Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K00LwCFDmBbymP0AjkflEFmZhoA.roa
File: K00LwCFDmBbymP0AjkflEFmZhoA.roa (raw, json)
Hash identifier: fimU6PQ78HkP1YTf34tmOp+CnNzeJh69lG1fWM9WyPg=
Subject key identifier: 2B:4D:0B:C0:21:43:98:16:F2:98:FD:00:8E:47:E5:10:59:99:86:80
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBC249A9D1547D1A66E623EA47A12A241
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K00LwCFDmBbymP0AjkflEFmZhoA.roa
Signing time: Sat 11 Nov 2023 02:09:57 +0000
ROA not before: Sat 11 Nov 2023 02:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bc:24:9a:9d:15:47:d1:a6:6e:62:3e:a4:7a:12:a2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 02:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b4d0bc021439816f298fd008e47e51059998680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:23:4b:da:0f:c1:68:d9:4c:54:ad:c7:82:
5d:30:4e:47:75:50:29:88:32:e4:49:78:c3:9f:9d:
52:c2:38:e2:a1:68:f6:a1:10:66:1a:44:29:8d:0f:
98:a1:d2:21:b9:3e:c5:4e:e3:2b:1d:6a:8d:84:ce:
dc:0f:ea:cc:7b:48:0c:ee:96:89:29:c0:86:9c:81:
4c:2b:84:75:f3:72:b4:e0:17:30:6f:7b:de:db:69:
8d:a6:7a:cf:e4:08:1f:d7:9a:05:51:cb:aa:3d:fa:
b1:b5:37:cd:b6:a7:76:3c:5d:0f:24:2e:23:bb:01:
81:4d:4d:11:b8:20:0d:65:77:29:7c:7b:68:b2:cf:
68:a2:73:e5:f5:e3:fe:39:fe:74:ae:8e:38:e7:39:
b5:df:5e:b8:ef:bd:ed:63:b6:5a:5c:5c:a4:ca:bf:
50:17:a3:1c:6f:42:cb:d2:d0:15:ef:e8:6b:59:68:
fe:fd:42:a4:f1:d0:a5:27:db:a9:23:f0:c3:83:9f:
31:de:98:56:a2:6f:44:e4:1e:c6:e3:1d:e3:3c:60:
01:28:10:ce:2b:0c:f2:e1:4d:18:df:4e:b2:99:ad:
20:8d:d4:f8:a0:8a:d9:bc:c2:92:ec:ae:95:a3:02:
3b:80:ae:0d:47:9a:b9:96:0e:6b:c6:41:c4:5b:06:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4D:0B:C0:21:43:98:16:F2:98:FD:00:8E:47:E5:10:59:99:86:80
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K00LwCFDmBbymP0AjkflEFmZhoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:e5:cf:ae:3c:be:8f:91:f2:31:52:75:e1:fd:10:56:7a:f8:
89:07:98:a2:ad:99:c1:1e:a4:d0:80:c4:11:92:8b:6c:83:0f:
40:ad:d9:ef:09:ac:5b:1e:09:df:41:a3:46:c1:b0:fa:f7:69:
a4:ba:53:f6:08:5a:8b:24:ee:63:e5:f5:9d:ac:68:f1:fe:33:
66:28:f8:a7:b0:74:a2:85:f4:ea:0a:d3:59:0f:7b:3d:aa:3a:
0a:40:13:37:05:d6:cc:b7:36:96:bb:f4:04:82:55:57:59:8d:
1f:8a:02:6b:9a:81:a5:d2:32:8f:90:a7:6f:cb:d4:4e:5a:55:
51:49:1d:c6:28:ac:19:b0:c4:aa:49:8b:c3:30:dd:ff:c1:8e:
0a:cf:0c:87:d6:ad:68:72:ec:63:4a:9c:0c:41:e8:e5:ce:04:
59:55:d6:b1:8e:cd:53:e4:b3:c4:07:5c:28:0e:33:54:8c:b7:
b0:27:ed:61:a0:b8:75:6a:ff:c1:b8:99:d6:cc:c6:15:f0:aa:
26:69:c8:56:06:fd:f2:6b:0e:4d:de:a8:81:6e:1b:2a:9d:55:
6a:80:0d:3e:45:46:58:85:66:ba:b1:ab:b3:bc:1f:88:e7:46:
11:e7:b9:03:55:e8:a8:e0:94:ae:2b:a5:58:dc:a1:ba:0e:a7:
20:a3:8e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:08:06 2025 by rpki-client