Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KxO4XrKg5NuWqaM1J2HbeUyIy6M.roa
File: KxO4XrKg5NuWqaM1J2HbeUyIy6M.roa (raw, json)
Hash identifier: CJ9xpJZn+JwJlbabPoJqhE+uU0xvHETH+CszizpiOcw=
Subject key identifier: 2B:13:B8:5E:B2:A0:E4:DB:96:A9:A3:35:27:61:DB:79:4C:88:CB:A3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7825F7B1CF8C49064F78671573510646
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KxO4XrKg5NuWqaM1J2HbeUyIy6M.roa
Signing time: Sat 28 Oct 2023 21:17:15 +0000
ROA not before: Sat 28 Oct 2023 21:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:78:25:f7:b1:cf:8c:49:06:4f:78:67:15:73:51:06:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 21:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b13b85eb2a0e4db96a9a3352761db794c88cba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:07:64:f5:fb:14:e8:30:b5:ba:cf:8e:3c:
0f:a4:1c:44:35:51:87:13:75:a9:5f:be:6c:e5:52:
7a:e3:e8:02:a0:3f:f8:2f:84:f9:29:68:c0:d6:96:
56:6b:0b:66:04:e4:1b:03:44:2c:db:df:ce:ba:8d:
26:86:e2:75:f4:88:d3:b5:45:7b:03:eb:91:5d:7c:
e9:eb:8e:df:c1:76:d9:3a:ca:1f:74:4a:f8:d0:83:
5b:bd:48:c0:fa:14:b9:b5:12:59:e8:3d:5d:01:dc:
9c:af:10:68:6b:98:ea:b8:5f:c3:82:70:7a:ce:96:
de:b3:0f:aa:c3:a9:c4:fc:6e:00:27:09:86:21:54:
08:2e:63:08:0e:6c:9b:c2:03:7d:e4:fe:e7:37:39:
0e:ae:cc:e3:4b:b7:6b:5f:37:aa:a9:aa:d2:dd:82:
cf:de:87:ef:d4:26:4f:f3:fd:a9:da:ed:3f:7f:51:
4a:39:d6:5c:1e:84:b5:7b:0b:6a:fe:bf:6f:4b:91:
54:4e:b7:b4:d3:75:5e:3f:b0:e6:6b:aa:f9:c6:b1:
eb:9e:21:27:05:e0:b6:0c:b0:5a:16:51:b1:0b:1a:
ac:2e:b7:58:2b:d9:13:1e:de:f0:1c:41:84:5a:85:
c7:1e:04:ad:89:9e:7a:c7:cd:b4:0f:cf:89:19:c4:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:13:B8:5E:B2:A0:E4:DB:96:A9:A3:35:27:61:DB:79:4C:88:CB:A3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KxO4XrKg5NuWqaM1J2HbeUyIy6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:de:5d:2d:a2:eb:46:b9:e5:c9:ef:42:cc:76:bd:fe:bd:1a:
86:5b:c0:74:e3:13:04:18:5d:a9:6a:e3:fd:47:cc:27:dc:3c:
a1:81:81:c1:21:66:86:af:90:db:27:66:75:08:30:25:41:21:
a0:4c:ff:20:1a:73:b3:bc:da:75:0b:d9:66:78:52:e8:fc:2d:
b8:03:39:c4:16:8c:ed:5f:e5:a0:48:23:0b:30:6d:df:16:20:
cb:0e:d7:03:b3:82:21:2a:7d:cb:ba:0e:1b:ad:e6:4b:9a:17:
de:03:db:c7:8f:2c:de:f0:7b:2f:24:7b:6a:c1:88:d9:7e:e6:
ed:2e:5e:90:6a:e1:29:12:11:a1:c6:22:24:22:bc:9d:fc:23:
0c:1a:1a:21:17:f7:4a:d1:15:12:21:5c:f1:17:fb:4b:1e:4a:
70:ca:63:c0:30:95:a9:3d:d4:83:68:22:8e:4a:b1:37:42:ed:
9e:47:9c:64:38:66:da:93:bf:6c:98:11:20:da:46:c4:d0:88:
fe:c3:3d:90:f9:27:c7:58:20:57:e2:55:e1:b7:07:bc:1c:76:
ce:61:f2:ce:84:a5:11:21:08:c1:5d:22:43:98:7e:bf:0a:95:
6c:e4:6c:aa:ae:d8:b7:6e:87:44:82:22:40:f1:60:41:a0:47:
c4:c9:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:18:03 2025 by rpki-client