Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RPp46XXyZl1WPD7CfK4jBha29zo.roa
File: RPp46XXyZl1WPD7CfK4jBha29zo.roa (raw, json)
Hash identifier: Y452OI6hrH3harFeeRShssglA9C67DBeaxJO3BfgHis=
Subject key identifier: 44:FA:78:E9:75:F2:66:5D:56:3C:3E:C2:7C:AE:23:06:16:B6:F7:3A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA1F73A7C620D3A119975759A7014FBBC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RPp46XXyZl1WPD7CfK4jBha29zo.roa
Signing time: Mon 06 Nov 2023 00:10:16 +0000
ROA not before: Mon 06 Nov 2023 00:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a1:f7:3a:7c:62:0d:3a:11:99:75:75:9a:70:14:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 00:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44fa78e975f2665d563c3ec27cae230616b6f73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:1f:6e:10:53:dd:b5:d6:6b:de:37:ab:f5:
19:84:38:cb:aa:0e:36:d5:82:4a:06:7a:1a:c4:01:
75:17:ca:47:8d:6e:70:3f:17:33:a7:b2:65:d3:43:
cb:1c:76:50:a3:0c:75:9f:27:7c:78:1b:04:38:c6:
70:3b:a9:b4:05:36:17:de:66:5f:76:e9:1b:8d:30:
ce:ec:03:a3:49:03:33:f2:70:96:b2:80:f7:62:cf:
e9:0f:95:a4:85:d5:b7:79:f6:07:ca:80:5a:fb:7a:
0f:a5:85:8a:53:69:bb:9b:d9:0f:87:2f:7a:e2:d5:
79:c7:4b:a9:2e:fe:8b:f1:a1:f8:74:73:d1:4d:41:
bd:07:59:c3:96:b4:b0:fc:95:d1:ee:6f:45:db:c1:
04:22:48:be:e4:e6:dc:aa:2b:78:4b:1f:19:ce:50:
ae:58:04:65:d3:c7:f4:3e:bc:5d:4a:5d:80:de:e2:
f5:44:e7:9e:62:7f:b2:56:1e:48:6d:1b:c0:5a:25:
72:2e:b0:c7:8a:fd:03:a6:5c:1f:7d:b2:97:03:3c:
d3:2b:c0:46:99:9b:8c:74:12:ce:80:2b:11:e2:de:
d0:e1:74:6f:eb:b1:3a:4a:76:14:9a:fd:a9:4d:8f:
ab:70:b1:e6:1e:70:56:71:2f:71:75:f8:96:45:64:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FA:78:E9:75:F2:66:5D:56:3C:3E:C2:7C:AE:23:06:16:B6:F7:3A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RPp46XXyZl1WPD7CfK4jBha29zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:f0:b0:05:b6:b0:94:bf:fa:98:bd:4c:1e:8c:46:d6:19:29:
ba:79:97:f7:ca:34:24:1c:75:d5:56:3b:e6:36:aa:00:1b:3b:
6a:70:29:40:68:66:5d:24:73:50:a1:f9:b9:d2:70:d3:1a:33:
33:06:de:2a:f2:6c:26:16:2f:5a:33:e3:7d:2e:bc:d6:34:62:
81:84:04:6b:02:4c:02:65:7b:be:42:96:ba:c7:f2:de:d0:07:
70:ed:df:f2:b4:32:64:66:a5:31:37:5e:e2:a2:34:87:aa:80:
7c:25:00:0a:cf:aa:88:e9:5e:fc:79:a4:b6:54:65:ad:6f:17:
36:5d:fb:08:36:ce:54:ca:89:d2:ea:3e:89:07:41:d8:c5:63:
e2:4d:d3:75:67:d7:d6:8f:80:72:ba:25:e6:b1:45:f6:df:fc:
49:7c:ad:63:67:58:84:fe:1c:5e:ed:d8:29:cd:01:d5:76:dc:
fa:69:f0:ae:6b:f6:34:37:52:67:81:87:b6:2a:b7:b2:db:74:
05:ec:cc:d2:b1:0d:86:78:8b:e3:16:62:ea:34:61:4e:d9:c3:
6a:9d:35:69:69:c6:44:e5:22:d7:b6:47:16:8c:3c:b0:6c:09:
57:5e:98:61:23:c4:09:92:b4:b6:b9:00:b8:09:6a:3f:bf:ce:
65:23:2b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:39 2025 by rpki-client