Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CBwSOQcAg5YqH8n6a9vlA9QPK4g.roa
File: CBwSOQcAg5YqH8n6a9vlA9QPK4g.roa (raw, json)
Hash identifier: 9vXF8Ds4tIMFAueOFxWdxvw0rRh0rIdCquxPbuzuAjg=
Subject key identifier: 08:1C:12:39:07:00:83:96:2A:1F:C9:FA:6B:DB:E5:03:D4:0F:2B:88
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9706144DCBE3B921A14DF43FDD3EE867
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CBwSOQcAg5YqH8n6a9vlA9QPK4g.roa
Signing time: Fri 03 Nov 2023 21:10:39 +0000
ROA not before: Fri 03 Nov 2023 21:10:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:97:06:14:4d:cb:e3:b9:21:a1:4d:f4:3f:dd:3e:e8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 21:10:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=081c1239070083962a1fc9fa6bdbe503d40f2b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:72:28:7e:d8:d3:0a:2d:ea:4e:96:81:31:
fb:cf:75:87:05:b5:c5:37:c9:7a:4c:b9:42:0b:d7:
ea:81:aa:cc:05:d6:05:58:1f:ad:ca:ba:b8:04:c8:
61:38:b2:9b:ca:35:0f:79:2c:62:56:3f:31:ba:f2:
ae:b5:97:c1:c9:67:95:41:0f:e5:e9:55:4e:28:1d:
17:ce:d8:ec:46:42:8d:c2:24:c3:18:d9:58:c8:b0:
8e:c0:6b:c4:93:04:7d:b4:59:36:d4:43:3b:4d:c6:
e7:93:44:d6:32:be:e9:67:67:ff:ae:87:47:4c:67:
de:47:c0:fb:2a:53:1d:d4:ac:c5:6d:20:aa:a8:42:
26:5e:1c:37:ff:87:7c:1d:d3:45:e1:dd:04:89:01:
2f:40:c5:95:f5:11:62:a0:cb:45:50:d0:ad:e4:d2:
15:bc:b4:a6:3e:80:3b:dc:23:61:4f:11:86:89:69:
46:52:d0:b9:15:61:28:8a:22:63:83:ba:a7:0a:d1:
92:8d:c9:99:39:58:2a:5f:70:ce:d9:c5:06:e9:f0:
52:46:7d:b7:64:e1:ca:a2:72:4f:ee:f1:19:67:99:
a1:35:1a:d5:b5:fe:7e:d5:71:26:14:e9:c6:e4:6c:
a0:70:e6:cf:65:10:c6:d0:53:c6:f9:6e:12:b4:89:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:12:39:07:00:83:96:2A:1F:C9:FA:6B:DB:E5:03:D4:0F:2B:88
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CBwSOQcAg5YqH8n6a9vlA9QPK4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:dc:77:4c:b7:68:73:c4:71:0c:03:f1:7f:b1:ef:9f:c8:1d:
e2:57:d6:03:fd:cd:93:a9:07:cf:99:b9:e6:37:d9:f0:b9:d4:
80:4f:82:5c:11:7f:97:8d:c7:72:41:37:8f:fe:6c:76:96:c0:
23:0f:f7:36:ae:ab:74:b7:69:74:a1:37:9e:3e:87:b1:bc:04:
09:b6:13:cf:ae:0c:4a:c4:b4:71:3c:6d:63:30:8a:c6:53:38:
66:ae:e4:1e:ce:82:46:09:32:f5:68:48:1d:4e:3e:55:6d:40:
6a:d2:95:a2:fd:05:15:e9:db:3d:d2:6c:4d:1e:48:47:5e:9a:
cd:fe:08:99:e4:71:32:e7:4f:16:d8:69:4e:be:37:5f:16:79:
02:fb:71:17:d6:47:12:d3:f1:c4:56:80:21:61:92:2c:71:a0:
e4:eb:89:44:af:f8:70:9a:01:0b:15:ec:13:54:eb:f0:17:81:
f6:cc:93:88:59:5f:ae:43:13:26:9f:2e:b4:21:5f:e5:f2:da:
62:7b:9b:1a:89:b1:64:b4:6f:df:0a:b6:32:8c:c1:8b:97:d7:
68:b9:d5:3a:47:1c:6e:3f:90:9b:c6:d9:8d:ba:e9:40:20:b3:
5b:68:93:a5:10:14:9a:d0:47:fe:a8:c2:a0:82:c6:d8:77:23:
00:80:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:28:11 2025 by rpki-client