Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KGmuufv9EyaCZNYg8tjZaZGF0YQ.roa
File: KGmuufv9EyaCZNYg8tjZaZGF0YQ.roa (raw, json)
Hash identifier: nQJiRabOpcNaYlQVgs/p43KlDIepTZf+cYmuj0E6904=
Subject key identifier: 28:69:AE:B9:FB:FD:13:26:82:64:D6:20:F2:D8:D9:69:91:85:D1:84
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6E40C149039891957E952D5FF09F3ECA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KGmuufv9EyaCZNYg8tjZaZGF0YQ.roa
Signing time: Fri 15 Dec 2023 16:13:06 +0000
ROA not before: Fri 15 Dec 2023 16:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:40:c1:49:03:98:91:95:7e:95:2d:5f:f0:9f:3e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 16:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2869aeb9fbfd13268264d620f2d8d9699185d184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:3e:03:98:3c:47:ab:69:ad:40:b4:a6:90:
64:e6:01:ef:82:ab:3b:c2:d4:fb:a0:84:e8:44:20:
dd:7e:e9:35:ab:8c:aa:99:83:6f:68:8b:a3:de:a0:
a0:11:64:1a:64:62:22:93:4e:24:ff:85:b7:21:20:
7d:de:34:91:a6:b5:93:6a:61:7b:bd:39:44:bf:3d:
a5:05:e8:7c:e8:96:1b:15:a6:83:aa:25:08:e1:9b:
01:1a:5c:f4:2e:5c:59:d0:e8:a1:d0:d7:d5:b7:8d:
7a:d9:84:3a:74:37:c4:ee:16:79:0a:09:bd:da:27:
15:07:b9:2c:69:d6:15:b1:c3:a8:22:42:4e:df:12:
1a:82:e4:87:09:dc:1c:a4:8c:db:89:3c:0f:69:8f:
16:03:98:88:c4:a5:17:f6:e6:34:f6:10:46:9f:e3:
46:e5:5d:ce:8e:a0:b7:fa:c3:66:1a:c7:b6:7f:c0:
d5:62:07:4b:0f:ba:6e:3b:f8:48:ff:b2:f7:5e:8b:
0a:44:1a:c9:cb:8f:02:cd:59:50:3a:83:30:59:1b:
2c:ee:27:ae:11:cd:93:64:89:ec:7b:7c:7c:99:86:
98:79:4d:64:35:22:c1:8e:c7:dd:f6:cf:75:1f:1c:
18:77:b7:6d:10:9d:7c:83:bc:b6:82:2f:a0:7a:32:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:AE:B9:FB:FD:13:26:82:64:D6:20:F2:D8:D9:69:91:85:D1:84
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KGmuufv9EyaCZNYg8tjZaZGF0YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:15:32:88:58:25:82:23:c7:d0:d0:3f:c7:b6:b0:81:1c:95:
2d:15:34:96:e1:74:63:54:04:ef:1e:85:da:25:35:bc:95:74:
2d:c8:47:c5:3e:9a:8b:3b:20:d4:63:4a:e5:12:56:3a:73:f7:
dc:5b:c5:ad:cc:09:32:3d:1e:ae:98:a1:17:23:6a:ea:0e:f4:
28:43:81:c2:21:7a:81:b9:f0:e6:3d:da:a7:4e:d2:33:2d:0e:
cc:4b:7c:74:70:a1:28:81:ad:75:4d:3b:7b:35:06:3a:20:a1:
19:1e:b2:6a:7b:bf:e0:bb:c5:35:2e:5b:76:ff:de:f1:f3:b4:
17:8d:56:cd:37:b2:0f:65:a4:60:a1:ab:c6:a5:ff:80:47:29:
c2:1d:e2:2f:3b:ed:32:35:ca:78:6a:08:02:07:62:2b:74:b5:
84:26:c4:20:31:cc:9f:52:a9:ac:88:9b:18:f3:f8:f7:18:85:
3c:44:e8:5f:0d:7c:fa:75:70:57:eb:be:3f:a7:95:e8:b9:4f:
63:11:8b:53:6e:43:a5:34:84:b7:da:0c:c0:32:81:78:ac:79:
94:2a:b1:81:b6:ae:4a:80:b2:62:dc:21:26:af:37:17:ee:6b:
d2:23:63:1b:a8:49:10:4f:b7:4a:3b:0d:08:36:b2:27:7e:0d:
e0:69:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:55:41 2025 by rpki-client