Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I_4UTVO-nvCQ7otY34tt-C8gA2U.roa
File: I_4UTVO-nvCQ7otY34tt-C8gA2U.roa (raw, json)
Hash identifier: qNwRHAdVP2my4eDvTqjTpWj4zpkybpm4uE+clXUgeKc=
Subject key identifier: 23:FE:14:4D:53:BE:9E:F0:90:EE:8B:58:DF:8B:6D:F8:2F:20:03:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B52962F4C485D980160479D6BB7C74AE9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I_4UTVO-nvCQ7otY34tt-C8gA2U.roa
Signing time: Sat 21 Oct 2023 14:14:16 +0000
ROA not before: Sat 21 Oct 2023 14:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:52:96:2f:4c:48:5d:98:01:60:47:9d:6b:b7:c7:4a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 14:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23fe144d53be9ef090ee8b58df8b6df82f200365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:6c:76:90:a3:48:24:73:46:b0:f9:06:ef:
67:23:56:ba:7c:91:0e:f9:14:16:6e:4a:e1:ff:39:
a9:dd:73:9e:5a:18:3c:34:3f:ca:a9:4d:d3:e5:52:
45:fc:b9:1b:6e:8a:0e:16:c6:8b:06:50:05:e6:31:
fc:d4:03:6e:22:75:15:36:4e:d0:ae:83:b3:7f:37:
b0:89:91:62:7e:af:1a:a6:9b:51:07:2a:8d:0c:6e:
00:87:66:53:5a:14:87:3f:c5:43:2f:e0:74:2b:c9:
be:f9:f8:06:9a:ec:a6:d2:73:fd:b3:7b:74:a7:01:
f4:da:e8:29:04:87:40:28:23:8e:83:62:9e:ed:26:
f9:1a:65:d4:4f:09:a3:e2:dd:9d:95:10:3b:42:c5:
ec:bc:db:ea:f4:fc:44:da:83:e8:ca:12:d0:e9:d0:
c5:06:e0:3f:89:69:4b:a1:bd:cb:5b:f5:5f:3d:80:
cb:1e:ac:6c:a0:33:55:8f:68:fe:65:65:71:a7:66:
5e:2d:9a:d5:75:13:c2:a9:22:81:d1:80:1c:84:2b:
ae:7c:2a:4d:13:31:f1:36:9b:e8:6d:49:89:65:37:
32:9f:17:10:05:49:33:f8:dd:d7:80:c4:2a:47:e9:
d7:ef:7a:89:b7:5e:5b:62:4b:2c:24:75:4e:e8:ff:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FE:14:4D:53:BE:9E:F0:90:EE:8B:58:DF:8B:6D:F8:2F:20:03:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/I_4UTVO-nvCQ7otY34tt-C8gA2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:19:39:78:dc:08:8e:b2:84:70:0e:0f:d8:58:b3:38:df:97:
91:9f:75:2a:ec:17:de:b7:c1:3b:b4:00:a6:cb:61:fc:e8:87:
ce:59:91:81:61:ff:eb:db:fa:36:79:d4:1b:24:64:e6:ca:3a:
69:be:f8:92:47:f0:ce:83:50:b3:6b:07:b2:5d:7d:86:24:b5:
94:79:57:cd:42:b2:29:26:bd:a8:94:82:16:56:9c:75:b8:7c:
21:a3:f0:2c:99:75:2a:89:3f:75:a2:5d:ae:f8:7c:e9:22:a5:
18:56:bb:4e:fa:99:a6:b0:d9:7b:84:de:2c:51:da:82:3d:fa:
69:40:af:de:15:c0:10:72:4a:71:20:9e:bb:e6:96:4b:dd:c7:
3d:b9:45:88:8b:b2:07:ac:53:42:e4:84:b8:d9:8d:01:9a:9a:
2a:ff:39:29:11:0e:38:4b:85:75:40:01:fb:9f:26:13:06:da:
05:8f:d5:2e:09:62:42:d1:5d:98:10:1b:d8:09:90:65:f0:51:
d9:2d:c7:cc:17:37:f6:b9:f2:f4:6c:bc:9b:a0:d7:11:68:eb:
6b:09:8c:80:af:98:29:b1:9c:da:d8:d2:de:48:c6:ea:e4:17:
96:7a:5d:1c:ce:a9:33:86:b1:85:b4:b0:0e:d6:65:0b:d2:61:
3e:ac:91:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:53:32 2025 by rpki-client