Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BS6GqbHBEADjigCEVL4qX5_1RFw.roa
File: BS6GqbHBEADjigCEVL4qX5_1RFw.roa (raw, json)
Hash identifier: aJk1/XNzplhbCJxMEb3RxovSU4CNcki+vk9ma9ZgSeY=
Subject key identifier: 05:2E:86:A9:B1:C1:10:00:E3:8A:00:84:54:BE:2A:5F:9F:F5:44:5C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B62B2A1C46DE56EF3D0D3F0872E3EAE93
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BS6GqbHBEADjigCEVL4qX5_1RFw.roa
Signing time: Tue 24 Oct 2023 17:19:15 +0000
ROA not before: Tue 24 Oct 2023 17:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:b2:a1:c4:6d:e5:6e:f3:d0:d3:f0:87:2e:3e:ae:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 17:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=052e86a9b1c11000e38a008454be2a5f9ff5445c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:9f:18:7e:09:69:9d:0e:86:67:25:18:d6:
df:54:7f:42:81:58:25:a2:f9:c6:4b:5e:8d:55:f9:
ca:64:96:a0:f2:c7:69:06:41:97:09:96:42:ac:0a:
b8:78:5f:32:f3:6e:05:cb:c9:28:47:4f:fc:2a:f6:
94:71:81:01:e2:c8:45:13:b7:ad:61:18:7a:9b:fe:
9c:2c:da:9f:79:95:54:65:d7:a3:72:5d:83:cf:a0:
4b:51:50:1e:74:e9:c0:77:63:18:b4:2b:cc:9b:35:
ac:0e:87:82:0c:48:38:40:76:d0:6d:fd:15:40:59:
fb:f5:d6:71:00:e7:5b:a4:04:76:19:7b:ea:16:20:
d8:09:b8:7a:94:49:a6:14:56:ea:35:f1:bb:41:c3:
5c:b4:f3:a0:95:24:c9:08:cc:bb:11:a3:f9:8f:22:
36:f9:a7:7f:dd:2e:84:82:76:96:69:38:ee:66:40:
d1:73:f3:a6:be:17:f1:61:51:50:8b:c9:5f:ec:75:
cf:63:e7:e7:06:c5:a9:ef:6a:3a:e0:37:da:b2:1a:
78:b9:8a:04:bd:e4:96:dd:56:cf:bf:54:79:a9:6e:
bd:8f:18:52:62:9f:8f:1b:7a:61:03:24:50:c3:b9:
8a:3c:3e:46:8c:64:7e:1a:bb:6a:cf:17:72:1c:a6:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2E:86:A9:B1:C1:10:00:E3:8A:00:84:54:BE:2A:5F:9F:F5:44:5C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BS6GqbHBEADjigCEVL4qX5_1RFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:c4:95:7a:0f:a2:6e:7d:b0:01:8f:0c:34:ca:fa:f3:d9:8d:
59:71:de:94:65:8b:30:cd:0f:db:a9:aa:24:af:d5:a8:f1:fb:
28:5e:2d:47:5f:43:06:10:5e:ff:d9:49:9b:54:48:1b:a0:a3:
5a:51:08:d1:88:e0:ba:bf:5d:84:62:44:00:ab:23:3e:f5:8d:
32:0a:ac:6d:a1:ba:1e:c3:26:bf:9e:ca:c5:9b:67:79:ff:7e:
6f:da:27:2d:4a:b1:02:cb:d6:d3:a7:dc:c9:85:66:14:3d:94:
c9:ac:bc:d9:9b:dc:66:56:3b:72:ff:0d:66:f9:d6:c1:dd:a5:
73:08:ae:a0:c8:48:1f:fe:76:2c:4e:66:ef:2e:f5:d6:40:e7:
e9:1b:12:1b:2f:93:aa:aa:e5:93:95:d4:7a:ab:1a:ce:69:92:
de:a3:fd:71:b4:fd:4f:f6:f3:33:7b:7e:36:ae:69:4c:fd:02:
21:06:c0:f5:e8:92:93:71:f2:95:1b:c6:3d:c4:71:48:f1:ff:
ee:1a:57:7b:1d:34:98:89:16:59:67:ce:2f:54:3d:66:72:81:
e2:58:ea:f6:5a:ba:6e:1b:0b:d2:dd:dd:71:0d:00:e5:4b:46:
f4:e4:c9:80:c9:20:d8:d6:3d:9c:97:1f:8d:80:80:51:bc:07:
dc:47:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:09 2025 by rpki-client