Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KSLP9B_CPaTeMCgUM798vMGpJUo.roa
File: KSLP9B_CPaTeMCgUM798vMGpJUo.roa (raw, json)
Hash identifier: 3XkWM4mdImAvDRdekiN2vARMSqkwdAbf7dZKLWHTRJI=
Subject key identifier: 29:22:CF:F4:1F:C2:3D:A4:DE:30:28:14:33:BF:7C:BC:C1:A9:25:4A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0177B26217FB406F59ED9F352E24CD8C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KSLP9B_CPaTeMCgUM798vMGpJUo.roa
Signing time: Fri 24 Nov 2023 13:14:30 +0000
ROA not before: Fri 24 Nov 2023 13:14:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:77:b2:62:17:fb:40:6f:59:ed:9f:35:2e:24:cd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 13:14:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2922cff41fc23da4de30281433bf7cbcc1a9254a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:bd:87:1b:9d:81:72:a0:e1:f6:26:83:e5:
fb:86:dc:39:0d:30:63:9f:44:d7:06:43:cb:d8:12:
06:62:68:1a:42:e8:a5:21:29:e4:b7:6c:21:82:36:
b6:71:84:f4:63:a9:94:4f:f4:28:37:ee:3e:06:fe:
40:0c:92:75:07:f0:5f:78:44:c4:6e:bd:7a:cb:98:
1f:b2:04:24:28:55:ec:0c:fd:9c:9c:53:11:0e:0e:
8d:ba:f7:5e:94:d1:08:ff:78:c7:48:53:ba:1b:36:
f4:ef:a6:7f:ae:63:b5:b2:a3:48:24:63:fd:2c:83:
77:34:67:6a:00:47:43:58:d7:e5:c8:b7:cd:84:0a:
a4:d2:5a:70:a0:b2:10:90:26:56:58:3d:e3:32:9d:
3f:44:2f:1c:f2:c0:cf:c6:53:59:f8:22:f3:fb:7d:
49:00:89:c0:b7:2c:98:09:d1:63:1e:d9:e1:a6:68:
74:ca:b8:55:f7:2f:9c:b3:73:4b:08:73:f4:e8:ce:
24:38:a0:8a:43:83:11:14:8c:0c:a3:a8:79:45:2e:
da:06:29:9c:67:42:a9:f7:9c:a5:3b:03:50:f3:46:
5f:18:ab:50:75:5a:bd:1b:32:21:b5:2a:3f:af:54:
f4:15:2f:46:34:e0:27:7a:ce:b8:e9:3d:1f:8c:90:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:22:CF:F4:1F:C2:3D:A4:DE:30:28:14:33:BF:7C:BC:C1:A9:25:4A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KSLP9B_CPaTeMCgUM798vMGpJUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b6:d9:c7:24:66:ea:8d:36:3b:b4:c3:dc:20:0d:68:65:8c:6b:
d8:d1:db:ce:6f:3e:5a:06:df:6f:49:31:f5:ef:78:f4:c0:5d:
ab:9e:54:49:d1:c6:e6:97:62:84:bd:d7:4b:aa:b6:0d:1a:74:
d6:02:3d:ba:47:f8:4b:a1:9c:50:e2:bf:14:93:9d:99:e6:c1:
4b:bb:2d:a9:09:6b:17:86:54:19:09:29:6a:38:0e:41:af:10:
c1:60:2e:91:d0:bd:3b:c0:79:bb:87:fe:7b:0b:b3:07:d5:e9:
06:20:c5:1a:69:ad:91:39:91:90:1e:c1:7a:92:26:6c:4a:7a:
79:a5:31:99:53:05:4b:95:97:ce:f6:6c:bb:c5:6f:cf:ab:b3:
34:e5:ed:f3:28:a9:27:9a:5c:2f:5f:c3:83:31:51:6b:5b:40:
64:77:42:03:f8:17:41:d1:f9:03:ba:4b:9a:b2:02:74:76:c6:
6d:e0:4d:2b:09:db:9c:8c:68:bf:f9:1d:6c:26:ba:52:33:15:
69:24:11:79:50:7d:8a:95:55:af:eb:0a:c0:83:73:13:00:48:
7b:21:af:aa:fa:f1:63:8e:b0:1a:32:eb:6b:47:7f:e2:55:98:
2f:0b:7c:c1:d6:cb:e3:8a:04:8a:d5:2d:88:d5:e6:7d:54:99:
0d:15:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:17 2025 by rpki-client