Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R694URKziM2qEaVRUay-6UriyEI.roa
File: R694URKziM2qEaVRUay-6UriyEI.roa (raw, json)
Hash identifier: 9bxUDbn62zr7/Gc9/ide45spHRyfO5/aRNJ7TryEGOI=
Subject key identifier: 47:AF:78:51:12:B3:88:CD:AA:11:A5:51:51:AC:BE:E9:4A:E2:C8:42
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C25F2D98AE5C7D80C1D384DB045054BA7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R694URKziM2qEaVRUay-6UriyEI.roa
Signing time: Fri 01 Dec 2023 15:15:21 +0000
ROA not before: Fri 01 Dec 2023 15:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:f2:d9:8a:e5:c7:d8:0c:1d:38:4d:b0:45:05:4b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 15:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47af785112b388cdaa11a55151acbee94ae2c842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:0b:b7:e0:75:62:ab:47:9a:1d:28:5c:92:
36:89:70:56:81:db:32:e6:91:72:62:c2:8d:d1:7f:
6f:6e:76:33:9b:38:fa:82:1c:80:9c:5f:8c:00:89:
41:e2:0c:f7:dc:28:1f:dd:d7:86:ba:f3:0a:7a:1c:
56:aa:89:24:8c:ff:a0:34:fe:3a:8a:9d:a8:ad:40:
43:ca:77:c4:d0:ac:96:96:24:06:34:8b:9e:1f:6f:
d8:7e:93:e3:38:20:a5:ab:c6:2c:39:d9:77:cd:bb:
c7:9c:93:4b:f6:30:65:8f:6d:b4:63:e6:4a:9e:a4:
8b:50:99:8e:15:9f:f2:d4:6a:71:ba:eb:74:57:c1:
cb:6b:6a:5b:d9:df:1c:55:4c:e1:77:2a:59:ce:27:
55:82:a4:40:e8:1a:ba:6e:ec:3e:c0:8f:84:ad:0a:
ab:f8:0f:4e:2d:e1:75:a6:c2:1c:7c:c5:44:e4:0f:
36:11:39:28:0b:48:bd:6c:28:d5:d4:bb:0f:93:f0:
0e:1a:1e:1b:74:0e:67:0b:e2:d5:de:72:f6:9e:1b:
ff:3c:6c:41:6e:e6:eb:88:2b:58:d8:b9:bd:dc:15:
00:af:fe:d3:81:85:4e:4b:56:d2:df:4c:b2:77:fe:
70:88:22:0a:35:0d:24:db:9b:29:b2:34:a1:f4:ed:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AF:78:51:12:B3:88:CD:AA:11:A5:51:51:AC:BE:E9:4A:E2:C8:42
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R694URKziM2qEaVRUay-6UriyEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:16:42:0e:38:12:0e:7b:a0:c2:3a:3f:be:ab:e4:da:25:5c:
21:96:d2:f4:aa:e9:0c:f7:ee:c5:b1:ff:cc:eb:d3:ff:4e:79:
84:0c:c6:1e:d4:13:76:07:0c:50:0d:1d:f8:82:67:a1:b2:c4:
2b:19:49:30:80:23:1f:55:57:cf:a1:c5:85:23:9e:de:bf:a6:
2d:01:14:4a:2b:bf:75:bb:ff:a2:db:15:f9:8a:3e:ea:66:75:
df:fb:f2:79:43:30:03:eb:ab:17:54:b0:d3:18:ea:2f:f5:06:
b3:8f:a2:52:fb:74:ac:28:56:c1:d3:12:8d:4b:19:a1:0e:69:
b9:79:92:31:76:4b:1f:05:07:35:5b:93:c3:30:66:32:48:10:
ab:8c:03:18:fe:d1:a5:d2:ee:4a:1c:62:2e:36:0f:9a:33:a2:
eb:a7:fa:f4:e9:cc:df:c9:58:f5:05:57:eb:bb:62:53:ab:6d:
46:f7:44:d3:71:a3:85:6a:30:24:85:da:98:68:e4:6b:29:e7:
73:a6:25:21:49:fd:ee:bd:be:42:78:a0:60:70:fd:5d:be:63:
da:6e:4f:77:3a:02:c3:b2:ed:84:b7:76:b8:8d:6c:38:3d:71:
c9:07:af:24:e1:e8:23:96:c1:0b:3a:31:8d:9a:7d:59:ab:92:
eb:30:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:59:49 2025 by rpki-client