Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MD57ir6JvIxndbk5EzP0RubolSg.roa
File: MD57ir6JvIxndbk5EzP0RubolSg.roa (raw, json)
Hash identifier: mG9q/Y6U/tB7ODC/f0Zx/xzXzp69a3KMnKmusPCG7K0=
Subject key identifier: 30:3E:7B:8A:BE:89:BC:8C:67:75:B9:39:13:33:F4:46:E6:E8:95:28
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9C64D7336692AA663B1BBD7B9A4C14FA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MD57ir6JvIxndbk5EzP0RubolSg.roa
Signing time: Sat 04 Nov 2023 22:12:16 +0000
ROA not before: Sat 04 Nov 2023 22:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9c:64:d7:33:66:92:aa:66:3b:1b:bd:7b:9a:4c:14:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 22:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=303e7b8abe89bc8c6775b9391333f446e6e89528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:31:d8:52:9c:16:4b:f6:06:ec:b9:27:2b:
de:73:31:4b:50:1d:28:59:4d:fd:d6:75:b6:b5:9a:
3e:f5:f4:2e:06:ab:82:ca:cc:63:ae:2f:15:10:87:
32:32:2f:10:59:72:6a:06:c5:a3:5f:d0:b2:e7:22:
5d:76:ca:54:13:3b:4d:74:27:a3:e9:0c:5f:d2:e8:
56:98:99:e1:12:ee:2a:7f:f3:c5:ca:92:74:95:29:
f4:fd:99:fa:b6:da:27:e2:1b:65:cd:2e:31:e5:34:
09:a9:3e:38:69:28:21:c7:7d:da:67:34:2b:87:47:
7e:14:47:d7:af:f9:1b:39:64:16:33:a0:e8:cd:fd:
03:2e:fb:42:c0:a3:6f:12:ff:2e:a4:21:89:90:3e:
5e:3d:a5:ce:ba:46:0d:f6:b9:85:ee:40:f7:58:f8:
0f:31:7c:56:9c:93:cb:e3:f4:8b:bc:80:51:b4:8e:
8e:a0:d6:bf:ef:8b:97:56:f1:be:1d:2e:1a:f1:50:
91:45:6c:56:08:86:00:e9:17:eb:2d:f8:12:61:e2:
d6:1b:24:2d:1b:50:a7:d5:a0:bf:a5:53:28:ba:6c:
3d:7f:67:ac:3d:a9:fc:d3:c5:6b:e0:24:bd:86:1a:
c7:e8:9c:f4:ba:2b:54:a8:24:c2:22:24:c2:8f:e6:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3E:7B:8A:BE:89:BC:8C:67:75:B9:39:13:33:F4:46:E6:E8:95:28
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MD57ir6JvIxndbk5EzP0RubolSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:06:ff:63:06:dd:58:27:ed:0b:dd:3b:4e:8b:4a:17:19:50:
d5:e7:b9:b5:9a:7b:2b:48:c8:01:6c:55:f0:af:47:86:55:50:
38:7c:ea:66:c5:fb:71:f6:f5:dc:8a:8b:25:21:77:d5:62:62:
67:49:71:34:79:e8:c5:a8:7d:48:2b:31:ac:05:49:72:10:d5:
91:5e:5b:74:5a:bf:61:24:f0:0e:7c:8e:09:bc:5e:22:2e:6e:
b7:8d:c7:3b:06:80:5f:45:12:ce:43:43:2b:20:08:b2:f7:1d:
ea:9f:ec:0f:b8:5b:80:3f:0a:f5:14:55:40:c8:14:cd:03:58:
19:27:83:a3:94:bc:84:28:16:97:e0:0c:5d:36:65:15:89:2b:
7d:f7:1b:70:b1:6c:75:4b:7a:81:1d:cc:98:29:43:42:de:33:
59:7d:ea:e0:42:1a:88:e4:1d:37:36:39:bc:6b:8f:6a:a1:59:
67:be:99:d9:1b:ee:7c:ae:a1:04:ce:20:3c:fa:1a:d9:df:43:
fc:81:7d:fd:68:01:bd:95:ef:f5:a2:62:52:30:56:78:38:73:
94:84:4b:b0:a7:39:c0:b7:a3:bf:02:07:ec:71:06:b7:73:ce:
81:0c:6b:52:41:3c:91:4b:17:fe:67:0e:1e:6a:06:4f:96:b5:
89:89:94:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:29 2025 by rpki-client