:29:90:61:24:6e:93:5d:ef:0e:b3:29:82:
35:f8:77:d1:09:05:bd:4b:65:70:b9:10:2e:fc:c5:
2f:a0:a9:1d:f2:8c:85:46:f9:1a:16:12:a1:c8:2b:
35:e3:86:8e:4c:c1:a2:5b:cd:11:80:60:fe:0a:b0:
07:9b:8e:82:aa:6e:4f:b9:67:f5:8e:b9:97:43:84:
a8:45:7c:a6:89:5c:68:12:48:2e:89:ac:d9:ff:4c:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:21:80:F6:24:3D:1E:D0:D1:11:9D:19:E0:26:FD:B6:F4:09:3C:B2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AyGA9iQ9HtDREZ0Z4Cb9tvQJPLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:04:7d:6c:ab:34:72:33:17:d3:55:fa:41:b0:b3:98:5f:f7:
42:63:11:6c:da:5a:d1:2e:92:e6:da:da:cb:2e:38:d4:b0:79:
e0:95:6d:c5:dc:f4:9c:8b:d4:62:b9:6c:24:ba:5f:c4:b5:ea:
c2:e7:09:88:1a:67:0b:51:81:93:c3:2c:08:23:c3:96:58:21:
83:9c:c1:5b:23:90:a3:26:82:e6:4a:55:bb:0c:ee:51:34:8d:
fd:d1:9c:c4:5c:6d:eb:40:6c:5d:9c:a4:ac:b7:03:dc:84:d3:
58:62:bd:a5:b3:f3:13:36:a1:03:54:3d:fb:5d:e4:31:02:c2:
9d:0b:7b:d3:7d:82:d5:b5:6e:a0:57:ba:d5:c9:9e:5b:54:3f:
24:39:ef:00:f6:38:bd:43:66:aa:e5:f2:58:28:4f:f3:49:9d:
3b:cc:ac:9c:b9:ab:b2:a0:e2:2b:5f:24:bc:0a:6a:c9:9c:b1:
da:19:38:53:db:6a:43:20:09:71:b5:ba:82:1f:11:f0:c2:8b:
d5:f0:de:ce:55:ae:d0:87:24:4b:e2:5d:27:e0:a4:61:ad:0a:
28:41:14:71:0b:7c:20:70:18:16:a4:49:61:b7:22:c6:0f:4b:
09:db:77:32:2d:22:d5:af:88:c6:82:ef:14:0f:59:c5:be:87:
b3:f0:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:27 2025 by rpki-client