Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KWpq1Bg7RvrYTIjCQOSv8TmlkVw.roa
File: KWpq1Bg7RvrYTIjCQOSv8TmlkVw.roa (raw, json)
Hash identifier: JAHXoWQm7wofGt419gN2ueAnfxdUY2bC4dVUMHZh7YE=
Subject key identifier: 29:6A:6A:D4:18:3B:46:FA:D8:4C:88:C2:40:E4:AF:F1:39:A5:91:5C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADBED27FB65D0563B4A2E42F69549AA50
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KWpq1Bg7RvrYTIjCQOSv8TmlkVw.roa
Signing time: Thu 28 Sep 2023 13:14:27 +0000
ROA not before: Thu 28 Sep 2023 13:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:ed:27:fb:65:d0:56:3b:4a:2e:42:f6:95:49:aa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 13:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=296a6ad4183b46fad84c88c240e4aff139a5915c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:92:41:f4:61:7e:3f:6e:76:91:80:e5:45:
51:d0:cb:88:60:47:dc:cc:ba:cd:56:9f:de:56:ef:
53:3c:2a:a0:62:50:d2:6b:f3:a1:5e:c1:de:8d:26:
12:1a:76:0f:32:41:7c:48:9e:cf:1c:07:0f:4c:ba:
e3:69:f3:88:cf:7b:0c:71:d1:8a:71:96:72:6b:d5:
5a:07:e6:6a:22:f2:00:7a:1b:78:f2:85:a6:7a:c7:
87:eb:78:7b:68:57:4a:4a:4c:d8:68:19:16:18:03:
58:ad:f9:fe:58:99:0c:89:73:b2:f6:ab:27:41:f3:
9a:4e:9e:0b:13:1e:c5:ea:42:1f:64:be:ac:f7:11:
8c:58:b8:6f:1c:f4:d0:71:a8:2a:7c:bf:50:56:98:
7d:70:59:2a:09:aa:8f:12:b9:9a:73:f4:ec:d2:dd:
2c:18:56:d2:0c:49:ac:bd:c0:fa:09:cd:71:07:55:
53:8f:da:ec:af:aa:35:72:fc:d2:91:8c:d4:e0:03:
6b:38:4f:6a:24:43:43:88:8d:7b:dd:6d:44:aa:64:
51:de:0a:cb:c6:d8:7f:c8:df:c2:eb:c2:cd:2a:9c:
89:38:af:bf:cb:3d:74:bf:33:0a:63:33:21:66:11:
09:58:33:ef:c3:7a:3c:2f:4d:03:a8:fe:a2:b0:9f:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6A:6A:D4:18:3B:46:FA:D8:4C:88:C2:40:E4:AF:F1:39:A5:91:5C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KWpq1Bg7RvrYTIjCQOSv8TmlkVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:9a:83:b5:17:40:4a:fd:60:e0:f6:ec:25:1e:b0:10:b1:75:
f7:55:4e:89:89:65:21:f1:9c:79:11:62:c2:2a:9a:1e:3e:72:
c8:ed:1f:b9:d4:78:16:1e:8b:af:0f:5e:60:be:56:34:bf:52:
16:be:c1:47:1e:97:5b:d3:20:68:24:bd:86:e0:f0:41:e1:10:
d3:cd:be:3c:8c:40:8f:49:87:83:21:c7:3d:9d:19:8e:58:ba:
38:ff:ec:43:91:3e:0b:be:37:a2:54:1b:2d:9b:07:fe:da:53:
7d:2b:87:f6:e6:5a:45:92:81:f2:1a:98:67:6a:ee:5e:fa:29:
d5:df:f1:92:54:53:52:1f:92:c2:97:47:c2:d9:80:29:c7:9c:
8d:83:98:5f:34:d0:2c:4d:97:9e:74:7c:fb:7c:84:79:ef:36:
fd:aa:0e:eb:4c:fd:eb:54:3f:58:c4:31:75:30:a5:47:1d:ec:
bf:f4:e3:c4:6d:fb:eb:03:bc:b7:9a:05:ed:c0:c5:2b:9f:a0:
d2:7a:c9:3d:9a:b7:f4:ba:df:4d:1c:6b:4b:cd:c0:24:c9:73:
fa:3f:cd:32:15:72:b2:ba:e8:68:4f:2b:cd:19:54:55:98:db:
e8:00:84:07:db:7d:9a:42:0e:d8:3e:b5:de:bd:0d:a0:c2:a2:
c1:79:88:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:09 2025 by rpki-client