Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KOIVGwrrcxX0SVtLqGk7N1-1Nvk.roa
File: KOIVGwrrcxX0SVtLqGk7N1-1Nvk.roa (raw, json)
Hash identifier: 9lsZ8yo32P7r9wfvvr2PlYxJY4hhx8rW6VkJBONAlXE=
Subject key identifier: 28:E2:15:1B:0A:EB:73:15:F4:49:5B:4B:A8:69:3B:37:5F:B5:36:F9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAE320B2A52B2223E5924F9C2D5728EFD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KOIVGwrrcxX0SVtLqGk7N1-1Nvk.roa
Signing time: Wed 08 Nov 2023 09:09:57 +0000
ROA not before: Wed 08 Nov 2023 09:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:32:0b:2a:52:b2:22:3e:59:24:f9:c2:d5:72:8e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 09:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28e2151b0aeb7315f4495b4ba8693b375fb536f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:91:92:5a:c6:00:15:ba:05:1e:49:71:3c:c2:
e1:84:31:3f:be:e6:81:b4:6e:85:dd:bb:bd:a1:27:
13:74:ca:3c:b4:d2:28:32:d5:70:ae:35:7b:10:bf:
a5:ee:e0:f9:17:a5:da:73:90:47:28:94:1c:88:1f:
0f:85:85:84:56:44:e7:fa:a7:68:84:45:ec:4a:89:
10:c9:87:c3:95:e2:f5:5a:7b:19:54:c8:25:d3:cf:
6c:f1:e9:2b:45:19:39:5a:51:e5:e3:6c:1a:98:7f:
f6:87:85:8c:88:33:19:68:6f:4f:85:1a:79:f1:40:
c4:9d:45:1b:58:6c:5d:58:a9:ac:c6:99:70:01:0a:
7c:9e:04:b7:2a:b5:59:a8:86:62:f8:61:52:b2:96:
5f:0c:fd:00:3f:d8:b8:43:45:bc:3b:69:17:30:47:
5f:97:d3:ea:0a:4e:17:e5:87:77:5d:11:72:52:15:
36:d1:a7:90:c1:ff:7f:02:cf:44:21:04:81:53:c5:
8a:69:c0:db:7a:41:74:07:73:39:3e:c6:20:53:a3:
9b:b6:fb:48:49:70:40:da:34:88:63:e7:ac:52:af:
09:45:6d:0d:57:54:c0:69:7a:c1:40:f6:55:54:46:
74:ef:5a:7a:ac:85:1f:82:25:b2:19:e9:fc:74:79:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E2:15:1B:0A:EB:73:15:F4:49:5B:4B:A8:69:3B:37:5F:B5:36:F9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KOIVGwrrcxX0SVtLqGk7N1-1Nvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:6c:7f:33:08:8d:3c:26:2c:a9:c4:44:f4:37:5d:4c:d4:35:
f5:79:bc:cd:bd:0e:b1:af:e9:a2:0a:9a:ae:7c:85:50:0e:14:
be:56:f0:49:0c:00:59:49:af:22:dc:14:0e:77:ac:52:1f:11:
61:99:63:f7:cd:c6:87:1f:1f:c5:70:b5:a6:ae:36:d8:72:be:
15:58:87:51:86:ee:00:b6:81:46:32:c8:da:6c:47:37:37:f7:
67:2f:a4:05:ba:71:9a:60:e2:25:e4:a5:d0:44:7d:7d:00:1b:
27:b1:36:01:9a:98:12:db:58:5c:24:80:d3:1b:eb:35:ce:ed:
8a:7f:6a:01:a8:7f:f8:42:1c:75:46:ef:9b:13:d2:c7:72:23:
2a:b2:39:c9:6e:88:d1:ee:1d:bf:bb:d1:11:6b:ae:9c:c5:c7:
5f:32:c9:70:8c:95:27:f8:5a:a9:5f:93:f2:1d:f2:75:2c:bc:
8b:9c:12:96:e5:2e:5f:b6:3e:87:24:e1:a5:8d:35:51:51:85:
c9:d5:3d:3b:dc:49:18:b0:76:0f:41:39:dd:17:1e:ea:4b:1a:
e2:80:43:b2:7b:9f:92:0e:a8:de:41:43:fd:97:e0:2e:1e:e0:
13:7e:96:3e:6c:e0:ab:59:d2:83:e7:58:00:2f:e3:0e:60:8d:
7f:ef:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:21 2025 by rpki-client