Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RUQq1k9zlgp7DATtbsht61Tdk_Y.roa
File: RUQq1k9zlgp7DATtbsht61Tdk_Y.roa (raw, json)
Hash identifier: 2pJRlocJ81eHKl5vh0rN8HhtltwtH+Qp7aHiPY9livs=
Subject key identifier: 45:44:2A:D6:4F:73:96:0A:7B:0C:04:ED:6E:C8:6D:EB:54:DD:93:F6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9AE9CF6E954683C477E956B85866BC1C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RUQq1k9zlgp7DATtbsht61Tdk_Y.roa
Signing time: Sat 04 Nov 2023 15:18:16 +0000
ROA not before: Sat 04 Nov 2023 15:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9a:e9:cf:6e:95:46:83:c4:77:e9:56:b8:58:66:bc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 15:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45442ad64f73960a7b0c04ed6ec86deb54dd93f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:df:76:c1:80:ac:8a:e5:a3:4c:bb:a5:ba:
99:8d:e8:2f:f1:0a:5c:fc:23:5c:1c:cf:63:d8:5a:
49:72:f6:da:c7:0d:77:9b:64:34:f9:eb:26:df:ec:
79:a8:15:d5:b3:57:b8:a1:19:bb:b3:b1:ee:0c:a0:
87:a7:f8:d8:10:10:e9:a9:f4:b7:8b:4f:86:78:82:
62:f8:c9:88:56:86:2e:bd:83:6a:96:0c:5c:5c:1f:
84:e4:7e:5e:f6:54:ed:55:3b:6b:9d:d7:6c:7a:19:
de:36:33:a8:f9:61:54:90:f6:38:d4:0a:b4:c2:d4:
eb:37:88:67:30:0a:fa:7d:d0:0b:74:df:b5:55:a8:
66:71:a5:25:4b:a7:73:bf:8f:45:b1:13:82:95:0a:
bf:19:c7:f8:8b:a3:8b:f0:d3:4f:07:3d:91:94:e7:
4c:4b:b6:64:7c:88:70:46:85:cd:ea:54:27:c3:18:
6d:5b:c8:29:e2:ca:a5:cc:d4:9b:56:a5:22:11:10:
11:8e:78:b8:a8:31:fd:e5:06:6b:16:22:51:52:97:
b6:9b:d9:32:9c:c9:b4:51:23:cd:a4:2b:ce:31:59:
cc:a1:ab:52:28:08:ff:9e:0f:81:f5:1f:20:b3:f9:
72:ec:db:08:b8:0d:27:7a:c7:0f:0e:39:22:e7:64:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:2A:D6:4F:73:96:0A:7B:0C:04:ED:6E:C8:6D:EB:54:DD:93:F6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RUQq1k9zlgp7DATtbsht61Tdk_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:38:ce:2c:6d:38:72:02:81:01:a4:15:7d:9b:ca:8b:06:40:
ab:c4:8f:11:e2:17:dc:de:4a:e3:8f:4a:8f:de:35:51:3a:bc:
c9:0f:45:56:9e:73:d5:90:73:1d:32:7f:ac:9e:54:2d:8d:dc:
ac:4e:dd:0a:8f:95:eb:59:df:d7:db:eb:ff:0f:ba:93:70:87:
7d:4b:6f:16:56:85:84:fe:e0:fd:9e:0f:7f:d6:33:a3:ab:e2:
6a:b0:ef:32:38:69:56:21:0a:a3:f9:39:70:25:81:8e:16:15:
c1:0c:21:df:14:a2:79:b8:90:75:18:dc:88:f9:46:db:25:18:
2b:19:5c:37:b0:df:87:8a:e0:63:5b:5f:e4:10:5e:40:a5:8c:
00:9c:d3:0e:4d:84:f9:d2:b7:e5:6d:9a:61:f4:c5:bd:b8:a4:
6c:b4:79:0e:83:92:b2:58:53:c8:01:ed:aa:db:a5:5a:c0:30:
d8:90:8c:6c:41:bf:69:20:ee:82:95:da:92:31:f0:be:b2:ba:
7e:44:db:17:1f:79:74:8c:48:dc:11:33:ec:98:bb:63:2e:09:
55:d5:b3:96:e1:be:28:66:bf:7a:64:2c:4c:52:ef:1b:60:d4:
c0:3f:88:18:99:cf:9c:8b:5f:7d:e9:fe:88:d7:af:e9:44:21:
73:f7:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:25:21 2025 by rpki-client