Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F0aJ3GRMxD5yIxgD0H5OEarAhdA.roa
File: F0aJ3GRMxD5yIxgD0H5OEarAhdA.roa (raw, json)
Hash identifier: U/cbyifqFyNEltjhyJPRf0fIQLLYY5QXMGit7lThoDI=
Subject key identifier: 17:46:89:DC:64:4C:C4:3E:72:23:18:03:D0:7E:4E:11:AA:C0:85:D0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B60F3A9EABEBB8C98A5969AE08371D5FF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F0aJ3GRMxD5yIxgD0H5OEarAhdA.roa
Signing time: Tue 24 Oct 2023 09:11:03 +0000
ROA not before: Tue 24 Oct 2023 09:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:60ed:9d45/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:f3:a9:ea:be:bb:8c:98:a5:96:9a:e0:83:71:d5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 09:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=174689dc644cc43e72231803d07e4e11aac085d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:16:e0:c7:6f:e1:e4:6a:db:b8:da:bc:3a:
7b:cb:54:ad:22:95:72:fb:bd:20:0d:53:c4:7a:98:
de:02:4a:c7:b1:fc:09:3f:bf:65:0e:6c:29:1f:97:
3e:c7:4b:30:b9:ca:bb:53:47:56:ab:16:a5:4d:3b:
8f:f5:08:cb:5b:e8:da:e6:7c:49:50:01:11:9f:54:
78:d5:ac:9c:13:5a:d9:a5:84:e1:3f:56:a5:d3:0a:
b6:4a:df:56:b7:6a:7d:ab:19:f2:b8:35:1e:26:35:
cd:f3:f2:0a:60:1c:34:be:df:98:39:57:6d:f8:64:
11:8e:23:3a:0d:d0:ca:f7:6c:c1:94:14:72:84:9f:
16:89:69:a3:f5:2c:89:c0:40:73:e1:e5:fd:e9:e0:
8f:a4:8a:de:8d:09:4a:cc:b1:f3:8c:c7:30:03:de:
78:93:f1:84:93:31:6b:46:fd:6f:ad:04:f6:69:d4:
0e:25:60:d5:0c:26:f9:2f:31:86:e0:b2:3c:47:aa:
a2:81:d0:25:cf:d7:9c:5b:6d:03:a4:7a:b7:a8:55:
16:17:62:c1:c2:37:96:a2:2d:ce:8c:90:03:62:16:
b0:09:8a:fe:a6:86:d9:7f:6b:20:9e:1b:77:8b:29:
e0:96:d0:4f:75:4e:ef:a9:37:7f:9c:f2:73:17:bd:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:46:89:DC:64:4C:C4:3E:72:23:18:03:D0:7E:4E:11:AA:C0:85:D0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F0aJ3GRMxD5yIxgD0H5OEarAhdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:71:af:2d:28:41:28:9e:f2:2d:a2:73:96:94:b8:52:21:35:
df:16:8f:d4:9b:c0:0b:61:06:30:b5:69:f9:7c:c3:d7:5b:d2:
0b:19:73:6f:92:8d:ba:5d:48:4b:d6:c2:e3:4a:7a:12:03:70:
9a:bd:c5:4b:c3:6a:a0:e1:0d:af:29:26:1a:da:1f:de:43:6d:
5b:78:ca:a6:b3:c1:6b:98:15:73:61:24:a0:d7:fd:ec:ee:46:
fc:a3:29:3f:39:98:d6:0e:eb:e3:53:ed:fd:27:ea:a7:58:e8:
47:39:93:33:7d:c5:b4:e6:13:6b:4e:f0:69:7d:3b:7c:e0:fe:
45:32:cc:9b:b8:66:0c:19:e0:3a:70:14:04:72:d2:74:32:a6:
d0:31:a9:3e:93:ac:74:0c:e8:b7:03:06:95:1b:a5:27:fe:4f:
99:97:cf:fc:82:c9:93:68:97:2b:79:d6:56:99:b8:5c:e1:b1:
b0:95:5b:02:1e:e5:09:30:0f:5d:18:c9:15:7c:46:f1:9b:f7:
bc:15:6e:56:05:43:1c:da:f7:c2:da:4b:ce:06:f9:70:52:68:
dd:3d:d3:28:28:1a:77:68:e4:8c:e4:55:42:03:35:b0:81:9d:
9c:cf:31:2a:bc:ec:fe:11:56:e3:41:6b:3d:ac:58:a0:e2:24:
e8:f1:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:32:54 2025 by rpki-client