Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IhLWOqYWz0eXmD9QIue6CUEFwXk.roa
File: IhLWOqYWz0eXmD9QIue6CUEFwXk.roa (raw, json)
Hash identifier: 1bQSNijmQNA/uxYsTCGmnbZg4dsmoeDmmQ0BgjO1Uag=
Subject key identifier: 22:12:D6:3A:A6:16:CF:47:97:98:3F:50:22:E7:BA:09:41:05:C1:79
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABE1AAA6AB7023917755E9A954EF07AFD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IhLWOqYWz0eXmD9QIue6CUEFwXk.roa
Signing time: Fri 22 Sep 2023 18:15:33 +0000
ROA not before: Fri 22 Sep 2023 18:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:be:1a:aa:6a:b7:02:39:17:75:5e:9a:95:4e:f0:7a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 18:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2212d63aa616cf4797983f5022e7ba094105c179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:39:e6:ae:00:99:80:3d:87:d5:5f:74:b2:
54:35:b0:b8:a3:f4:0c:35:ee:8d:59:0a:25:a7:28:
80:24:57:aa:c7:4a:45:b7:95:bc:dd:bf:08:42:47:
29:84:53:a9:2f:54:2c:21:44:fd:71:01:ad:fb:b5:
44:05:3b:ec:ac:c3:ce:b4:53:1e:77:30:ad:05:7b:
17:b2:a4:ac:b8:3f:01:75:2b:2b:61:d2:27:be:48:
b9:41:34:1d:83:dd:d2:c9:6d:6e:72:3c:95:a0:82:
b7:08:30:96:9d:b3:01:7f:41:f4:43:f6:ef:cf:68:
c7:0d:bc:39:df:76:ce:79:3b:16:0e:8f:e3:63:61:
fc:ed:ae:25:6e:16:de:01:29:11:9e:f5:83:8d:2d:
64:a6:a7:cf:97:38:d2:2f:14:ec:d5:82:e0:88:a5:
2f:8d:38:4a:cb:15:9d:5b:ff:56:73:7b:11:c9:3b:
4e:7b:15:60:69:f3:06:3a:b0:4a:49:ad:b0:06:07:
84:e5:8b:c4:21:6a:97:c1:fa:09:b3:11:03:9a:ef:
35:36:ed:c4:4e:29:0a:bb:1a:ac:00:5c:ce:38:96:
ef:41:26:ae:67:ca:9a:5d:74:fa:61:68:be:56:cf:
c2:64:a3:81:2f:bc:d1:c4:36:6f:8a:ae:1e:4e:b7:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:D6:3A:A6:16:CF:47:97:98:3F:50:22:E7:BA:09:41:05:C1:79
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IhLWOqYWz0eXmD9QIue6CUEFwXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:93:29:8f:82:4c:14:6b:81:8e:89:bf:eb:a8:fe:27:ea:51:
59:e2:03:3b:76:9e:6f:a3:b4:e7:d0:99:b3:93:66:97:dc:cf:
c1:9d:06:4f:a5:ff:12:3e:79:fa:a9:0c:43:ef:70:25:5d:d9:
e0:c0:d1:cc:81:81:c9:ca:b8:33:7e:9d:99:9c:de:e1:86:ad:
ce:f6:1f:d7:90:c0:4f:1b:12:c5:f4:ee:f1:e4:ee:4c:c1:01:
40:8b:83:e5:89:7e:f6:4c:4c:ee:54:0b:91:18:be:1b:2a:cd:
01:83:6d:5f:b4:cf:6b:0f:f8:17:1e:8a:14:72:92:b0:a3:a0:
e5:83:2e:d8:e7:b0:18:13:05:a3:82:9d:1d:24:7d:23:9c:c4:
68:a5:26:d3:c1:25:a3:9a:f0:5b:3b:50:51:35:07:47:d4:bc:
cd:f2:27:1c:be:c1:83:34:96:b2:a9:0d:91:51:5e:51:ca:85:
36:6c:e0:56:38:a3:6d:e3:6b:59:05:43:4d:f0:0f:b8:fa:b3:
5c:f9:51:7d:a5:32:20:4b:84:2d:ff:4d:55:b8:2f:75:e9:69:
08:4d:f5:7d:72:57:18:62:dd:46:62:f6:38:d1:c7:3e:59:c6:
2d:dc:54:74:d5:7f:c8:3b:1a:2c:23:8e:0a:99:d8:d6:f0:a6:
fa:c7:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:46:54 2025 by rpki-client