Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F4A-h2pJyCTymcvxSUs6SnTCMRw.roa
File: F4A-h2pJyCTymcvxSUs6SnTCMRw.roa (raw, json)
Hash identifier: N+hg+Yrh2+AQhYzWjhxjPr6QcTRGuEEH6PHivHu5sHU=
Subject key identifier: 17:80:3E:87:6A:49:C8:24:F2:99:CB:F1:49:4B:3A:4A:74:C2:31:1C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6401B84179FD9AC6CDB4F9F3EF6839DD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F4A-h2pJyCTymcvxSUs6SnTCMRw.roa
Signing time: Tue 24 Oct 2023 23:25:16 +0000
ROA not before: Tue 24 Oct 2023 23:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:64:01:b8:41:79:fd:9a:c6:cd:b4:f9:f3:ef:68:39:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 23:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17803e876a49c824f299cbf1494b3a4a74c2311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:a3:0b:be:10:2b:1d:e5:cb:c5:5e:f5:b7:
ea:9c:d3:26:02:f1:e2:9e:9d:65:89:d4:9b:71:36:
b4:90:2d:f6:33:ea:1b:ff:a1:df:6b:fb:db:8f:82:
27:24:23:2e:01:7e:8a:e3:b3:1d:18:cc:39:bd:a2:
05:a6:f2:5e:cc:e0:40:70:7d:87:24:3d:38:1a:b0:
f1:03:9a:d8:e7:39:31:f6:54:92:26:a7:05:ee:a0:
ed:66:13:4f:e3:6e:e0:b7:37:93:64:49:8e:d4:00:
2e:93:5f:9c:41:8d:8a:6d:da:ed:70:36:67:2b:10:
03:a1:ad:46:77:12:35:84:42:db:f1:3e:49:1f:aa:
2e:c9:cf:ff:54:82:61:18:95:48:a0:b7:ec:61:ea:
ba:76:b6:27:36:99:ec:c3:2b:f6:f2:cc:ae:d7:df:
5a:7b:43:d3:85:46:79:69:54:c2:ee:29:9d:38:eb:
f9:b6:0e:79:d1:99:9a:ea:90:bb:5d:be:5d:66:7d:
c5:64:b1:76:c6:59:e2:d4:4e:5e:8e:ce:0a:01:8c:
9b:d1:9c:4f:3a:9b:49:88:4a:b2:dc:1b:1e:b9:e3:
9a:99:b8:96:39:d6:12:b1:f8:64:ae:d6:2d:d7:8a:
37:23:9d:c4:88:47:4a:d2:51:83:3b:40:2a:1a:88:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:3E:87:6A:49:C8:24:F2:99:CB:F1:49:4B:3A:4A:74:C2:31:1C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/F4A-h2pJyCTymcvxSUs6SnTCMRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:27:3b:e5:5a:01:56:e5:ce:12:58:49:5a:ca:dc:e7:8f:05:
ae:bc:d9:25:3f:91:eb:ac:3f:40:f1:f2:8c:fb:cb:1c:dc:4b:
e8:7a:05:5b:ee:c9:0e:0e:25:19:e9:bd:d8:ca:66:6f:91:84:
d9:8f:0e:97:86:b4:84:33:f8:88:1d:bd:ae:f3:a3:a9:6f:25:
b3:6f:05:4f:24:81:cb:68:39:1d:84:a8:db:8f:62:04:fe:c5:
58:ff:65:9e:e5:07:21:4d:16:a1:85:50:88:62:e5:61:39:df:
d6:a8:ce:c4:ea:a5:fd:a3:c7:43:8b:da:65:fb:0c:19:39:59:
a2:c4:e7:85:f1:10:97:99:51:04:01:bb:96:99:bf:41:70:62:
7e:d7:1f:8e:f6:41:d2:64:0d:63:c4:7a:90:8e:0a:ec:08:b5:
e6:a4:33:04:4b:c3:50:0a:a4:94:73:bb:b1:64:f4:6a:fa:0a:
05:3d:f0:fa:7f:76:1f:97:83:cc:5a:b3:89:45:c4:de:6b:2e:
2b:44:01:71:3b:46:74:15:cb:7b:db:1c:2a:58:b5:27:f7:60:
3d:93:44:e9:4f:40:cb:65:0f:dc:2f:e0:da:3a:2a:43:c1:61:
f7:81:4a:97:eb:3b:5f:f3:21:3e:21:f8:98:04:23:8b:e3:89:
36:7c:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:33 2025 by rpki-client