Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K3N--J0cfwAYxogpA0fOcGln_A8.roa
File: K3N--J0cfwAYxogpA0fOcGln_A8.roa (raw, json)
Hash identifier: KZFVnsiAGV8MJfYCOwA1ydiam6lnFRfe9/Vcl5V+1lk=
Subject key identifier: 2B:73:7E:F8:9D:1C:7F:00:18:C6:88:29:03:47:CE:70:69:67:FC:0F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B300ACB29798547C9139F4D6EDA31188E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K3N--J0cfwAYxogpA0fOcGln_A8.roa
Signing time: Sat 14 Oct 2023 21:14:55 +0000
ROA not before: Sat 14 Oct 2023 21:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:30:0a:cb:29:79:85:47:c9:13:9f:4d:6e:da:31:18:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 21:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b737ef89d1c7f0018c688290347ce706967fc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4b:ca:19:77:e8:62:3a:ed:9b:fb:ca:09:94:
9d:f5:a9:2f:20:dd:86:5c:51:11:a6:a9:8b:1c:cd:
39:83:bd:db:66:81:b6:6f:e5:50:46:ab:41:d1:df:
32:a8:54:a4:48:64:87:1e:ae:62:83:cf:a3:0a:96:
fc:23:60:9a:20:fb:a6:bc:c0:fa:7e:3c:b1:44:e9:
b5:cb:22:5c:69:3c:37:7d:9c:5e:16:1d:ba:fc:87:
de:aa:5a:c9:29:a9:0a:8d:79:c6:cf:37:df:a0:9d:
f6:22:be:0f:67:11:e5:0e:01:29:77:1d:9f:02:03:
08:c5:0a:22:01:7b:6a:2e:a5:b4:12:cf:da:54:ba:
34:f5:6b:63:b0:c1:1c:f2:8b:40:64:fb:8c:98:c1:
66:9a:e9:77:ac:f7:d7:5e:44:9d:2f:90:b0:bd:bf:
22:96:95:44:57:22:76:de:63:38:9b:38:25:f7:df:
50:7e:c7:7c:9e:64:a0:1e:80:9f:fe:c6:59:fb:a6:
3d:44:a5:ef:51:d6:73:d6:80:ab:38:99:27:f4:05:
3b:5e:76:f9:03:1d:68:21:88:94:24:ec:37:b3:a1:
eb:34:62:78:38:4e:8e:8d:05:66:06:df:5b:e9:a6:
35:4e:81:3b:6d:71:53:03:f1:92:3f:e6:a3:51:62:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:73:7E:F8:9D:1C:7F:00:18:C6:88:29:03:47:CE:70:69:67:FC:0F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K3N--J0cfwAYxogpA0fOcGln_A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:f7:d0:01:13:dd:fe:7b:36:49:37:29:09:eb:22:23:d1:2b:
76:c9:af:32:43:72:9b:24:b0:9a:db:a4:57:17:9b:f5:58:6a:
43:83:0f:87:f7:56:48:2c:f2:11:99:60:3d:90:af:cd:d9:b6:
81:d2:1f:a7:4e:22:72:5b:43:21:a4:9e:61:97:8c:c1:a7:ee:
75:a8:c3:dc:32:9b:e5:16:97:27:ac:05:cb:66:1a:72:2a:ce:
24:bf:02:25:83:11:b8:2c:76:fc:f0:ab:36:3f:e7:a8:ab:d2:
b2:4a:b3:50:f4:38:3f:50:9b:62:67:14:bf:76:45:96:7a:a8:
7f:30:32:6b:f4:50:1a:61:69:69:be:3b:c4:e0:5d:bc:5b:84:
26:ff:63:66:c9:e1:6b:71:1a:bc:fb:eb:b8:60:fc:aa:fb:43:
8d:f2:55:e4:2d:94:4a:3d:42:14:7b:0d:35:8a:52:66:c6:9d:
d1:93:39:14:12:d9:d0:72:6c:60:e7:bc:f7:f5:72:04:ce:25:
09:d2:2f:bd:de:d5:56:48:d8:a7:f5:3d:4e:c8:c4:e0:d8:a2:
61:f1:d8:e8:f3:e1:25:24:64:a7:e3:92:0e:b2:7d:09:43:e3:
14:95:b1:fe:70:12:77:80:f1:8f:c7:a9:38:ca:1e:17:1d:00:
41:9d:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:21 2025 by rpki-client