Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IGn_oeHSg_h15kkz5iidmgGaLJ0.roa
File: IGn_oeHSg_h15kkz5iidmgGaLJ0.roa (raw, json)
Hash identifier: Fk19q6ph89aQ7RDn3OK41pdEKJn9rXuN3KtJqVzev34=
Subject key identifier: 20:69:FF:A1:E1:D2:83:F8:75:E6:49:33:E6:28:9D:9A:01:9A:2C:9D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C11596924B1E21AA50040A79B69270F05
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IGn_oeHSg_h15kkz5iidmgGaLJ0.roa
Signing time: Mon 27 Nov 2023 15:15:21 +0000
ROA not before: Mon 27 Nov 2023 15:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:59:69:24:b1:e2:1a:a5:00:40:a7:9b:69:27:0f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 15:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2069ffa1e1d283f875e64933e6289d9a019a2c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:34:c3:1c:b2:7d:8c:fa:c7:a0:d8:c9:0a:
6b:f1:bf:64:c3:e3:91:20:cc:4d:11:fb:14:fb:ea:
ed:f0:b4:19:b0:94:8c:4c:19:12:f1:e8:b0:47:de:
97:b7:20:9c:b7:6b:39:91:ce:c3:ab:37:40:a9:be:
a3:99:a9:4e:15:52:cd:30:9f:50:4e:67:74:e3:9a:
99:56:10:ea:e3:c7:6b:fc:a2:c0:c4:61:bd:98:29:
a7:00:f4:99:51:47:dc:36:9b:9e:de:9b:d1:2d:d2:
79:19:1d:d9:2b:19:17:8c:6e:1d:0a:51:8a:d3:ed:
56:92:93:13:16:b2:b0:f8:38:aa:db:de:80:83:fd:
55:ed:b6:18:a9:9a:cb:79:bb:41:20:6b:c5:78:7f:
fe:3f:22:3a:60:b7:9e:21:c0:cc:7a:d7:9b:9a:33:
0b:16:a2:27:f8:5f:3f:8c:b1:56:f5:c4:c2:78:74:
6b:9f:3d:9b:14:eb:94:0b:90:31:a1:ed:be:74:57:
67:80:35:35:b9:6b:ff:2f:8c:16:2b:de:04:e8:e6:
61:86:34:9d:02:43:be:a3:6b:ce:62:c9:8f:88:5a:
fe:dc:ba:56:ad:53:9e:7b:55:36:0c:df:3d:44:f0:
5b:0e:d3:e1:a7:c7:85:62:67:6b:07:8d:32:7d:40:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:FF:A1:E1:D2:83:F8:75:E6:49:33:E6:28:9D:9A:01:9A:2C:9D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IGn_oeHSg_h15kkz5iidmgGaLJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:64:44:88:fb:e9:dd:52:d4:e4:d7:9d:ab:2e:52:d9:c8:a1:
88:4c:65:c9:1e:70:34:f9:6f:f4:0a:48:71:9b:f7:9d:8f:30:
19:69:86:2a:3c:ba:f8:1d:3b:54:43:d0:c2:37:a9:f9:80:77:
5c:6a:3d:c2:d6:d9:99:da:6f:0d:79:62:da:13:c6:1e:0e:96:
b7:dd:6b:b3:30:88:d2:a6:e0:7a:5a:f8:ec:ac:71:62:7f:7e:
71:80:2d:78:3f:39:94:29:66:ad:2f:9e:82:5e:89:6a:38:7e:
3e:5b:54:85:35:f4:8b:75:16:5b:59:84:ff:0d:fd:82:8c:5a:
36:3a:1e:be:1a:55:0a:ee:0f:1e:1a:17:51:70:f7:68:b4:cd:
f8:21:ac:6e:b6:6a:54:3d:5a:c5:89:4a:5c:0a:e1:36:cc:f7:
d4:21:2e:d6:43:e3:0f:07:c6:7a:c1:d1:92:75:3d:15:f4:3d:
fc:27:45:65:f8:50:6d:df:d7:22:52:b2:c4:82:c6:95:35:92:
c5:4c:4d:09:ee:41:c8:11:c9:0b:8f:41:55:dd:f1:c6:3a:11:
51:c1:f4:1c:ad:59:3f:6d:63:67:6c:a4:09:96:01:3a:bc:26:
64:a7:a1:db:25:48:47:b4:4a:fc:ad:0e:3a:12:39:ff:e0:8d:
c5:cf:20:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:10:21 2025 by rpki-client