Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KVIO4vlH3AmjrMY4lhH9zm-GC10.roa
File: KVIO4vlH3AmjrMY4lhH9zm-GC10.roa (raw, json)
Hash identifier: 3iogyq6I0Pe+VLgh2sVGZf4Yu3qoIC9DjEzlQhXHAW8=
Subject key identifier: 29:52:0E:E2:F9:47:DC:09:A3:AC:C6:38:96:11:FD:CE:6F:86:0B:5D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFCC0E4585A8EA5112D69F781DB8F130B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KVIO4vlH3AmjrMY4lhH9zm-GC10.roa
Signing time: Thu 23 Nov 2023 15:16:21 +0000
ROA not before: Thu 23 Nov 2023 15:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:c0:e4:58:5a:8e:a5:11:2d:69:f7:81:db:8f:13:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 15:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29520ee2f947dc09a3acc6389611fdce6f860b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:f4:1a:98:0b:e5:ea:5e:63:bb:57:ad:34:
4e:00:52:cd:58:4f:ef:11:e6:b8:df:c8:c7:19:0d:
80:01:f4:11:1e:c6:0b:e0:cb:bb:9b:19:ef:71:43:
ab:41:ec:11:16:c2:a0:f7:d9:ce:1c:10:ed:42:29:
07:67:27:f2:f7:08:38:87:88:2f:1e:ba:f9:f2:82:
09:f7:14:fa:a2:e7:b8:70:0a:0e:d2:8d:d7:47:5c:
aa:c8:fc:8a:5c:98:74:2c:4a:bf:0c:d1:69:98:65:
c7:ba:2b:73:7b:1e:6c:1e:6f:2c:d4:59:ab:ac:95:
3c:aa:f7:a0:56:61:5a:7f:bb:94:91:b4:2b:79:bd:
30:72:2f:da:28:a4:a8:a4:94:bc:ca:9e:d4:61:7a:
48:55:0d:7f:02:53:71:4a:c3:15:81:0f:4a:3e:3c:
de:c8:ba:af:d3:0b:fd:10:b6:3d:02:46:29:69:d7:
7b:c3:ba:2c:c7:e5:1d:24:73:8d:9e:1f:5f:51:6a:
9e:1a:52:1e:c8:be:a7:12:ca:1c:43:ab:69:82:9f:
4d:f1:ec:87:af:87:a7:9c:57:99:d7:22:46:b1:ad:
74:b4:08:5f:1e:76:76:6f:8b:3b:94:ef:e3:a3:9c:
47:0b:06:08:b1:e6:da:8c:71:0a:bf:28:72:71:e9:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:52:0E:E2:F9:47:DC:09:A3:AC:C6:38:96:11:FD:CE:6F:86:0B:5D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KVIO4vlH3AmjrMY4lhH9zm-GC10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:f3:9f:13:b8:ef:02:1a:9b:b5:03:6c:30:cc:45:63:e3:9c:
e4:5b:a5:15:42:5b:aa:0f:67:a8:1c:f9:0d:f4:90:48:95:af:
de:42:7a:e5:58:1e:ef:3b:2e:26:cf:c2:f3:61:e8:29:fa:f5:
54:09:09:8c:df:0a:11:ba:db:2f:60:dd:13:b6:09:47:d9:25:
d4:89:1f:18:63:f5:6b:c1:1e:41:35:ce:73:3b:b8:0c:13:3d:
05:a9:a1:eb:fb:95:58:49:58:28:c5:b6:94:a7:46:85:71:26:
2f:8f:fb:bb:b2:7f:e0:f7:d2:99:d2:eb:ad:e3:da:b0:ae:4f:
58:94:ca:20:a2:e7:ca:4d:06:cd:75:cd:4c:fc:7a:6a:2e:96:
f4:40:30:0c:85:fb:a1:2f:e3:c0:6b:06:c3:4a:1f:ba:15:be:
a9:a6:c5:43:72:a8:a0:f3:0b:71:06:12:61:4c:37:f8:6d:60:
5a:fc:96:4c:fd:1f:72:46:d8:84:21:46:e0:03:e7:a3:c4:04:
60:b9:0f:15:be:8f:34:95:92:7f:61:ff:5b:1e:1e:3d:65:f3:
e7:22:eb:11:b1:18:f7:77:bb:96:95:2d:6f:d9:d5:12:57:9f:
af:03:0b:c5:d6:62:c3:25:9d:4b:42:cb:6e:a7:d5:c2:36:60:
f9:4e:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:36 2025 by rpki-client