Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L60TKBz1CRMfRCZEh41YgOk4yF8.roa
File: L60TKBz1CRMfRCZEh41YgOk4yF8.roa (raw, json)
Hash identifier: aOOHY2nDLTHN9hO2vZx4u2uVUqeBMdD2+UD+nSpfLo8=
Subject key identifier: 2F:AD:13:28:1C:F5:09:13:1F:44:26:44:87:8D:58:80:E9:38:C8:5F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C57F14C966E995E8DFB0F7CA049A99A4B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L60TKBz1CRMfRCZEh41YgOk4yF8.roa
Signing time: Mon 11 Dec 2023 08:14:40 +0000
ROA not before: Mon 11 Dec 2023 08:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:f1:4c:96:6e:99:5e:8d:fb:0f:7c:a0:49:a9:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 08:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fad13281cf509131f442644878d5880e938c85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:13:eb:32:11:47:98:53:83:ff:0e:52:6a:
f4:42:94:b8:17:6e:ff:53:19:97:4a:02:85:91:d4:
b1:48:f0:75:16:64:ac:e3:e5:c0:b9:20:6d:26:40:
8b:83:ed:47:f6:74:85:be:c5:18:38:47:1d:01:3e:
84:90:ed:a4:0c:75:32:56:34:4e:c4:4f:8a:73:69:
7c:fe:da:ca:42:c9:92:ad:b2:0c:6c:b1:9d:33:9f:
cc:91:4b:de:7d:0c:b6:64:cc:79:26:d1:2e:6d:20:
c4:2c:1e:1d:53:be:f9:3f:77:8c:6d:4d:be:50:91:
ef:0f:41:23:59:5d:b0:a1:7b:a2:60:ee:a1:60:6f:
c6:63:c6:88:96:9f:6b:a9:ed:f6:b9:60:27:92:c7:
d9:a8:72:57:5f:34:35:e8:6f:04:68:e3:4d:5a:e7:
48:06:fa:06:c0:b6:43:59:ff:51:a1:7b:1c:3c:83:
86:d3:01:dd:46:2e:ac:b5:ee:87:15:e2:21:2f:1c:
f2:c0:36:bd:e6:88:e0:a5:a8:e3:15:0c:03:71:42:
ea:42:42:41:07:a4:a8:38:4f:1e:bf:06:29:a4:22:
ba:47:3f:2e:0f:14:3f:88:f1:6a:91:08:41:4c:d9:
de:f7:2d:2d:37:55:4a:3a:d2:47:f2:cf:0c:de:a6:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:13:28:1C:F5:09:13:1F:44:26:44:87:8D:58:80:E9:38:C8:5F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/L60TKBz1CRMfRCZEh41YgOk4yF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:17:4e:30:58:12:7f:d0:f7:fd:39:34:ff:9e:65:ef:6c:12:
25:f7:50:c2:aa:dd:a5:41:5b:02:ed:a2:12:57:a4:e4:51:96:
12:bd:8f:e5:1b:ff:d3:02:62:7c:dd:b2:27:ed:9a:60:58:d3:
c1:e3:55:dc:83:0f:fe:d6:35:32:4b:13:c7:fb:9b:c9:ae:6b:
fc:ef:f2:d4:0e:5e:2d:c2:a3:d7:0d:eb:4a:17:dc:01:ff:ae:
8d:11:40:fe:7b:93:7f:d9:fb:03:45:ff:4f:e5:6a:20:96:02:
84:76:b1:0d:18:bf:e9:64:0b:8f:26:af:59:15:70:63:72:8f:
19:3a:63:a6:f2:b0:f3:3f:35:61:77:52:eb:7b:b4:e2:fd:c6:
5a:74:e2:c7:69:25:48:5a:13:33:e1:b1:d5:4d:f9:59:e9:1f:
1a:51:fd:5e:23:27:f0:cb:b4:98:f5:a8:51:a2:fb:b7:37:35:
ae:5a:e7:00:47:d8:77:6f:8a:5b:5a:0a:81:16:c0:76:83:86:
0e:d1:23:a7:b3:be:26:74:23:d3:d9:38:b2:b7:f2:22:1e:f3:
fc:d7:58:e9:16:f6:55:b6:37:63:47:09:46:c6:d5:22:db:91:
73:25:0c:93:01:6c:26:9d:10:60:18:3b:f9:ae:68:de:2e:64:
14:c3:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:51:02 2025 by rpki-client