Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RbYgYNkWFpBxgccfDqh2bGL-tWc.roa
File: RbYgYNkWFpBxgccfDqh2bGL-tWc.roa (raw, json)
Hash identifier: QGyQDKNdTaXIx95qcQanFUIqod+wjcYAXVNCPYY4pM0=
Subject key identifier: 45:B6:20:60:D9:16:16:90:71:81:C7:1F:0E:A8:76:6C:62:FE:B5:67
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC2CC67C125DDEC11DBC845680864986B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RbYgYNkWFpBxgccfDqh2bGL-tWc.roa
Signing time: Sun 12 Nov 2023 09:10:57 +0000
ROA not before: Sun 12 Nov 2023 09:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c2:cc:67:c1:25:dd:ec:11:db:c8:45:68:08:64:98:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 09:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45b62060d91616907181c71f0ea8766c62feb567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:9b:f1:60:ec:99:b0:71:49:f8:af:98:46:
0b:1d:35:5a:23:0f:e0:5b:85:d1:5a:b0:fc:86:6d:
ed:a3:20:b2:73:3e:4d:f5:c2:1d:10:a8:27:fd:78:
bb:4d:55:95:e0:b3:2a:bd:7c:5b:f7:55:d9:d3:ef:
51:44:b6:7f:a9:10:b1:43:99:87:41:3c:f3:38:6e:
63:7c:09:90:7d:eb:90:88:0e:42:b9:39:aa:c4:d6:
84:86:26:fa:87:d6:08:96:16:d6:35:4d:2a:7b:1d:
bb:0c:9b:49:23:ab:ba:80:37:30:16:6f:9e:89:06:
5e:63:40:1f:49:cf:4d:fd:2e:3d:b9:be:f9:bd:32:
df:57:11:ee:df:34:a5:20:3a:b6:43:b8:8d:b8:1e:
0f:16:09:49:42:68:12:3f:ab:5f:1e:d4:c9:c4:1a:
78:6d:f2:b7:98:33:2c:61:1c:03:7a:9d:2b:1e:0a:
24:dd:03:41:af:c4:cd:b4:34:f6:70:1f:72:ca:d1:
d5:74:2f:99:fa:f4:e7:7a:c8:07:83:38:d1:fc:c4:
c9:5f:0d:f9:7f:dc:8e:10:93:2d:32:00:05:a1:d3:
64:ab:d3:b1:76:a9:72:c5:c3:0c:2c:3f:88:a5:72:
bd:b3:23:dd:3b:59:58:94:07:37:ff:9b:e2:3d:d8:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B6:20:60:D9:16:16:90:71:81:C7:1F:0E:A8:76:6C:62:FE:B5:67
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RbYgYNkWFpBxgccfDqh2bGL-tWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:64:53:fd:73:b9:4d:4b:c7:b9:fa:d3:28:6e:94:24:a5:6d:
c3:19:79:8b:0e:cd:a0:ae:68:64:1d:18:d5:e3:6e:37:f4:56:
dd:22:4f:6c:2a:79:4b:2f:af:62:ad:4a:66:53:47:eb:31:a7:
7e:00:54:ec:56:ee:e1:d3:d8:42:cf:b9:05:0c:86:90:fb:bd:
c1:aa:58:30:71:81:d0:4f:7f:15:2c:6a:76:e6:6f:6b:e8:f9:
29:f0:e4:8e:bf:87:ec:dc:1d:1f:9c:2c:38:8e:3e:1a:af:73:
6e:70:b1:cf:37:d9:8c:0d:5a:aa:49:e5:54:7d:13:3e:cc:37:
3b:03:07:b0:43:a4:2c:63:46:89:96:13:83:8f:23:84:8c:a7:
ad:00:a4:96:2f:9e:d2:f5:18:fb:32:38:c5:3f:08:43:67:82:
77:27:8b:1f:a6:eb:bd:52:92:07:73:f3:d5:af:78:be:39:6e:
b2:fb:37:6d:20:e3:6e:69:03:26:b1:28:8e:0a:9c:91:b0:60:
68:35:8f:03:34:54:fd:9b:58:f1:5a:37:13:6b:67:f2:f1:e5:
bb:06:5f:cd:8b:c8:42:28:77:31:9a:24:ab:01:9c:61:5f:e4:
85:45:f3:cf:18:ac:ae:ca:52:57:b1:32:ce:2b:4f:3f:dd:1a:
bf:7a:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:30:01 2025 by rpki-client