Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RKoq103MPaAgb9rNnH1n8VvR4JI.roa
File: RKoq103MPaAgb9rNnH1n8VvR4JI.roa (raw, json)
Hash identifier: cznoqyBf/uxuxuA1jD1YjzIMF9z9mhsSHDMFlIwuzDY=
Subject key identifier: 44:AA:2A:D7:4D:CC:3D:A0:20:6F:DA:CD:9C:7D:67:F1:5B:D1:E0:92
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B85DB92F92BECF36A7A80DB11E1487C24
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RKoq103MPaAgb9rNnH1n8VvR4JI.roa
Signing time: Tue 31 Oct 2023 13:10:41 +0000
ROA not before: Tue 31 Oct 2023 13:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:85d5:c330/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:db:92:f9:2b:ec:f3:6a:7a:80:db:11:e1:48:7c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 13:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44aa2ad74dcc3da0206fdacd9c7d67f15bd1e092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:5e:56:b2:2a:7e:52:7f:b7:7b:33:97:3d:
b9:00:52:c1:db:33:12:94:68:1c:5b:31:fa:e3:36:
00:e5:4c:dc:79:0a:f5:5c:06:3d:44:49:48:21:0c:
f1:60:e4:e2:5e:bf:cf:18:6b:b8:7a:c5:88:41:49:
c6:bf:6e:94:40:73:a4:be:97:cb:a0:aa:2b:2c:69:
09:bf:f2:d9:82:d9:e8:76:c0:8f:93:52:54:87:42:
b8:83:ec:bd:bd:9c:2a:51:de:7a:8d:ab:81:de:45:
23:5b:8c:9e:8a:a7:b5:cb:79:7c:ed:be:ea:8b:f8:
eb:53:e2:ff:7c:94:10:06:db:5a:ef:68:16:3b:41:
e0:a8:44:54:89:bc:7d:77:ae:1d:b2:2c:b3:95:10:
f1:a3:49:48:db:2a:a8:45:80:30:ec:d5:0a:03:54:
dd:1c:aa:02:45:aa:eb:1c:19:53:40:ad:15:83:02:
3f:05:24:ed:1b:ec:4d:92:95:40:31:f3:e6:7e:e6:
d7:a5:49:40:b2:6b:7e:8d:54:63:38:3f:2a:42:09:
be:08:e6:56:c1:84:4e:29:3f:d1:13:ef:22:e9:8d:
2a:91:d2:b3:f1:3a:83:47:e2:53:5b:18:84:fe:46:
70:92:34:76:c3:29:7f:65:37:1b:80:46:11:43:d9:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:2A:D7:4D:CC:3D:A0:20:6F:DA:CD:9C:7D:67:F1:5B:D1:E0:92
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RKoq103MPaAgb9rNnH1n8VvR4JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ce:05:53:f6:02:5d:63:42:37:c9:f7:de:70:a6:01:29:1d:3f:
03:09:ac:6c:cc:b4:08:b0:9f:72:d9:23:a8:2c:2a:37:b0:8d:
01:80:59:84:dc:02:ee:d8:6c:2b:d6:d0:0f:b8:05:4a:c3:4c:
68:50:88:0b:76:71:86:8b:e5:09:d8:2e:ff:a3:39:51:06:9c:
a7:30:a1:24:59:f4:df:f2:f0:1f:b3:1f:35:45:ce:2c:b7:81:
fc:86:38:1c:61:c2:10:7b:2c:1e:ec:e5:d1:12:34:17:aa:72:
65:1b:e5:5f:b8:3d:f0:94:6a:d6:59:24:82:22:7e:fb:ed:25:
bf:fe:fb:e4:00:90:3a:17:87:10:d9:de:9c:ad:17:54:b9:92:
5f:d9:8a:a7:d2:8f:b5:ec:a2:99:4d:83:61:20:20:6e:84:f6:
8c:e5:fe:bf:ba:21:63:a7:4a:97:3e:55:eb:ba:64:de:58:a7:
41:7a:68:63:de:06:21:d8:40:33:23:2e:86:d5:c8:d4:77:20:
85:e2:2e:28:1b:80:24:35:f6:18:7d:2f:7d:f9:08:7b:4d:8d:
e9:4c:39:ba:e6:b6:34:03:18:bf:d0:d6:f0:ab:8a:1d:06:1e:
58:4b:cf:2e:8e:f6:0e:35:50:b3:56:a3:b4:f4:60:d2:c2:a5:
7e:31:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:13:34 2025 by rpki-client