Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M526WQIQ_V6KBdVnMjniYiw8gGQ.roa
File: M526WQIQ_V6KBdVnMjniYiw8gGQ.roa (raw, json)
Hash identifier: e/0YWg0bLjSGwRZmVeCsU7cYA77dmvgZ9CMwEFLW11E=
Subject key identifier: 33:9D:BA:59:02:10:FD:5E:8A:05:D5:67:32:39:E2:62:2C:3C:80:64
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C235EC2409B1B18510ECD2F4106D3062F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M526WQIQ_V6KBdVnMjniYiw8gGQ.roa
Signing time: Fri 01 Dec 2023 03:14:21 +0000
ROA not before: Fri 01 Dec 2023 03:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:23:5e:c2:40:9b:1b:18:51:0e:cd:2f:41:06:d3:06:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 03:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=339dba590210fd5e8a05d5673239e2622c3c8064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:dc:83:f4:74:3a:5d:11:1c:1d:55:bd:fd:
ac:8e:d7:a2:f6:67:ea:0c:99:99:72:c5:66:88:62:
d0:01:c5:2a:64:db:5f:8b:8c:8a:4b:5a:c5:b9:7d:
51:70:1d:f6:ad:4c:4e:a3:98:69:9d:0c:b5:9d:77:
c5:5a:03:28:0d:64:7a:4e:55:d9:52:7d:27:1a:57:
d6:2f:2b:03:99:ed:10:6f:4b:54:4e:c7:90:64:89:
99:33:e8:e2:37:d7:77:2b:25:41:6d:bd:1e:de:f3:
1e:7f:51:12:c3:1b:3f:7a:14:96:f1:02:93:b5:43:
f8:5b:1d:18:b6:a6:97:ae:92:87:32:c7:ce:71:bb:
fd:2e:ca:04:65:80:c3:fa:cc:05:1b:c4:55:5c:bc:
70:0c:05:99:ea:12:3a:ea:06:d1:f0:49:c6:56:a8:
9a:d1:f0:f4:5b:d5:59:62:4f:69:35:6c:c9:9a:08:
02:28:75:cd:3e:dc:97:3c:d9:d3:68:3c:6e:d6:aa:
42:a2:be:18:1e:fc:23:e8:91:e6:9b:45:88:cd:b2:
83:0d:19:f3:8c:40:c6:04:eb:4f:20:c2:dd:7e:71:
3b:36:7a:dd:84:c1:aa:c1:5e:06:dd:22:00:4a:e2:
7e:c1:c7:77:5d:89:ec:4a:f5:e2:fb:0d:5c:6d:24:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9D:BA:59:02:10:FD:5E:8A:05:D5:67:32:39:E2:62:2C:3C:80:64
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M526WQIQ_V6KBdVnMjniYiw8gGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:8f:65:aa:81:de:be:c3:9c:6f:0f:33:4a:56:73:a6:2b:71:
9e:ac:1c:40:e5:8c:c9:cf:e3:4d:12:6b:5a:f4:28:34:2e:a6:
07:1e:17:d3:d2:5f:88:33:bb:01:c1:24:25:39:60:39:e2:dd:
85:8a:01:57:12:36:08:ea:10:0f:72:35:26:37:f6:49:af:8b:
27:7b:ff:8f:91:2c:44:29:e5:b4:dd:79:a7:cc:97:78:dc:08:
97:2f:f3:3e:0d:7d:a0:e3:5a:a3:84:f5:15:f9:35:68:fb:6d:
ba:e6:2c:cf:97:7a:71:ab:2d:08:52:68:0b:9d:73:ba:8f:5e:
b7:a7:5c:cb:b7:e2:b6:e0:01:c9:16:95:55:90:79:4a:c1:d0:
66:17:f9:59:04:15:2b:a5:97:d9:7c:e3:80:43:1a:d0:8e:2a:
4e:a9:24:55:77:90:07:0d:69:68:59:37:ba:0e:ba:eb:c1:5c:
87:03:a3:56:8d:bd:3f:87:0e:af:8b:5c:fa:67:52:e4:d1:03:
2e:f2:4f:f4:fc:aa:d3:91:da:22:75:11:43:dd:04:29:0e:48:
53:e6:e5:5a:3e:22:b0:75:4b:c5:22:45:75:24:98:82:cf:cc:
11:e4:76:f5:df:a7:68:a0:f8:69:ed:8a:63:01:59:4d:96:96:
53:16:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:47:09 2025 by rpki-client