Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rehkt39YfAvxFndfaR8JDN1UWk8.roa
File: Rehkt39YfAvxFndfaR8JDN1UWk8.roa (raw, json)
Hash identifier: FsPhWoSupRc7pcE6+RmxNyjvmwpWhHd2WWhKxNT8xoY=
Subject key identifier: 45:E8:64:B7:7F:58:7C:0B:F1:16:77:5F:69:1F:09:0C:DD:54:5A:4F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B87931FC54C3DAC3A1DFF39F626033479
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rehkt39YfAvxFndfaR8JDN1UWk8.roa
Signing time: Tue 31 Oct 2023 21:10:47 +0000
ROA not before: Tue 31 Oct 2023 21:10:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:878d:3b4b/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:87:93:1f:c5:4c:3d:ac:3a:1d:ff:39:f6:26:03:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 21:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e864b77f587c0bf116775f691f090cdd545a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:85:44:91:d4:ba:d8:48:40:6a:a0:ec:3d:
1b:1f:3f:1f:5d:71:db:2c:50:b7:b6:a0:46:f1:ce:
9c:43:8c:1f:04:f8:e8:cc:06:23:5a:df:0d:b2:b2:
85:1f:d1:15:5d:d1:54:7e:da:06:4d:eb:c5:54:0a:
37:86:3b:01:ed:5d:92:46:e1:b3:c0:f3:bb:2f:b9:
f8:6b:de:a0:8c:66:6c:24:ff:00:f8:24:90:b1:af:
3d:c9:87:b4:74:1d:0c:0f:e0:e5:d6:c0:5e:5b:f1:
47:bb:14:23:9b:2d:48:e7:2e:25:02:c1:4c:6b:a4:
22:85:6f:ec:fa:3f:01:74:4a:81:b8:3e:66:19:1f:
73:dd:ab:69:6a:e2:bd:f8:40:af:e0:8e:b4:5d:dd:
a0:08:7c:20:9d:21:a8:c7:95:0f:26:36:bb:3b:21:
20:b7:dc:82:ce:8f:00:38:35:88:06:ea:d0:d2:1b:
f3:bf:2b:20:8e:c6:fe:ef:39:68:58:a2:06:b3:a6:
68:bb:9e:2b:0b:ef:6a:87:05:fc:7a:6e:d4:bc:0d:
14:c1:dd:98:72:92:df:e6:b5:10:6f:7a:ca:7a:b9:
59:c6:eb:f0:55:eb:2b:f0:a4:da:e4:dc:5a:32:4e:
16:61:65:21:80:ae:e5:7b:44:29:f4:15:f3:6a:98:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E8:64:B7:7F:58:7C:0B:F1:16:77:5F:69:1F:09:0C:DD:54:5A:4F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rehkt39YfAvxFndfaR8JDN1UWk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:8c:fc:3d:b3:5b:9f:4c:92:6f:31:b8:4c:9f:56:cb:12:94:
dd:58:bf:e4:d0:cf:3b:70:57:ce:ae:a2:ad:70:eb:5e:a1:6b:
c7:79:f1:5a:12:39:4a:e5:c2:d4:2f:e0:2d:c5:7a:01:d1:71:
8c:93:25:9a:ec:10:2a:ed:59:ed:e8:ba:1b:c8:b0:f4:e2:b8:
2d:12:8e:0e:fc:85:50:71:79:92:88:30:b2:fa:0a:5e:f7:a4:
fd:b0:4c:a5:65:dc:c6:60:f9:78:46:7a:57:d7:ed:98:8d:f1:
28:2d:ff:ca:be:35:57:11:77:f6:74:7e:54:fd:5b:23:9e:38:
bd:1b:88:ef:89:b1:63:56:3d:bf:7c:0a:99:07:17:24:2e:a4:
11:bc:c4:c9:27:6f:24:f0:c0:cd:97:d7:ea:ef:28:d6:b4:cd:
36:fa:a9:3b:76:e0:7b:4a:91:95:90:f8:42:d0:50:c3:27:c1:
c3:4f:85:35:42:65:f3:d2:f9:3c:42:c7:44:bf:aa:b4:fe:b6:
7c:6e:ef:c8:7b:f0:ef:e9:c9:4b:b5:2c:cd:83:d5:3e:7f:ac:
e6:bb:d9:a9:a5:80:4e:b4:29:dd:2a:4d:cf:be:80:51:77:f1:
31:d5:a2:16:99:77:09:d3:eb:69:3e:84:67:99:eb:e1:11:6f:
9c:05:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:41 2025 by rpki-client