Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RGNYhrq9cLfcgyp4XYIgesuKlB8.roa
File: RGNYhrq9cLfcgyp4XYIgesuKlB8.roa (raw, json)
Hash identifier: HYv0G8dyvjeiIOXv8DkNNF/CLZn3DcurwLUKersYDTY=
Subject key identifier: 44:63:58:86:BA:BD:70:B7:DC:83:2A:78:5D:82:20:7A:CB:8A:94:1F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFEE28B2DA7E05A123AEA50DAF4A2BDD7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RGNYhrq9cLfcgyp4XYIgesuKlB8.roa
Signing time: Fri 24 Nov 2023 01:12:21 +0000
ROA not before: Fri 24 Nov 2023 01:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:e2:8b:2d:a7:e0:5a:12:3a:ea:50:da:f4:a2:bd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 01:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44635886babd70b7dc832a785d82207acb8a941f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:c7:c3:8d:df:7a:69:41:3e:d9:02:0a:d2:
bd:11:65:cb:81:bf:24:d0:55:02:7c:e1:09:9b:e4:
2f:0b:b2:af:95:67:87:87:2f:48:55:28:35:7c:72:
fa:2a:38:cc:ab:fa:23:7a:77:fc:a8:94:be:d7:bb:
7a:f7:36:66:28:9b:b8:6e:ea:06:03:9b:0c:4c:2b:
1a:53:b1:1d:22:59:61:83:5b:0a:2e:47:9c:c0:15:
c1:e0:bf:59:68:76:0a:91:38:34:77:1b:cf:05:48:
ad:72:73:a2:f7:21:d0:3f:90:a5:06:5c:9d:2b:19:
4c:fc:11:90:b6:8b:ae:0a:b9:19:04:e3:30:ae:30:
cd:86:9b:46:89:39:48:7e:4c:1f:ee:e8:be:f0:42:
92:5c:bf:e8:72:51:d7:61:4c:eb:d5:79:5e:60:d0:
e1:e8:66:06:1b:e7:8d:81:dc:86:74:f6:5d:09:98:
10:35:ae:68:c0:99:43:d2:4c:8b:ee:f6:cf:a9:6a:
25:07:2a:30:e2:02:2e:92:0c:81:e5:00:0e:97:0d:
15:8d:3b:59:6e:94:d0:ed:94:ac:80:04:7b:bc:72:
b6:46:93:6c:0f:6f:58:50:c6:9e:87:61:14:71:fc:
f5:2a:0f:15:93:bd:17:3c:eb:ed:58:52:02:35:39:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:63:58:86:BA:BD:70:B7:DC:83:2A:78:5D:82:20:7A:CB:8A:94:1F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RGNYhrq9cLfcgyp4XYIgesuKlB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:d2:2e:d8:25:31:67:02:93:d9:b3:c9:67:03:ca:d5:ff:44:
59:15:db:b0:ae:22:0d:18:b9:f8:f3:3d:ca:4d:01:e9:10:a4:
8d:b3:29:41:21:bc:e7:b2:73:90:ff:e1:2c:87:50:2f:70:f8:
f8:c0:0f:7a:64:f8:5a:d6:9a:14:15:3e:0d:5a:67:2b:2e:e6:
69:f3:d1:73:dd:0b:99:55:2a:8a:d1:69:a7:c9:fa:52:45:7b:
74:33:d9:71:c2:2d:f3:76:bc:c8:0f:01:0e:c3:53:8c:98:66:
d9:38:06:f3:7c:e4:ab:73:8a:9e:25:97:24:18:98:07:41:03:
84:6d:96:60:e5:2f:a4:1a:aa:20:56:e9:3c:ec:1d:78:5f:b5:
6b:74:51:d8:7e:8d:58:aa:c9:b2:80:f9:57:22:12:84:03:35:
31:9c:99:69:0f:aa:72:4f:33:c0:35:ab:ac:a8:b9:67:f9:f7:
6d:b5:9f:d3:5f:9f:4f:1f:63:e0:60:25:2f:7c:ea:e5:46:97:
07:66:41:f8:81:2f:c8:3c:45:a1:7e:46:f3:55:1f:e8:83:60:
ef:c4:2c:f5:17:f0:f2:71:df:13:31:17:f0:03:af:18:79:b5:
45:78:9d:0b:e4:0a:23:37:50:94:af:4d:49:2a:2e:c7:bb:00:
db:b6:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:17 2025 by rpki-client