Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KIjo1FMlYkllZjKzUZCM6IlzV-s.roa
File: KIjo1FMlYkllZjKzUZCM6IlzV-s.roa (raw, json)
Hash identifier: h0hEpKzee99i0H+sR3dG3QFHOlNpZ3e6Oa1eLlqc7mo=
Subject key identifier: 28:88:E8:D4:53:25:62:49:65:66:32:B3:51:90:8C:E8:89:73:57:EB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6D9CD26437C3C3012289864E93005F48
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KIjo1FMlYkllZjKzUZCM6IlzV-s.roa
Signing time: Thu 26 Oct 2023 20:11:15 +0000
ROA not before: Thu 26 Oct 2023 20:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6d:9c:d2:64:37:c3:c3:01:22:89:86:4e:93:00:5f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 20:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2888e8d453256249656632b351908ce8897357eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:be:67:7c:ad:2d:7a:23:de:59:4b:16:81:39:
6f:e6:bd:23:33:ce:63:46:9c:4d:c0:f6:c6:74:4e:
66:22:42:c1:fd:06:8b:3b:9b:bf:31:df:53:f0:b4:
4e:a2:df:cf:37:e7:de:68:9d:ea:ef:96:aa:03:a7:
a9:d5:62:28:4d:d5:e0:da:bf:e2:00:12:3d:5b:79:
b8:26:0f:f7:99:44:e4:4b:fe:ff:47:f1:6b:b2:23:
b9:9f:6c:d5:c3:08:0e:7d:4b:a5:b1:51:17:31:cd:
f3:5b:64:a2:2b:67:2b:ad:29:66:3b:45:eb:5c:1d:
42:4d:98:d7:3c:c3:df:6f:9a:f1:42:20:ab:84:fd:
64:7c:c3:40:8c:63:d0:f2:17:8c:7d:0e:5c:f4:05:
75:1d:a2:dd:9e:b8:08:4a:8b:71:cc:e2:51:0b:b9:
c1:5c:49:26:28:dc:2e:42:df:58:9e:7b:43:a0:30:
44:43:6d:af:b2:3d:e1:f6:dc:1d:cc:28:a6:23:b7:
59:74:af:74:12:c2:93:59:06:fa:4a:d8:df:81:b3:
bf:30:71:b9:26:24:2b:ba:3a:9a:cc:14:81:b1:aa:
3b:01:fc:d7:cf:40:c3:63:7c:2f:e0:de:e2:33:44:
35:5e:79:c5:02:7b:60:fb:5a:d3:9d:3c:42:79:06:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:88:E8:D4:53:25:62:49:65:66:32:B3:51:90:8C:E8:89:73:57:EB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KIjo1FMlYkllZjKzUZCM6IlzV-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:6b:a0:df:98:37:3d:0b:e9:ee:30:91:f9:99:ba:da:64:48:
7b:ad:6b:10:85:d5:88:11:1d:b6:9b:9b:a3:3d:20:cd:21:98:
af:f3:4c:44:31:3c:eb:3e:eb:27:22:b0:1d:55:48:02:4f:8a:
a8:b9:d5:03:f6:80:43:f6:bb:71:06:42:3a:75:dd:0c:35:31:
2d:7e:8f:ef:d2:7e:c3:5e:24:9c:6f:12:e8:ce:5f:ca:7c:77:
f5:9a:f4:d1:3a:77:eb:10:cb:a0:a0:7a:50:83:d4:d8:67:74:
14:96:fa:d3:1b:f2:81:45:61:ae:b1:82:84:db:62:23:f1:31:
6a:23:c5:ef:be:e5:b8:7c:7a:9b:54:00:dc:ff:d7:fb:34:58:
b3:be:6c:28:d8:0a:fb:77:12:0b:ce:90:51:ce:8d:13:bf:e0:
15:c4:de:6b:79:bc:13:df:3c:b3:f6:05:fa:d2:38:82:92:14:
45:10:91:5c:c0:45:56:d8:eb:28:cd:36:ae:56:f2:3c:be:65:
36:ab:1e:a7:de:f8:5a:0e:82:93:47:43:9b:4b:d8:92:ae:cc:
60:31:3f:d2:9f:45:91:e8:a2:30:f8:d2:74:fc:1c:98:7c:d2:
a3:ca:26:9f:70:12:0f:44:b0:26:61:1a:24:fb:e7:c1:39:e2:
7f:22:d2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:15:52 2025 by rpki-client