Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G52IRBU2yb-yvtYusertfcDLzyU.roa
File: G52IRBU2yb-yvtYusertfcDLzyU.roa (raw, json)
Hash identifier: X0W8LrugCYCwtPlKktwf/X6fHr2ua4C/6mnJYvKy70E=
Subject key identifier: 1B:9D:88:44:15:36:C9:BF:B2:BE:D6:2E:B1:EA:ED:7D:C0:CB:CF:25
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD8457CF68F44B061BE02E6C3DC03C20F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G52IRBU2yb-yvtYusertfcDLzyU.roa
Signing time: Wed 27 Sep 2023 20:12:27 +0000
ROA not before: Wed 27 Sep 2023 20:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d8:45:7c:f6:8f:44:b0:61:be:02:e6:c3:dc:03:c2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 20:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b9d88441536c9bfb2bed62eb1eaed7dc0cbcf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:20:67:21:4c:65:3a:85:4b:f9:3d:50:41:
70:66:d8:41:87:e3:78:dc:da:0e:d5:f8:2b:90:3a:
e4:1a:4c:27:a4:c6:7e:bf:2e:e4:6b:f8:89:4d:8b:
3c:b2:28:2e:4f:9b:5f:1f:3c:61:d6:b7:b7:04:79:
71:0f:b5:1e:80:eb:19:9c:e3:f0:26:1d:19:91:7e:
20:d5:1e:64:8b:5b:fd:c8:68:6b:a7:cc:9e:e1:0a:
a7:1f:e5:bc:98:64:f0:84:50:af:11:68:31:64:6f:
d8:07:35:30:86:08:f6:99:62:69:36:5a:af:33:1d:
2a:56:62:e2:73:19:0e:f5:52:a2:d0:86:5a:cc:dd:
b2:b1:01:ba:5d:7a:40:a4:94:e0:59:22:69:a0:c5:
27:df:53:6e:b0:c4:d2:73:74:44:a7:16:7a:04:e0:
a6:3d:84:00:13:b2:b5:3d:6f:1f:94:2f:fc:61:d2:
51:9d:b0:a7:9f:26:fc:81:11:04:3b:f9:d6:a2:50:
da:63:33:e9:da:c3:31:1b:ab:55:d5:f0:1c:2e:40:
e0:b9:d3:81:b4:5c:07:52:1a:d5:af:22:15:68:35:
84:75:ca:2d:fc:e1:c6:33:89:90:82:92:ed:40:46:
fb:8e:3e:73:03:4a:da:71:aa:30:a4:78:64:b3:6a:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9D:88:44:15:36:C9:BF:B2:BE:D6:2E:B1:EA:ED:7D:C0:CB:CF:25
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/G52IRBU2yb-yvtYusertfcDLzyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:ff:02:fc:f8:9f:e1:80:be:b1:16:19:80:38:f4:60:f4:c6:
5c:33:ec:f9:05:93:e8:31:69:16:5e:16:76:0a:25:9f:1d:fc:
d8:85:66:55:80:a3:f7:62:61:e1:04:db:59:e6:b1:2d:72:e4:
f0:c6:41:20:d1:41:b5:15:24:44:4c:2d:44:0f:74:0e:c6:2f:
0e:4d:ca:f6:4e:f5:36:97:36:a1:33:b4:20:16:bb:45:c1:c5:
b7:fe:38:ba:db:98:95:2b:82:09:aa:83:4b:f7:37:1b:a8:18:
c0:97:42:39:14:cf:c9:ab:99:99:13:4a:cc:1f:bc:c6:84:a1:
08:39:c9:91:e6:18:ca:30:ef:f2:9e:a6:3d:7e:d1:96:ac:44:
ee:c1:02:29:90:4a:64:df:a8:bf:d4:3b:7f:fd:f3:59:d6:7e:
2e:37:69:17:1f:2d:40:7e:6f:e6:da:a1:fa:56:0e:af:e8:b2:
94:50:3b:ee:f4:1e:5d:1a:49:3b:2d:83:bf:13:d0:08:1b:7a:
45:a6:35:29:b7:8a:22:ac:0e:c0:3e:c1:d2:f1:0a:84:1e:45:
b9:70:d8:2e:cb:b9:69:e4:f1:ca:8f:73:0e:23:fe:0d:0d:f5:
64:af:ba:66:06:92:48:a2:b9:bb:c2:ba:34:82:30:71:0f:81:
50:05:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:59:02 2025 by rpki-client