Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Kyu0wt4t718Zqu62nb9TSC8N59c.roa
File: Kyu0wt4t718Zqu62nb9TSC8N59c.roa (raw, json)
Hash identifier: W9uBpM96Lakpq9/JNf43o++NjxC80f15YOdMHUWcBbQ=
Subject key identifier: 2B:2B:B4:C2:DE:2D:EF:5F:19:AA:EE:B6:9D:BF:53:48:2F:0D:E7:D7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA9EB6496469DF376351358DD54AFAD2B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Kyu0wt4t718Zqu62nb9TSC8N59c.roa
Signing time: Tue 07 Nov 2023 13:14:17 +0000
ROA not before: Tue 07 Nov 2023 13:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:eb:64:96:46:9d:f3:76:35:13:58:dd:54:af:ad:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 13:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b2bb4c2de2def5f19aaeeb69dbf53482f0de7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:17:43:95:f1:b2:38:29:92:cb:4c:ee:d2:
0a:62:34:63:4d:c4:7e:1b:46:3e:33:de:d1:ee:ab:
8f:1f:20:f4:03:49:87:cb:73:30:55:c3:12:fc:ba:
d6:f9:75:0e:b7:6d:8c:f2:e1:bf:15:c4:cf:bf:33:
7a:c3:ab:5a:6b:28:75:09:77:3d:b9:01:8e:36:1e:
61:67:57:b2:d7:da:ae:78:50:17:a2:80:bc:ee:03:
55:59:a1:ed:f6:5e:82:84:56:91:78:7c:17:b7:42:
33:c3:d2:f9:88:e6:ae:bc:c2:5e:33:f5:25:a6:65:
d3:da:a5:8c:1a:b5:ae:5e:87:4b:6f:c8:bd:18:7a:
0f:4c:c8:d6:9a:e1:c0:70:01:9c:ca:74:36:f9:1b:
b5:25:ab:48:b1:11:4b:be:5d:25:ae:5a:04:f6:f6:
9f:a1:15:bc:cb:18:82:75:c3:45:76:b4:c7:cb:0c:
5b:01:4c:97:f6:27:ae:f6:e2:7e:4b:17:29:89:ee:
3b:c1:a9:1b:d4:98:d5:9e:5f:c7:88:e8:1f:c8:8c:
ce:c1:7c:5d:76:f3:01:2e:87:ef:95:43:e2:8c:e5:
f1:1a:ed:7c:6b:60:a0:ff:86:2f:1a:e6:ad:c5:c7:
d4:58:bb:69:28:d4:88:bd:38:86:20:73:99:27:17:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:B4:C2:DE:2D:EF:5F:19:AA:EE:B6:9D:BF:53:48:2F:0D:E7:D7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Kyu0wt4t718Zqu62nb9TSC8N59c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:9d:9e:bb:96:12:3f:92:cd:2b:57:f6:65:60:85:df:94:e0:
01:9f:08:72:6b:c2:39:d3:33:62:ac:0a:1a:f0:1b:37:dd:8b:
b3:e0:50:24:b9:6e:c3:b8:32:5a:03:72:76:0d:d8:82:96:a7:
ed:5c:d3:c5:0a:d6:74:49:43:d5:e7:7c:fb:cf:4f:aa:08:f3:
af:f4:30:9e:e5:39:50:9b:e7:65:2c:2a:80:3c:85:95:cb:3c:
10:e6:15:c7:c0:59:5d:4f:2e:55:d1:ba:da:ec:3a:27:a5:77:
7e:2c:45:37:25:01:df:d7:7d:22:4a:86:08:22:29:b1:bc:a5:
cc:78:25:33:c2:fd:70:7c:42:bd:ce:c3:a6:13:57:af:f3:86:
40:fd:4d:85:0b:a2:6c:d4:33:02:b2:be:18:6e:1e:f7:18:b8:
c4:d0:83:b9:b9:fe:38:8b:99:76:e4:b5:a4:14:32:ed:99:aa:
5c:29:57:c1:65:40:88:f7:28:5c:98:a8:71:a8:82:22:7d:23:
a3:67:1a:3e:c0:fb:fd:38:17:fb:e6:d7:10:ab:79:9c:3e:94:
e8:13:05:1f:a9:7d:34:c7:13:e8:c8:87:1b:45:b0:c3:14:c8:
c7:73:1e:70:c8:53:6c:90:c2:73:e0:c1:37:ec:da:30:52:69:
ad:c7:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:21:34 2025 by rpki-client