Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ki0YMwUHm-3q1e8v9MeQYtoJmOY.roa
File: Ki0YMwUHm-3q1e8v9MeQYtoJmOY.roa (raw, json)
Hash identifier: LgPgQKraTcPlMpsBz4vTrDGzud3rrydZxNA+SY7xtpw=
Subject key identifier: 2A:2D:18:33:05:07:9B:ED:EA:D5:EF:2F:F4:C7:90:62:DA:09:98:E6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B276D4A6B57CF3B4B05E7182734F21EB5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ki0YMwUHm-3q1e8v9MeQYtoJmOY.roa
Signing time: Fri 13 Oct 2023 05:05:55 +0000
ROA not before: Fri 13 Oct 2023 05:05:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:276c:c13e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:6d:4a:6b:57:cf:3b:4b:05:e7:18:27:34:f2:1e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 05:05:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a2d183305079bedead5ef2ff4c79062da0998e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4e:1c:b1:da:33:9d:20:d8:22:8c:d4:63:60:
b2:2a:c4:9d:d3:d5:91:43:be:77:8a:93:1a:bd:4f:
8b:af:69:b2:df:9f:2f:75:64:3e:4d:60:35:20:99:
65:fc:f7:7b:78:9b:a5:e2:09:67:2e:71:c8:53:88:
51:f8:c6:18:e1:ac:76:79:e0:f2:a2:ca:d5:f1:40:
9f:f8:a4:83:ee:63:01:6e:18:3e:75:4e:96:8c:1a:
91:24:76:6e:d0:b8:39:10:43:08:0b:3c:92:a5:c6:
5e:4e:9f:d2:dd:8d:16:f2:d3:66:f9:7d:83:1a:dc:
52:06:43:29:90:96:b7:23:04:70:bf:c2:ee:31:33:
6e:83:fd:a3:4d:2e:c8:98:5d:b4:89:1a:6c:21:ef:
c3:52:db:3d:17:22:9d:9c:63:e2:86:2c:74:dd:f6:
97:88:0a:44:6d:71:5a:73:29:6a:af:9e:42:98:64:
7c:7d:ab:2e:96:8c:4b:e5:d1:25:09:da:1b:37:bc:
bb:c6:dc:5f:0e:3d:51:66:e2:6f:fd:48:5e:8d:26:
83:0f:5a:84:8d:e0:ac:68:cb:77:8c:e7:d8:ef:66:
4f:b4:24:54:68:ad:ce:ec:40:92:c3:87:1c:c6:54:
0b:ed:96:cc:d9:75:9f:0a:2d:61:bd:d2:e6:d1:4a:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2D:18:33:05:07:9B:ED:EA:D5:EF:2F:F4:C7:90:62:DA:09:98:E6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ki0YMwUHm-3q1e8v9MeQYtoJmOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:bc:de:6f:ed:d3:9f:fe:9c:e4:6d:69:cd:b7:20:ba:82:b4:
6d:9f:c1:a3:59:56:ff:6c:9e:b1:ba:af:35:72:69:ba:14:a2:
04:26:cc:a9:42:0e:c4:29:80:12:3e:3f:be:6b:8e:0f:31:9a:
f4:e7:a7:91:de:f8:62:c5:18:68:45:62:4e:9e:ba:31:69:49:
bc:be:96:1e:6e:06:65:6b:a9:a1:34:fe:7c:5f:df:88:1b:ed:
ac:15:4d:9a:90:48:4a:56:27:75:99:99:72:bd:77:6d:b8:67:
df:4b:c6:ff:37:32:c5:25:73:2b:e6:db:68:53:33:43:fc:13:
ea:9b:94:b6:10:fc:b0:6c:65:6d:10:6b:c8:ff:39:b4:3e:39:
6d:d0:c1:08:21:ba:a5:b1:0e:8a:b0:62:ec:82:49:ac:9e:97:
2a:17:d6:09:83:87:78:e9:bb:93:55:6d:cb:dc:02:9c:cb:7f:
39:91:9e:16:a1:ba:7c:84:62:15:a8:fa:78:c5:03:33:d1:cd:
13:98:fb:a0:2d:36:cd:8f:12:61:0b:f7:a0:3a:16:95:50:64:
63:80:9b:0f:3e:36:0b:a8:0f:a2:48:cd:1b:ed:35:5c:86:71:
bf:e6:ce:2f:5f:99:3e:52:9f:45:79:9e:77:50:5a:36:b8:8c:
43:2f:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:08:14 2025 by rpki-client