Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RRLf0n0LN7jDTl3xdQzyHPFZI9g.roa
File: RRLf0n0LN7jDTl3xdQzyHPFZI9g.roa (raw, json)
Hash identifier: rKqA/rn4u+2nzpVXV6qxuMsmSgsSRLiYCO2Jki9o5d8=
Subject key identifier: 45:12:DF:D2:7D:0B:37:B8:C3:4E:5D:F1:75:0C:F2:1C:F1:59:23:D8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF1CEBA61D08A430A88260B43273F89AD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RRLf0n0LN7jDTl3xdQzyHPFZI9g.roa
Signing time: Mon 02 Oct 2023 19:12:51 +0000
ROA not before: Mon 02 Oct 2023 19:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:ce:ba:61:d0:8a:43:0a:88:26:0b:43:27:3f:89:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 19:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4512dfd27d0b37b8c34e5df1750cf21cf15923d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:b0:4f:18:86:65:17:54:fd:d7:12:96:a7:
ba:90:51:0f:6b:ac:d1:24:9f:4b:53:cd:c7:c5:33:
c8:62:33:fc:a3:58:3a:e2:ef:27:4b:3b:f8:c4:27:
03:cd:b4:d7:b9:92:e8:db:17:f3:47:e3:7f:81:36:
e9:b5:5a:54:e8:e5:d6:38:dc:ea:6f:3d:1e:46:ab:
99:38:b4:cb:a5:8b:76:63:b8:79:ce:a7:1e:c5:f2:
ed:d6:e0:72:85:87:1f:f9:ee:a4:2f:ac:43:a7:10:
89:e5:26:61:21:7d:dc:f5:a8:ca:4c:39:45:92:e5:
a9:5f:e6:1b:5c:de:07:86:38:ed:e1:c4:7c:cb:d4:
98:88:1c:bd:d6:95:a8:f2:ca:75:43:c3:0f:ee:32:
1c:0e:e8:f9:e6:e1:3a:be:2e:c5:45:58:42:16:1e:
5e:d6:aa:08:e6:30:20:f9:bd:c8:39:3e:9a:84:cb:
3d:6b:0b:72:13:32:d3:29:24:5b:d6:e6:99:a3:1a:
ea:8a:9e:ba:f1:e5:40:43:a9:95:98:f7:90:5a:21:
82:92:16:bb:18:92:9d:cc:2a:22:dc:56:78:a8:44:
2a:24:cb:a3:f9:5d:27:95:f1:af:b0:86:58:dd:94:
3a:9d:99:5d:5b:98:5a:be:8d:21:73:72:fc:eb:cd:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:12:DF:D2:7D:0B:37:B8:C3:4E:5D:F1:75:0C:F2:1C:F1:59:23:D8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RRLf0n0LN7jDTl3xdQzyHPFZI9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:16:3f:8c:8d:f7:8a:22:43:76:ba:17:c1:0a:45:ac:98:2a:
e1:85:0a:dd:ba:ef:54:6d:7c:dd:86:41:c6:e6:6f:eb:8a:fa:
9d:c6:76:3d:c5:fb:2d:87:e1:8f:fb:82:a6:87:a1:6a:37:c1:
06:dc:2e:23:b5:3d:7e:5a:ed:58:b9:eb:64:06:84:11:93:24:
d6:55:e5:15:2e:aa:ab:cd:d2:65:74:c3:7f:0c:a3:fb:4b:92:
d8:2f:a0:73:2c:c5:a7:0f:10:1c:48:cb:00:55:ec:bd:2c:e5:
29:11:e5:fc:21:77:0a:09:a4:75:12:71:35:e8:8c:93:29:22:
50:81:e2:dd:f6:08:b3:b5:fd:86:15:72:01:f7:9f:23:44:bf:
70:34:7f:88:8a:cc:84:f4:a7:a8:18:09:7a:db:f4:5e:48:84:
7e:64:63:07:f5:7e:bf:96:46:51:6f:c1:df:dd:2c:34:b0:8c:
a4:e7:37:18:eb:4d:f4:69:f4:ee:ea:de:08:c9:c4:7f:17:33:
a9:8a:f5:3e:2d:77:9a:f3:8f:8b:c8:f3:93:73:58:5f:c0:ac:
46:d1:78:b7:b9:d1:cf:b4:b1:a5:c1:0e:a1:96:46:2a:92:df:
47:6a:93:f9:9d:6d:06:c7:c3:49:d1:a7:f9:25:ac:a5:5a:b3:
d8:5b:99:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:33 2025 by rpki-client