Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IQBKEj-8t5kk_acRTP6eS1K4sX4.roa
File: IQBKEj-8t5kk_acRTP6eS1K4sX4.roa (raw, json)
Hash identifier: LhsOHxnME5MyNwtvmqkzlv7LkQInrw9K+d7sVp7Cj4g=
Subject key identifier: 21:00:4A:12:3F:BC:B7:99:24:FD:A7:11:4C:FE:9E:4B:52:B8:B1:7E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C57819B50393DB6DF0B15DEAE458F9FAD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IQBKEj-8t5kk_acRTP6eS1K4sX4.roa
Signing time: Mon 11 Dec 2023 06:12:40 +0000
ROA not before: Mon 11 Dec 2023 06:12:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:81:9b:50:39:3d:b6:df:0b:15:de:ae:45:8f:9f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 06:12:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21004a123fbcb79924fda7114cfe9e4b52b8b17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:54:a2:6b:b7:f3:e2:4b:a3:5c:00:1d:97:
a8:30:44:13:de:7e:b4:51:ef:d2:15:d2:ad:b8:00:
2b:45:c3:27:04:18:d5:c0:5a:65:c3:39:2f:f2:0b:
1b:51:62:ec:f4:04:11:a1:77:14:58:33:58:90:09:
c6:6b:e0:f0:6f:3f:7f:d0:0f:2d:21:cd:f8:34:bf:
6f:50:72:fb:e3:fb:32:2b:4c:e8:01:eb:22:43:d7:
2c:13:cd:8f:86:6d:2a:d2:e5:af:65:9b:1f:ff:d5:
c2:9a:06:09:5e:a0:3f:ba:88:90:b6:53:75:1d:f9:
7c:aa:75:0f:b6:f5:d5:23:fd:86:00:f3:07:6f:d1:
b9:f2:6e:12:c9:17:a3:94:85:4e:3a:1e:75:7f:df:
86:a1:40:12:f1:d8:b6:a6:f5:70:3f:0a:d9:28:4c:
4c:e6:a9:ae:57:34:d3:d6:dc:4d:27:44:24:25:cc:
74:af:7c:61:e6:8b:5b:cf:f6:2d:40:c6:b0:1b:04:
99:9b:b0:84:92:53:86:5c:50:45:2a:0e:e6:bb:e5:
dc:6e:2d:93:76:99:17:14:85:af:a1:f1:0b:b8:35:
e8:57:4f:ce:b2:c4:e3:30:c9:98:8e:48:07:51:f4:
f0:d1:82:91:35:4f:ea:8a:b4:e8:9e:71:4e:9c:10:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:00:4A:12:3F:BC:B7:99:24:FD:A7:11:4C:FE:9E:4B:52:B8:B1:7E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IQBKEj-8t5kk_acRTP6eS1K4sX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:19:48:59:c2:f3:b8:5f:9b:01:f7:fa:e0:32:ce:f1:31:e1:
71:bc:23:e4:68:a1:f0:ad:90:5a:47:10:82:72:c1:74:5b:ce:
4e:06:3b:e9:1e:2c:5a:5d:f0:10:1c:95:5c:5d:de:06:6f:03:
87:03:6e:69:5a:26:c0:58:a1:fe:ba:ae:fb:3a:71:fe:ad:d0:
a8:e3:93:4f:ea:40:48:91:7d:9a:04:c0:df:3e:de:45:b9:f3:
e2:21:f5:bb:47:3b:c9:6c:27:91:e7:35:30:f1:9f:48:6c:be:
c3:7f:24:2d:18:a3:87:1a:37:42:5f:7b:42:37:94:47:11:63:
33:06:aa:f4:21:c1:99:fb:13:b0:c4:00:cb:cc:29:15:91:b0:
f9:6b:10:72:8d:13:0c:e9:2f:96:44:1e:4e:94:5e:9e:de:60:
6c:ec:9d:6e:e8:4e:f1:17:8d:72:76:6b:a5:92:20:80:94:cd:
71:9b:d0:e6:bd:15:54:ed:67:4e:28:a4:e7:b9:77:d7:b9:4a:
90:1b:54:4d:8f:65:f1:f4:84:33:f1:9f:08:a8:81:ed:fa:d4:
ef:6d:dd:2d:cb:e1:32:5c:f0:ba:ff:65:0c:3c:63:19:73:ff:
e6:c6:5f:53:4d:e4:bd:7f:d8:23:f1:f8:a8:b5:7f:70:c7:90:
71:72:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:41:10 2025 by rpki-client