Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K44cL7QZSTqoY5elT-YEgHdtRE8.roa
File: K44cL7QZSTqoY5elT-YEgHdtRE8.roa (raw, json)
Hash identifier: ThOZ5oH2q0SSaEJtTMhZA3pKn6k9Tmxu0CYTFkF1h6A=
Subject key identifier: 2B:8E:1C:2F:B4:19:49:3A:A8:63:97:A5:4F:E6:04:80:77:6D:44:4F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC226B0FD7725DC92FC22C1E7229B9E4D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K44cL7QZSTqoY5elT-YEgHdtRE8.roa
Signing time: Sun 12 Nov 2023 06:09:57 +0000
ROA not before: Sun 12 Nov 2023 06:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c2:26:b0:fd:77:25:dc:92:fc:22:c1:e7:22:9b:9e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 06:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b8e1c2fb419493aa86397a54fe60480776d444f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bb:af:2e:2e:de:39:ab:e3:dc:d3:4d:54:df:
cd:d2:f8:a7:f3:a4:74:12:e4:b9:5a:fc:3e:73:64:
b7:f1:84:a2:81:f7:4e:e1:6d:bf:c7:48:b6:d9:a5:
a5:ca:5e:bf:30:dc:2b:81:a0:2e:8c:b6:54:4f:33:
9e:59:2b:bd:de:ed:1a:f5:71:10:a2:42:97:c1:d7:
3e:6d:76:e1:9f:29:d8:64:d1:74:b9:76:5d:0c:60:
f1:d9:5a:8f:1f:26:ed:d0:2a:8c:05:40:88:cb:2b:
bd:31:39:6b:9f:b2:47:65:0b:c8:df:aa:90:12:b9:
f5:a6:56:4c:93:0f:6e:63:5f:f8:60:5a:b9:a4:12:
e3:0c:02:28:cc:88:33:10:9d:c3:af:28:71:88:2a:
44:a4:f4:95:8b:93:61:88:96:b8:01:41:4b:92:1d:
56:e2:ac:bd:50:4c:65:47:78:3e:31:3c:19:b2:78:
f9:7e:6c:22:15:c7:df:0b:e4:39:1c:c5:3b:56:2f:
a5:78:d8:26:60:a8:2c:96:24:e4:7f:4c:3e:b0:8f:
46:45:2a:f3:4b:a6:78:09:1f:e2:b6:98:2c:fb:c2:
d2:b4:bb:10:06:31:0d:50:52:77:fc:28:fe:f5:51:
37:e2:27:b8:73:5b:59:5b:02:51:92:6a:67:b0:00:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8E:1C:2F:B4:19:49:3A:A8:63:97:A5:4F:E6:04:80:77:6D:44:4F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/K44cL7QZSTqoY5elT-YEgHdtRE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:a6:ed:f4:1a:f4:3e:91:fb:88:53:ba:9e:c8:41:f9:2e:67:
db:a8:bf:d2:b5:b6:38:86:1d:9e:5e:a4:a6:c0:50:e3:f9:93:
d6:8a:3f:77:1a:3d:33:00:b2:13:d3:fe:83:92:c6:dc:78:a7:
08:d2:36:41:ce:bc:23:4d:8e:a0:ef:70:00:b9:a6:d0:da:92:
68:30:9d:e9:94:84:b8:3a:a6:12:34:ba:77:7d:1e:10:f4:11:
a5:aa:58:79:54:cb:9e:49:2a:79:f2:bd:0b:c0:fb:a9:75:fa:
27:b3:2a:97:27:44:bc:84:a3:d6:ef:da:20:e3:a2:e8:95:92:
93:27:07:10:05:9f:40:8a:d1:8e:05:86:a6:41:66:5f:16:37:
e2:9e:bd:22:61:b8:f7:92:8a:07:4d:b9:10:8a:00:43:18:38:
c9:bc:4c:e2:9c:4f:7c:b7:bb:e9:d1:18:9b:01:22:0c:35:cc:
d7:c6:ca:5a:4d:60:b7:0b:68:c9:67:4b:8b:a0:a6:7e:a9:5b:
6c:48:cf:34:d5:7b:09:05:0c:a0:1b:7a:ff:d6:32:33:9b:28:
14:56:2e:03:98:36:86:d9:f0:9a:fd:31:2a:0b:0a:d9:ed:1e:
2c:b7:23:94:18:c5:f0:50:35:25:57:a0:db:53:46:cb:fe:82:
fa:95:51:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:31 2025 by rpki-client