Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BS1YqWkAHcgruHtD9SdpwK5g2Vc.roa
File: BS1YqWkAHcgruHtD9SdpwK5g2Vc.roa (raw, json)
Hash identifier: 2dQdJUtUE2ODkA7yXbIdv075OM/Tv+wZtnuRRiVRSn0=
Subject key identifier: 05:2D:58:A9:69:00:1D:C8:2B:B8:7B:43:F5:27:69:C0:AE:60:D9:57
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C532FA58B9B2B6EE5C7DF78F3A4201FC2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BS1YqWkAHcgruHtD9SdpwK5g2Vc.roa
Signing time: Sun 10 Dec 2023 10:04:40 +0000
ROA not before: Sun 10 Dec 2023 10:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:532f:9bdd/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:2f:a5:8b:9b:2b:6e:e5:c7:df:78:f3:a4:20:1f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 10:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=052d58a969001dc82bb87b43f52769c0ae60d957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:57:6d:d7:0b:53:77:f8:aa:ab:ff:b1:84:
58:d7:b4:6d:51:1f:24:49:27:4e:48:06:15:37:e0:
a1:dc:c6:55:66:e3:90:38:e4:46:87:39:d3:1e:79:
3b:6c:59:9a:13:84:02:fa:6c:35:17:05:6b:d2:21:
e8:69:7a:29:47:77:d0:3a:60:22:d9:ed:9a:98:c9:
79:64:76:7a:24:a1:d8:d3:52:14:50:fb:d9:ea:11:
b1:ba:4d:57:9b:31:24:6c:01:8b:9e:ff:96:b4:ec:
9c:3c:63:7b:da:14:50:76:3f:61:2b:29:c8:5c:57:
d0:57:81:40:ce:b0:1f:f1:82:81:8f:6c:58:79:48:
4a:6a:16:5c:28:3d:94:61:53:b5:e3:6b:e1:01:d3:
b0:f1:cc:41:e7:22:3e:1a:19:3b:cd:4e:95:e8:98:
9f:30:e1:29:33:04:37:d4:c6:6c:bb:96:f8:d9:49:
c9:83:fc:92:d6:79:fc:44:b5:9b:d5:90:18:9b:7b:
8b:9c:cc:db:14:c6:d6:a9:1f:65:22:b3:66:c3:d4:
41:e4:6f:43:c4:2c:9e:73:6f:54:41:4a:ba:33:90:
0e:9f:c5:76:8c:d3:ec:59:90:81:31:3c:08:83:c4:
bf:06:56:7e:05:8e:f4:c8:cd:bb:b7:9f:a1:e8:72:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2D:58:A9:69:00:1D:C8:2B:B8:7B:43:F5:27:69:C0:AE:60:D9:57
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BS1YqWkAHcgruHtD9SdpwK5g2Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:74:3a:43:90:05:a6:ba:ac:be:55:34:32:e2:2c:23:60:fe:
ab:e3:ab:da:4f:9a:66:3d:b3:15:92:ba:7e:8f:8d:87:99:31:
38:de:69:c8:d0:3a:bc:fd:24:8f:d0:89:8d:e8:86:66:88:58:
27:63:33:cb:04:fc:18:d9:1d:8e:ff:4b:bd:f7:55:e8:a5:f1:
21:66:46:8d:ea:72:d1:02:33:9c:2a:7a:df:a6:51:0a:39:b4:
f8:74:0e:64:1a:30:9d:66:00:57:4a:e3:07:03:1b:36:33:9b:
4e:28:76:06:9c:33:80:aa:76:8b:e6:90:18:63:50:f1:79:38:
5c:ff:43:3e:61:ae:3c:eb:31:d2:9c:07:be:00:85:49:8f:b1:
2f:71:8e:c2:2c:c4:de:40:52:18:f8:26:65:fe:53:5b:b2:97:
34:8a:99:0d:77:ed:dd:bd:41:7a:d4:db:2d:c4:c8:6a:55:94:
b3:97:4c:e0:a1:35:4f:4a:6f:a3:03:13:87:57:d8:70:48:f2:
3c:e4:21:20:10:06:1c:ae:0c:20:1a:31:c6:7e:8b:b1:81:e9:
62:8b:26:28:3d:37:d4:a6:15:d7:de:cd:1d:2c:00:c1:19:26:
3c:8e:53:1d:6a:10:b5:1c:01:c5:00:f0:e7:22:12:ec:9f:42:
f4:3d:00:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:17 2025 by rpki-client