Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/INK8CoJNtBCSNFyOmR9xYNmSx84.roa
File: INK8CoJNtBCSNFyOmR9xYNmSx84.roa (raw, json)
Hash identifier: 05oGz9C/wttkoYr92PuhfEOuPQh+9ViYXg7pQt3Scnk=
Subject key identifier: 20:D2:BC:0A:82:4D:B4:10:92:34:5C:8E:99:1F:71:60:D9:92:C7:CE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2C21CBD01C6FB1BF9998DBA4D822E699
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/INK8CoJNtBCSNFyOmR9xYNmSx84.roa
Signing time: Sat 02 Dec 2023 20:04:21 +0000
ROA not before: Sat 02 Dec 2023 20:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:2c21:bfea/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2c:21:cb:d0:1c:6f:b1:bf:99:98:db:a4:d8:22:e6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 20:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20d2bc0a824db41092345c8e991f7160d992c7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:ed:6a:4b:6a:98:76:ae:ad:d8:a5:10:e4:
61:3b:77:a0:02:15:67:0b:92:e5:d5:b1:2f:0e:0a:
08:ef:30:b7:d8:42:2a:63:72:8d:7e:36:30:c6:34:
7b:5d:a2:b8:8e:51:e6:2f:82:17:bc:19:83:ea:41:
0d:ab:9d:ae:41:31:30:af:e7:4d:9a:31:66:cc:6e:
28:55:57:c3:ac:c7:4a:1f:ac:3e:b1:2e:17:1a:b8:
c6:09:d0:4b:c6:de:e1:68:4c:63:79:b4:b1:f1:8f:
0f:75:5c:ab:f9:8f:cf:1e:39:e8:4c:9b:78:c1:39:
1d:3e:e0:d1:65:42:c9:0f:dc:e5:fd:b2:d7:df:e6:
72:6c:b8:b7:54:b2:31:f1:e2:7f:0b:4a:27:8c:f5:
ac:a3:a1:d1:a6:fa:0b:ba:1b:a4:cc:1d:93:72:f2:
89:5f:63:0a:f2:b9:05:f2:5b:e9:7a:0d:d5:b0:fe:
23:3a:00:c4:4a:03:5e:c9:96:de:d6:1b:d9:09:4c:
98:c6:73:3b:e5:8b:40:ab:90:cd:ac:99:dd:52:fb:
67:63:a3:76:6a:f0:a5:90:4e:af:e5:6a:4b:b9:e3:
af:56:a1:58:b3:c3:70:25:da:52:57:1d:4d:aa:11:
5e:7a:75:8c:3d:6c:be:31:87:62:a7:52:b4:c0:aa:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:BC:0A:82:4D:B4:10:92:34:5C:8E:99:1F:71:60:D9:92:C7:CE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/INK8CoJNtBCSNFyOmR9xYNmSx84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:91:58:13:ba:b9:f8:fb:54:7f:19:8b:b5:aa:ce:ba:e8:24:
f1:28:39:68:55:9b:c6:f3:57:35:22:29:6d:cd:e8:a9:99:b2:
a8:0c:06:7d:77:4c:b4:79:69:05:88:89:8a:e7:83:c5:35:ab:
40:c9:7a:25:b0:61:9a:fb:d6:f6:30:54:8d:1a:69:90:c2:f4:
96:d8:6a:fb:d9:fb:35:08:78:9e:97:c4:c2:14:7f:3e:31:f0:
c6:4d:c6:d0:20:2f:82:e0:67:a9:95:c7:07:59:4b:03:d8:bb:
2e:b6:a1:d4:e0:9e:73:e7:f4:98:df:f9:94:43:11:5b:27:04:
db:3b:9f:d5:02:c6:05:4b:38:cc:a8:31:92:80:ed:65:34:98:
fd:48:fd:83:93:eb:89:c1:da:d1:c5:ad:1a:ac:70:f1:91:9f:
e9:9f:49:5d:c0:46:94:60:ff:ef:d0:06:dc:e9:5e:65:68:a2:
7a:b4:21:89:2c:94:b0:be:6b:c3:42:33:23:76:6c:cd:ac:c7:
37:c6:c7:6a:ae:80:ea:93:35:ea:99:3e:38:ad:13:55:ed:65:
57:1a:34:8a:5f:1c:ea:9a:6c:a5:cb:04:6d:48:bc:7c:0d:74:
e8:1d:bc:db:69:22:3d:e6:48:23:e1:9a:0e:06:47:24:ea:4f:
49:f2:42:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:58:06 2025 by rpki-client