Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KgAB8dakIMGrD6g5wP9xNm7uUBE.roa
File: KgAB8dakIMGrD6g5wP9xNm7uUBE.roa (raw, json)
Hash identifier: eORqQkyv8rPBciRbrTrjCfaO2Ta8gM5Q5mAF86BHCf4=
Subject key identifier: 2A:00:01:F1:D6:A4:20:C1:AB:0F:A8:39:C0:FF:71:36:6E:EE:50:11
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF79B489E0603EB789987216769F14DB6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KgAB8dakIMGrD6g5wP9xNm7uUBE.roa
Signing time: Tue 03 Oct 2023 22:14:23 +0000
ROA not before: Tue 03 Oct 2023 22:14:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f7:9b:48:9e:06:03:eb:78:99:87:21:67:69:f1:4d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 22:14:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a0001f1d6a420c1ab0fa839c0ff71366eee5011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:28:04:1d:38:6f:e4:4c:8e:49:a1:09:c5:
a1:20:56:29:bd:ad:20:fe:c8:85:14:1a:bf:72:8b:
25:36:13:b4:76:3e:36:9b:fc:a3:16:02:34:dd:46:
11:21:fb:63:b1:f3:6a:7c:6e:24:f1:8a:a8:32:24:
9b:32:e6:e1:75:4e:7b:31:38:96:1b:be:13:6b:f7:
f0:03:90:e1:60:af:d3:d2:a2:31:dc:7e:62:e3:b3:
40:60:6f:97:4a:57:f1:aa:be:37:c8:f1:00:e3:a4:
11:19:f3:fd:76:49:2d:43:ee:cb:58:20:28:d6:00:
c6:f9:76:2e:58:b2:58:ea:32:a1:c7:85:bb:ce:97:
3d:07:fa:50:f5:97:43:94:dc:d8:3b:cf:7b:e6:21:
c4:34:03:0b:51:b4:85:43:ed:56:ba:5d:e8:e8:a8:
d3:29:48:2b:c3:3c:c1:af:68:bb:c6:1c:3e:2f:e0:
bf:74:6c:02:7f:b7:e9:fb:68:e5:d2:39:73:28:69:
4d:23:97:55:5e:dc:03:19:19:ca:ea:4a:94:c1:42:
04:00:ab:cb:38:a5:cf:58:ed:3f:6e:f8:bd:2e:d8:
03:48:03:8e:13:69:e3:54:20:96:5f:32:6f:eb:ea:
cb:fd:8b:2e:da:f4:91:4b:53:8d:30:53:af:b0:41:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:00:01:F1:D6:A4:20:C1:AB:0F:A8:39:C0:FF:71:36:6E:EE:50:11
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KgAB8dakIMGrD6g5wP9xNm7uUBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:37:0a:13:88:ca:0b:75:8f:e7:6e:7b:ef:9b:1c:a8:6c:f3:
37:d8:11:3f:73:80:7f:89:b2:d2:c7:f0:a8:94:7a:bf:da:93:
ac:4b:a9:12:8a:1f:ea:2b:02:f5:ff:98:49:d4:6e:c9:ee:f9:
04:2f:5c:7e:47:e1:0c:81:5e:0a:d8:cf:5a:0e:d6:bc:d0:bc:
b0:a3:0b:38:9e:04:4a:e2:9f:d7:81:31:18:52:76:48:94:23:
77:4d:aa:ac:67:72:a6:b9:27:bc:db:2c:bb:45:e8:fc:d8:3f:
72:a5:e4:32:fe:6b:11:06:e9:4d:4b:0e:8b:3f:de:e8:9a:0c:
d5:bc:44:47:8b:4e:ba:e9:7d:1c:3a:09:a3:e9:6e:eb:93:2d:
e6:b2:5a:96:5e:5e:d5:74:a6:15:9d:4e:64:d6:18:6a:f0:68:
57:26:a3:d3:43:6b:4f:aa:f7:a7:3f:bc:14:36:4f:71:9d:16:
04:21:c0:f4:f4:2c:64:54:6e:65:e9:25:78:f3:74:d2:13:7e:
c1:ce:66:fd:e5:2d:1d:e4:87:27:97:f1:b1:4c:9a:9c:0d:f6:
73:95:fc:c2:fe:d6:80:8e:87:82:7e:af:9f:98:2f:d0:34:57:
93:c8:e6:3d:4a:e2:39:fb:01:ae:ab:da:ba:7e:f9:c4:c2:1b:
fe:82:99:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:44:42 2025 by rpki-client