Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S8JbmKRAi67iAbDCp6sopsC-FUA.roa
File: S8JbmKRAi67iAbDCp6sopsC-FUA.roa (raw, json)
Hash identifier: RRZnl8EdnBm6o0XSA+gk0NqF4oiSBow60F+lrM68/Fk=
Subject key identifier: 4B:C2:5B:98:A4:40:8B:AE:E2:01:B0:C2:A7:AB:28:A6:C0:BE:15:40
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF12BC4016ED532E358A4CCFE8FD6A458
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S8JbmKRAi67iAbDCp6sopsC-FUA.roa
Signing time: Mon 02 Oct 2023 16:14:51 +0000
ROA not before: Mon 02 Oct 2023 16:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:2b:c4:01:6e:d5:32:e3:58:a4:cc:fe:8f:d6:a4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 16:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bc25b98a4408baee201b0c2a7ab28a6c0be1540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:d7:ad:7f:f6:c0:63:14:9b:d6:47:96:7e:
bc:3a:99:8a:53:85:9b:e3:55:ae:63:b2:78:a1:f1:
76:0f:1b:80:e9:dd:8b:9e:a2:b1:0a:bf:02:97:c3:
30:ea:6d:11:05:22:18:a5:aa:86:40:b3:5f:6c:18:
e6:b4:e1:de:e0:c3:0b:7e:74:53:d7:33:de:a8:cd:
05:9d:85:5a:3f:13:27:ee:19:c9:c4:ae:25:43:0a:
e7:95:af:47:0b:7f:d0:b3:3e:b0:c2:f0:5e:45:9e:
ed:5e:db:39:96:bd:5a:56:aa:97:b4:ea:6c:8c:ae:
97:9f:46:36:f8:dd:ac:52:c6:aa:54:f7:6f:c6:89:
f7:c0:fd:08:ea:84:b9:25:5a:22:1b:e6:7b:e5:71:
e7:e3:66:e4:88:c4:f2:6e:24:bf:c5:0e:d7:2f:b1:
24:25:e2:fe:db:a0:a8:be:9d:11:25:c6:ad:e2:02:
bd:f0:ae:0b:2d:25:a4:30:04:5b:c3:79:50:fd:fe:
89:51:b9:e4:cc:41:61:ef:79:73:0e:22:0c:f0:37:
49:cd:40:0a:a9:76:25:1f:b8:c2:e5:db:5e:21:bd:
88:a1:e8:fd:42:a5:38:a6:a6:05:92:6f:0c:ad:2b:
47:16:a7:f5:55:7b:cb:c7:29:52:c9:63:25:0a:d8:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C2:5B:98:A4:40:8B:AE:E2:01:B0:C2:A7:AB:28:A6:C0:BE:15:40
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S8JbmKRAi67iAbDCp6sopsC-FUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:8c:8a:9f:ae:39:b1:5e:f9:7d:82:71:7b:f8:9b:70:c7:93:
0f:bd:d7:9a:cb:2b:64:54:6f:0b:f1:d4:85:03:a9:bb:e7:6f:
76:79:82:57:b4:a6:5f:3d:b3:ed:8b:ab:e7:0f:20:f1:0b:98:
17:63:8f:8b:ad:5b:f7:a3:d8:5e:51:79:95:0f:77:95:19:fa:
5d:15:c2:4d:df:ed:96:91:c9:bb:35:eb:41:ab:2f:17:19:80:
ce:c8:a4:0e:9f:79:38:4e:2f:6a:5d:d3:55:91:72:05:61:c3:
df:c9:27:c2:fe:b7:3e:26:61:19:25:4e:81:38:5d:d1:ee:19:
af:c5:cc:24:b5:0b:b0:dd:96:d7:9e:a5:6e:33:23:71:86:51:
e1:3d:dc:20:02:50:7b:03:0d:46:c4:f8:e1:3e:59:b5:a3:5e:
9a:a1:9d:55:d9:56:5a:2a:13:f9:92:e1:7a:cb:03:66:7d:ff:
2b:a4:7d:39:d4:20:26:95:63:00:53:65:7d:5a:1a:c8:33:8a:
f7:70:fb:93:7a:59:00:66:27:0d:c5:44:8d:58:bb:29:1b:7b:
54:6c:26:74:a4:84:7f:06:df:01:94:1a:b5:c5:46:e1:72:64:
eb:ee:e6:ce:48:81:0f:eb:91:d3:e7:ba:f4:ba:ec:93:2f:f2:
34:79:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:06 2025 by rpki-client