Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C2R-n5D4faUcdOhXRh8RNEA5ruA.roa
File: C2R-n5D4faUcdOhXRh8RNEA5ruA.roa (raw, json)
Hash identifier: uAAzEuopnEPADaegH49teywvktsmrnnZFQLyyg4bG1Q=
Subject key identifier: 0B:64:7E:9F:90:F8:7D:A5:1C:74:E8:57:46:1F:11:34:40:39:AE:E0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC2653DED2437A91291093D59C31B13FA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C2R-n5D4faUcdOhXRh8RNEA5ruA.roa
Signing time: Sat 23 Sep 2023 14:15:29 +0000
ROA not before: Sat 23 Sep 2023 14:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c2:65:3d:ed:24:37:a9:12:91:09:3d:59:c3:1b:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 14:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b647e9f90f87da51c74e857461f11344039aee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:c1:10:c5:7a:3a:49:09:52:72:07:58:17:
49:6a:56:d4:88:24:c1:be:f4:0f:17:da:d9:27:63:
d8:81:3d:86:e2:95:e6:9f:50:35:02:e1:4f:a9:81:
45:75:9c:7e:4e:a5:42:62:ad:56:c6:00:a2:53:16:
78:d2:fe:a7:9c:42:9c:41:dc:53:7b:d4:98:b5:13:
b5:92:ce:da:00:8d:c4:7f:63:83:38:89:13:d9:46:
e6:98:1c:9f:cf:8b:b5:64:dd:e9:45:f6:3d:6d:28:
c9:e4:c5:33:2e:02:e4:ec:87:bd:59:50:db:fd:8a:
ae:00:eb:af:87:12:b9:1a:b3:22:3f:fc:fa:80:60:
96:a0:34:64:56:e7:54:9e:69:e6:e3:fd:01:76:58:
c2:78:81:76:26:17:e7:3e:e9:87:d6:13:a2:bb:0f:
3f:15:56:6e:39:d3:1e:87:03:00:4c:65:ad:ac:d8:
fa:38:3d:12:84:35:80:7a:fe:40:04:1e:60:16:ea:
6c:de:bf:93:40:29:53:bf:20:3b:48:48:46:74:fd:
4c:85:9b:2a:b9:a1:74:e1:c5:c8:3e:0a:90:20:d0:
c3:b3:d2:e6:ae:54:dd:f4:2e:65:3f:5d:06:9d:f0:
58:82:19:56:c0:5e:88:e1:ee:19:6a:8e:19:fc:7b:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:7E:9F:90:F8:7D:A5:1C:74:E8:57:46:1F:11:34:40:39:AE:E0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/C2R-n5D4faUcdOhXRh8RNEA5ruA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:6b:01:de:dd:c7:54:5e:28:20:de:b7:34:43:8f:f5:d5:52:
ee:5a:ad:14:10:77:39:05:c6:77:a0:3b:dc:9a:9f:cd:b4:a1:
91:3e:28:df:95:f8:46:36:23:ae:02:98:41:21:b6:c3:0f:10:
7f:b3:db:19:72:26:5f:c4:76:60:87:3e:a4:a8:9e:d1:e7:f6:
74:32:05:e8:d0:95:76:65:35:7f:fa:f4:9e:8e:6a:9e:48:9c:
d1:df:c4:24:ae:52:6a:0c:90:b5:f0:59:b0:52:56:a1:73:6d:
17:f9:7c:32:64:d4:c8:2c:52:d8:be:70:eb:51:c6:6c:a7:67:
0e:15:a8:36:2a:74:fd:52:cb:c4:0b:67:45:36:d4:17:a0:66:
16:4c:52:29:cf:44:67:c5:5d:24:0f:b7:b7:64:8e:30:9e:6f:
dc:37:9f:32:35:c5:41:62:26:e3:e5:4b:27:81:1b:5b:d4:98:
04:ae:7e:97:61:9a:a7:04:90:46:61:b4:af:84:fc:50:55:8d:
91:7e:88:20:cd:8d:b7:f3:0a:aa:6b:6a:93:64:76:cb:d9:b0:
ad:20:71:b4:31:74:d2:03:75:4c:92:ba:21:a7:c4:19:31:09:
72:40:79:d7:56:7c:38:87:6d:5b:68:7a:38:4e:8f:2d:bf:18:
69:dd:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:52:18 2025 by rpki-client