Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ij68oWWGwXt_gax1vTE3pbJyuSg.roa
File: Ij68oWWGwXt_gax1vTE3pbJyuSg.roa (raw, json)
Hash identifier: Pl/OTjAg7wuMfcrLjVji+ky5XKDcjqusKIvenD27YWk=
Subject key identifier: 22:3E:BC:A1:65:86:C1:7B:7F:81:AC:75:BD:31:37:A5:B2:72:B9:28
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE3DC4BC3B757AF9400C4D9BB38523F7B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ij68oWWGwXt_gax1vTE3pbJyuSg.roa
Signing time: Sat 30 Sep 2023 02:12:59 +0000
ROA not before: Sat 30 Sep 2023 02:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e3:dc:4b:c3:b7:57:af:94:00:c4:d9:bb:38:52:3f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 02:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=223ebca16586c17b7f81ac75bd3137a5b272b928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:8a:bf:c7:9e:4b:e7:6a:72:c2:69:f1:de:
21:cf:f4:04:2b:5d:0c:9e:75:db:23:b6:64:3d:14:
59:38:16:48:29:c4:38:f7:d5:97:8f:1b:ed:f4:a6:
de:83:ab:e6:64:d2:ad:80:bb:58:90:ef:81:be:06:
23:ff:84:0b:28:25:d7:21:08:d8:b0:9b:92:7e:9d:
1c:8c:7e:dd:b6:ee:6b:1a:2d:05:8d:5a:a3:9a:64:
5d:13:ec:f5:7b:84:1a:5a:13:d8:ce:21:e2:b2:4b:
17:c2:99:f6:8d:08:32:7b:f3:d9:a1:17:5b:e1:3f:
9f:7f:28:c1:1d:ca:1f:f7:aa:29:a4:97:7c:84:28:
9f:e0:1a:6d:10:a9:a4:0e:13:41:c4:ac:38:fa:e4:
6e:d9:96:8b:43:cb:86:b3:f0:fe:0d:3b:ee:45:ec:
1b:54:ab:1b:7c:be:15:c9:b5:98:7c:d3:6d:8b:58:
6e:a5:b3:5a:05:18:c0:4e:60:2e:df:d3:2f:cf:bf:
e6:2e:41:84:c5:49:43:6b:ae:44:38:57:94:c2:28:
e3:96:22:22:09:43:7a:ef:f5:dd:52:e3:95:44:d3:
c6:25:75:09:5d:1a:9c:c6:09:0c:86:f6:a1:b0:2b:
ec:c5:96:c9:3f:bf:2a:6b:42:80:09:6f:9d:1a:78:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:BC:A1:65:86:C1:7B:7F:81:AC:75:BD:31:37:A5:B2:72:B9:28
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ij68oWWGwXt_gax1vTE3pbJyuSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:ed:63:90:a0:36:ac:41:b5:b5:73:e3:68:02:38:70:e3:47:
a0:c5:43:03:fd:17:a3:70:bb:54:ae:43:20:0e:ae:c1:21:7f:
87:32:0d:94:63:5e:ba:be:25:c4:59:a4:44:e9:75:14:d0:0a:
3d:5f:e5:30:fc:21:ff:47:cd:14:90:41:58:91:db:92:59:ff:
e3:37:cd:2e:2d:5f:d1:64:bf:4c:26:57:ad:10:54:ec:b5:67:
08:11:3e:a8:09:dc:d2:d3:06:b7:36:b7:cd:44:3a:a9:0f:5b:
9c:87:64:66:99:68:94:cb:6c:57:0b:90:1c:55:de:5b:9a:00:
9f:be:d0:6d:ae:e4:ae:bc:bd:da:96:c8:f1:1c:bb:42:d2:80:
f6:4f:91:99:50:4c:6f:da:30:80:86:3b:37:ef:b8:fd:f8:04:
a1:c3:40:cd:c3:d3:5d:95:50:d7:46:b8:b8:71:fa:8b:28:f0:
2f:d4:8b:a5:d0:06:c5:82:fc:64:34:2e:77:b1:f3:ec:91:e0:
c0:2f:96:df:0d:bf:9f:6b:bc:bc:03:2c:86:da:3c:26:3a:69:
49:39:66:d4:8b:03:a5:34:7a:99:ac:b7:ab:29:71:9e:c6:a1:
be:f0:56:0d:85:31:ae:12:5c:54:44:08:11:d0:a1:d4:2a:f9:
21:28:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:23 2025 by rpki-client