Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Kp7Ufkl07d6QoYw4U8B7iSaqo5o.roa
File: Kp7Ufkl07d6QoYw4U8B7iSaqo5o.roa (raw, json)
Hash identifier: 5tXSoMfzgwO4VYftJg6HxXHoum7lZYu6XYm2RkPBUVw=
Subject key identifier: 2A:9E:D4:7E:49:74:ED:DE:90:A1:8C:38:53:C0:7B:89:26:AA:A3:9A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC7BBD3EAB51F4F81EE044250C11D9CD6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Kp7Ufkl07d6QoYw4U8B7iSaqo5o.roa
Signing time: Mon 13 Nov 2023 08:10:57 +0000
ROA not before: Mon 13 Nov 2023 08:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:bb:d3:ea:b5:1f:4f:81:ee:04:42:50:c1:1d:9c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 08:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a9ed47e4974edde90a18c3853c07b8926aaa39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:60:02:f8:f7:bd:d7:ed:7b:76:93:e5:12:
37:0a:c9:5d:8d:78:3d:df:9a:fd:69:31:07:b0:89:
e1:6e:de:51:b0:86:bb:a6:57:b5:c7:50:8a:f7:06:
44:3b:35:7d:01:ac:f1:9e:49:09:92:16:1e:1e:8e:
40:de:a2:13:5e:17:37:2a:d9:55:ac:36:b7:e1:64:
31:af:a2:50:93:33:d5:81:df:a9:c8:4a:6e:89:f1:
fb:24:ae:fa:36:52:f1:c7:36:b9:3c:01:15:93:03:
2a:93:61:0b:e9:a6:86:a4:01:be:3b:4a:cd:77:22:
3f:c4:a3:61:4a:0b:c9:ab:2b:99:fc:f1:12:b3:05:
5d:94:ef:89:d1:4e:ee:c9:03:62:ce:41:8c:72:35:
72:27:07:b1:7e:34:4c:c7:4b:8a:c9:45:c1:ee:e8:
a5:97:7a:90:33:94:39:5a:be:91:ab:f9:36:62:6b:
8a:2a:3c:61:73:ea:eb:78:a9:7d:83:25:79:40:b9:
01:d2:78:59:0e:26:ad:fe:5f:62:c0:72:78:0d:0f:
40:cd:82:8f:10:b2:a9:f2:31:d9:bd:88:25:57:1c:
12:d4:5c:64:5a:d7:1b:11:40:71:61:80:12:c3:c9:
63:11:e0:49:bc:96:68:a7:2f:3a:4e:a7:9c:49:02:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:D4:7E:49:74:ED:DE:90:A1:8C:38:53:C0:7B:89:26:AA:A3:9A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Kp7Ufkl07d6QoYw4U8B7iSaqo5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:be:db:6f:1f:64:d4:59:4c:07:a8:5f:b8:e4:28:9a:32:bd:
d5:66:17:63:34:37:f0:f4:ad:af:fa:a1:9b:ba:8e:85:81:52:
21:72:b3:33:f9:c3:df:a6:c1:a7:2f:36:08:50:3a:83:9d:45:
d0:0d:f7:62:be:f6:bd:54:a2:8f:c9:35:d3:bb:5a:c6:14:39:
fc:7b:3b:f4:8e:45:e6:94:fa:a8:54:08:72:8d:d0:e1:67:76:
51:02:be:a5:93:c0:00:d1:16:65:82:06:d0:c2:9e:98:e2:57:
b4:1d:a1:91:df:a5:9f:c7:3a:06:8d:4d:f8:f3:58:13:1b:23:
bf:68:ae:98:08:43:af:5a:9b:c0:12:82:bf:28:36:82:28:d0:
24:80:fe:55:e5:18:50:3e:f6:a5:e5:62:34:0a:1e:6c:1b:db:
99:10:64:d2:9e:1b:d9:6b:6a:18:54:4e:62:5d:f0:00:2e:ef:
7b:e1:df:ba:7b:ce:10:3d:5e:b5:cd:a7:a9:44:17:84:3c:6a:
33:00:25:c3:a6:1f:35:17:37:5f:25:a0:76:ac:c8:66:2a:87:
bd:8c:07:49:da:f2:e0:11:4f:fb:04:e1:77:71:00:86:7f:a1:
ef:03:60:80:89:0e:7c:01:b1:82:a3:49:d0:03:5d:2e:d2:73:
e4:8f:b0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:27 2025 by rpki-client