Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S2lu4Pcupaf-FWXhdgRtLUGlvK0.roa
File: S2lu4Pcupaf-FWXhdgRtLUGlvK0.roa (raw, json)
Hash identifier: H5FGvff1XBBM4r1Sp8Zx0e6/qB3GoZ2ntkAop6RsQPk=
Subject key identifier: 4B:69:6E:E0:F7:2E:A5:A7:FE:15:65:E1:76:04:6D:2D:41:A5:BC:AD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C273D5B9397539DF1F0C7A213C2B4BC5E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S2lu4Pcupaf-FWXhdgRtLUGlvK0.roa
Signing time: Fri 01 Dec 2023 21:16:21 +0000
ROA not before: Fri 01 Dec 2023 21:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:27:3d:5b:93:97:53:9d:f1:f0:c7:a2:13:c2:b4:bc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 21:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b696ee0f72ea5a7fe1565e176046d2d41a5bcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:dd:28:03:1d:41:e3:f5:15:56:27:9e:63:
58:14:c2:26:5d:37:6d:db:df:ba:76:6e:03:bf:81:
75:71:cf:c9:80:e9:db:2b:80:54:0c:fb:55:0f:43:
22:82:cf:2c:1e:29:d3:6b:fa:df:55:c8:ad:56:6c:
f1:7c:d6:ee:5b:06:8c:81:e2:d8:70:7a:e1:c0:cf:
1c:b9:53:11:c3:00:d0:5d:0e:c6:7f:9a:bb:a3:00:
4a:3a:fd:1e:1e:af:a6:b4:0a:5d:11:c9:34:0e:23:
cd:40:65:4d:c2:de:f4:fa:cc:a3:55:af:5e:13:5b:
92:ea:b2:51:57:44:16:f7:ee:84:53:4c:3f:06:01:
42:f0:f1:93:3d:33:05:65:06:38:30:66:ab:df:00:
74:79:38:22:8e:a0:b3:04:4f:4a:57:4b:d0:40:7b:
de:bb:9b:a8:c2:18:32:a3:8a:0a:fa:ee:3f:d7:25:
fb:2e:5e:71:07:f4:04:73:2c:fd:b5:17:13:61:ba:
44:4c:00:5f:db:e6:be:15:36:c1:b7:ee:36:70:9f:
be:26:4c:84:79:e6:64:ce:06:48:0f:f5:68:67:df:
db:be:ce:72:a7:06:53:cd:38:06:03:00:aa:2d:51:
ca:c4:59:44:d2:25:0d:22:fc:6e:c4:ab:d3:dd:de:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:6E:E0:F7:2E:A5:A7:FE:15:65:E1:76:04:6D:2D:41:A5:BC:AD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S2lu4Pcupaf-FWXhdgRtLUGlvK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:53:f2:93:4a:7c:e5:66:c3:99:cb:01:78:f5:4b:6c:59:aa:
2e:c2:d5:df:82:f9:47:31:91:4d:58:42:ec:b6:e2:b3:c8:03:
d2:5a:22:08:2a:1d:7c:04:4b:80:27:11:1f:4d:46:7f:9e:d3:
70:9d:a4:17:8d:66:ec:d9:38:4f:90:07:58:7d:c9:75:56:f6:
2c:de:75:ed:29:a4:fb:71:cb:68:ec:e5:d4:40:a5:51:bb:b0:
d2:9c:57:25:5a:79:10:07:1c:47:5c:84:83:9f:1a:86:63:6b:
77:55:df:81:a7:e4:a2:b0:88:6e:98:8b:16:e2:93:ec:f5:ef:
de:80:9e:93:eb:42:34:67:34:7b:33:66:28:20:d5:38:cb:e0:
63:09:1c:22:5a:f3:6b:02:d7:09:ed:36:6b:5c:2a:62:d1:a1:
9c:06:4f:d0:cb:c7:eb:18:bd:a3:26:7e:60:1b:e0:82:fd:4a:
60:0f:34:4f:bf:23:97:46:a4:f8:47:c5:e5:37:2a:c9:2b:d8:
53:16:de:38:7e:89:bf:ab:e3:70:a0:13:74:ad:e3:f1:f0:cb:
9e:85:4e:53:f6:85:b6:5c:ac:ee:1c:5f:bb:bc:25:80:6b:83:
94:65:b2:1a:3f:41:2f:1d:cd:8a:1b:06:97:36:18:a6:a0:a0:
ad:c8:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:47:52 2025 by rpki-client