Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CIbtE-dEHYWfNsdVDwv7f_pn6xg.roa
File: CIbtE-dEHYWfNsdVDwv7f_pn6xg.roa (raw, json)
Hash identifier: QHZr9aRimL1SMpkThOjC/9PSiLiG8CzonwV786F+zg8=
Subject key identifier: 08:86:ED:13:E7:44:1D:85:9F:36:C7:55:0F:0B:FB:7F:FA:67:EB:18
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD46B76F51DF9F4D45C70D74B1C063753
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CIbtE-dEHYWfNsdVDwv7f_pn6xg.roa
Signing time: Wed 27 Sep 2023 02:15:27 +0000
ROA not before: Wed 27 Sep 2023 02:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d4:6b:76:f5:1d:f9:f4:d4:5c:70:d7:4b:1c:06:37:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 02:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0886ed13e7441d859f36c7550f0bfb7ffa67eb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:f2:d9:4b:0c:57:2c:5e:f4:6d:d9:16:3d:
b7:f4:3c:d8:6b:34:fb:01:3d:13:41:da:20:39:09:
d6:db:06:01:8a:88:11:35:b4:68:a6:fd:5f:ea:0a:
03:7d:e5:ce:45:63:87:bd:3b:62:e0:69:4a:76:40:
b2:cf:ef:8f:df:f0:66:f0:45:d8:2d:32:2c:ac:3d:
91:ab:a7:45:52:ee:de:f1:7b:95:bf:3f:06:dc:c6:
af:ef:a1:53:5d:3d:f6:98:76:1e:9d:ab:e4:db:d0:
e7:35:75:29:fe:c9:2d:14:cd:dc:1e:30:f0:b2:1f:
b9:f6:e1:6b:fb:ed:94:98:7c:1b:4f:f2:db:cf:53:
04:49:2e:17:44:c1:8a:2f:62:7b:40:dd:d5:04:50:
29:c9:ca:23:96:5e:fd:56:63:89:be:6a:77:bf:9b:
9e:56:c0:f7:b4:11:08:1d:08:d9:ce:1f:91:69:ba:
e8:f1:ed:59:22:eb:80:82:f9:08:4b:38:25:f2:f5:
76:51:bc:2b:44:9a:9b:c0:16:85:45:94:46:e9:24:
21:17:7b:30:80:0e:11:b1:6c:5a:d1:ee:a2:12:9c:
c8:e0:25:de:cc:ae:15:ff:e4:02:af:f7:d7:99:6a:
f7:c3:5a:23:a2:91:64:e9:cb:f6:36:e0:a7:6a:e5:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:ED:13:E7:44:1D:85:9F:36:C7:55:0F:0B:FB:7F:FA:67:EB:18
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CIbtE-dEHYWfNsdVDwv7f_pn6xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:9a:9c:8d:9b:19:99:b2:db:d3:72:e6:a1:68:d0:05:e3:20:
b3:d6:91:3d:dc:0f:7e:88:b8:cf:03:70:74:10:5c:1b:20:df:
43:10:2c:a5:94:62:68:72:15:2a:47:88:91:0a:8c:c4:43:a3:
b1:a8:13:a2:f7:63:ae:26:e0:ff:1b:33:d8:1b:9b:3e:2a:ec:
dc:64:e5:15:4a:20:e9:d2:3d:bd:1d:a6:8f:91:32:d5:3e:e1:
ed:d5:09:3f:82:b7:62:4c:2d:43:de:c5:77:ec:c5:bd:dc:1a:
b0:fd:bc:41:3a:8b:d1:ea:5e:5b:69:46:13:1e:e3:ef:47:d8:
f5:3b:50:c1:9a:ce:34:48:b3:5d:5b:3f:9a:b6:73:bd:07:e3:
bd:db:96:81:73:ba:33:70:f0:9b:8c:4d:5d:70:30:88:29:99:
3f:7c:1b:76:2a:a6:a4:f5:05:88:12:66:dc:b6:db:1c:37:17:
3c:db:98:b3:cf:5f:7f:90:49:ab:54:39:52:2b:30:05:29:dd:
12:32:a1:79:5c:7b:d2:88:94:71:31:c7:52:91:25:1d:28:9c:
df:de:0b:61:ba:cb:61:29:a0:66:ec:fb:5f:df:20:76:82:b7:
9c:16:d6:f1:73:da:a6:60:22:ea:53:e7:a9:54:7e:2b:39:2f:
aa:3e:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:11:10 2025 by rpki-client