Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F-DIq0zVbkHxktERoL1-CnyZ6nE.roa
File: F-DIq0zVbkHxktERoL1-CnyZ6nE.roa (raw, json)
Hash identifier: 5l/jGF+I6crK0OGXPwMRHPVPhLN0MqdbJsJkpuXIfLA=
Subject key identifier: 17:E0:C8:AB:4C:D5:6E:41:F1:92:D1:11:A0:BD:7E:0A:7C:99:EA:71
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0DB3B8B8D713066DABA0EE81A8EDD4DB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F-DIq0zVbkHxktERoL1-CnyZ6nE.roa
Signing time: Sun 08 Oct 2023 05:12:43 +0000
ROA not before: Sun 08 Oct 2023 05:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0d:b3:b8:b8:d7:13:06:6d:ab:a0:ee:81:a8:ed:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 05:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17e0c8ab4cd56e41f192d111a0bd7e0a7c99ea71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:ec:11:57:56:26:70:e1:44:bb:bc:92:eb:
a3:31:d4:62:ea:c3:20:02:6f:57:a1:9e:56:34:f8:
a3:b5:00:b9:04:35:fb:d9:da:ea:83:90:37:be:27:
96:81:ec:7d:d6:7a:01:09:ee:3f:da:e1:27:b6:09:
28:57:9f:04:28:f9:a8:1d:93:95:32:e9:2c:2c:36:
a8:41:74:da:ce:b5:48:9d:95:e1:bd:51:31:2b:51:
69:c4:77:be:71:5a:e1:68:ff:c8:f6:b2:5e:5f:8a:
94:50:5d:a9:76:1b:62:6e:83:3a:22:62:37:e2:b2:
fd:fc:da:2e:69:a5:4c:63:56:28:34:8a:0d:44:ac:
38:be:8b:8e:07:01:8d:95:27:34:16:f7:c5:37:3e:
a7:1d:e7:4a:cb:cf:b7:cc:89:0d:36:f2:46:7b:dd:
d3:a2:2b:0f:9d:66:b3:3d:30:12:a3:c0:c7:9e:c8:
b1:47:fc:e3:fe:8c:bc:6e:ca:0c:fd:e9:cb:aa:2d:
fb:65:b1:8d:61:49:32:da:33:d7:9e:b3:94:98:f9:
34:07:58:98:ee:fb:53:4f:4f:66:52:ed:e8:7f:d3:
d8:f9:cf:ba:30:dc:e7:41:32:24:21:00:72:bb:f1:
20:27:2f:55:62:ef:e0:61:0d:f0:32:79:c0:ee:06:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E0:C8:AB:4C:D5:6E:41:F1:92:D1:11:A0:BD:7E:0A:7C:99:EA:71
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F-DIq0zVbkHxktERoL1-CnyZ6nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:98:16:e1:65:69:10:ba:6b:45:16:a3:66:50:e0:67:24:59:
4b:79:bd:cd:51:1a:4d:5b:91:00:84:e4:f0:04:4c:13:62:ee:
e1:51:09:dd:ec:e1:3d:71:dc:25:41:a7:da:11:90:1e:c0:4c:
77:ae:c3:68:eb:89:9c:8d:71:a5:69:5d:1a:99:66:17:be:c6:
bb:b5:1d:9c:00:49:66:bf:88:1c:cf:ea:59:d7:27:f9:ea:3e:
b8:97:cd:2a:5b:cb:2f:7c:de:e7:16:5b:03:0d:41:c8:0b:d8:
ce:91:2c:4e:52:2b:bd:f7:91:22:2c:62:9b:e0:20:27:d4:44:
94:f0:22:df:1a:0b:62:26:05:ff:a5:cf:d4:ea:96:0c:14:52:
f1:9c:8f:7f:46:8b:9a:0f:be:2e:04:2d:7c:bb:a5:b7:9a:aa:
57:bd:8e:32:df:25:3e:1a:8c:fc:ba:4e:72:16:61:f5:5c:e7:
c0:8c:00:1a:a8:ea:09:6f:60:be:fc:8f:f8:97:a8:a6:e9:65:
06:53:a9:bf:cd:09:06:c2:25:6f:b3:83:c7:88:40:c9:0a:f2:
1b:24:85:b9:af:d1:1d:0b:ba:8f:28:1e:19:4f:24:c9:a1:db:
65:6b:74:d4:fa:19:85:31:27:9d:0f:c0:9e:b8:0c:df:6e:44:
41:91:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:37 2025 by rpki-client