Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CuACTfAzB7hSF-T56-AM3yv0aTk.roa
File: CuACTfAzB7hSF-T56-AM3yv0aTk.roa (raw, json)
Hash identifier: /4eWweCTaaBlrv+Qs4Z+6CuOuGci4Af+wSgGLlmk3A0=
Subject key identifier: 0A:E0:02:4D:F0:33:07:B8:52:17:E4:F9:EB:E0:0C:DF:2B:F4:69:39
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEA78B6ADCB8377085CE0BFA0523A8A0A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CuACTfAzB7hSF-T56-AM3yv0aTk.roa
Signing time: Mon 20 Nov 2023 02:04:21 +0000
ROA not before: Mon 20 Nov 2023 02:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:ea78:a263/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:78:b6:ad:cb:83:77:08:5c:e0:bf:a0:52:3a:8a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 02:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ae0024df03307b85217e4f9ebe00cdf2bf46939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:d2:40:63:89:0f:44:38:2c:33:7b:42:44:
ae:53:28:f7:3a:5a:7f:12:f1:3d:bd:64:04:4e:5b:
98:3f:86:30:43:e2:e3:5c:03:6f:8e:a4:18:2e:69:
17:c1:83:fb:b2:d4:8d:a7:e0:ff:d5:70:8c:72:23:
4d:99:0b:64:98:38:f7:49:76:31:8f:f3:ad:30:27:
54:56:bf:06:25:76:dc:ca:39:6d:cc:7d:c1:07:f3:
58:9f:a7:40:52:27:11:18:ed:b1:c0:43:b5:a3:b5:
c4:a6:05:f8:e0:71:e5:0a:40:b0:b9:b6:cf:43:d2:
dd:54:92:d5:be:8e:d6:ef:b8:ce:1b:57:5e:e0:52:
44:3c:99:da:25:87:03:08:0b:bf:69:29:c6:64:e0:
02:9b:c3:a5:bf:24:5e:c8:0a:83:0d:37:b3:a6:a8:
b9:3a:87:31:98:19:d7:6e:2c:a6:05:47:19:9b:80:
95:0c:c6:f9:95:f1:a7:39:bb:a3:7f:a1:85:d6:a9:
f1:c7:aa:99:70:40:9d:ac:26:db:be:7b:48:bb:40:
57:5d:8c:d0:31:7e:78:5a:df:6b:28:3e:07:d7:dd:
de:eb:c9:44:45:1b:05:07:a0:79:14:ba:9b:0f:e4:
59:b5:8e:c8:3a:a3:1d:e7:55:a8:c3:ab:23:da:9c:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E0:02:4D:F0:33:07:B8:52:17:E4:F9:EB:E0:0C:DF:2B:F4:69:39
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/CuACTfAzB7hSF-T56-AM3yv0aTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:84:b7:c8:4f:2f:b9:22:dc:6a:34:68:08:98:7c:a4:30:c3:
5a:7b:29:3e:2c:a1:54:83:65:52:88:2b:b8:ff:59:6e:83:27:
2a:22:55:b9:b4:86:52:dc:69:86:5d:13:db:46:da:74:c6:30:
b9:88:76:55:b5:85:b7:32:3b:34:06:c0:77:9d:26:ac:7d:84:
d5:0b:0b:ac:75:ce:31:32:a7:62:da:8b:a8:18:62:5d:71:34:
71:37:cb:6c:ce:06:dd:c3:aa:b9:f7:a0:40:41:27:dc:de:a7:
83:68:dc:4b:d1:9a:90:f2:2a:0f:5e:8c:91:3b:c9:4e:54:a7:
1b:81:d2:4d:87:c1:8e:a5:a2:3c:27:71:89:3f:4a:80:ef:7f:
4d:b6:d4:7f:3e:ec:99:10:a5:a8:e5:0f:b7:ed:6b:bb:14:c8:
57:19:9a:58:d6:be:47:09:30:2c:ae:b2:67:ef:5d:1d:eb:22:
ed:41:0f:c1:62:d8:03:04:c3:d1:51:2e:20:a2:15:bc:6f:c6:
42:d2:ee:c8:d3:38:f6:07:57:17:22:26:97:6f:45:d4:83:bb:
96:64:fd:64:fc:c3:7f:71:70:bc:63:52:b4:37:e1:76:9e:80:
97:8a:49:15:06:eb:56:c2:15:d5:13:60:a6:a3:75:38:50:d4:
1d:87:72:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:18 2025 by rpki-client