Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SF0E0cazjGr0BXYEJ1ZubkEDGQw.roa
File: SF0E0cazjGr0BXYEJ1ZubkEDGQw.roa (raw, json)
Hash identifier: m+Txi4vMpfU76FCRzujMVkcmQ+XTflP+Avcd9z3t2Js=
Subject key identifier: 48:5D:04:D1:C6:B3:8C:6A:F4:05:76:04:27:56:6E:6E:41:03:19:0C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACF79718CFD674E2DF029B8DC319893AE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SF0E0cazjGr0BXYEJ1ZubkEDGQw.roa
Signing time: Tue 26 Sep 2023 03:12:37 +0000
ROA not before: Tue 26 Sep 2023 03:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cf:79:71:8c:fd:67:4e:2d:f0:29:b8:dc:31:98:93:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 03:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=485d04d1c6b38c6af405760427566e6e4103190c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0a:45:e6:64:84:40:29:ef:59:7d:c9:b4:7f:
38:4c:f2:29:54:0b:32:58:97:7f:61:c0:2c:30:a9:
53:41:8b:92:db:19:04:88:fb:b5:ae:2c:b2:e5:6f:
70:10:6c:bb:ae:24:6e:6c:8d:ce:49:e0:ca:b8:1e:
7e:9a:c8:d4:e4:84:b9:ef:85:b7:15:c5:09:5b:00:
f1:3f:b6:18:93:09:85:7a:69:0f:fa:06:35:56:8d:
78:8e:ec:b7:fb:6d:65:40:a3:77:14:ac:f3:ed:8c:
1c:c6:db:9f:35:03:ab:c4:dc:de:37:62:b2:a7:c4:
5f:f9:f5:9a:81:93:15:82:b7:3e:da:a5:5f:d9:20:
aa:ee:0a:4a:23:c0:26:f1:48:9f:a3:d2:57:f6:81:
ec:ec:b7:d6:2d:36:15:73:cb:c2:a0:a4:3f:27:ba:
94:4c:be:cc:49:ce:ff:2a:2a:63:ab:7d:bd:0e:b1:
1e:d6:e2:ac:7c:26:d1:f5:d8:3a:9b:53:3f:31:a9:
ac:bc:11:b4:98:18:a4:b5:15:3c:90:2d:f0:2b:c9:
91:f4:fc:3b:f7:01:84:8e:a7:79:89:29:d4:58:d1:
cc:13:e1:4f:0b:08:ed:21:cf:2f:a9:e7:68:02:d7:
2b:8b:9e:7a:80:bb:eb:ee:4c:9a:f8:87:6c:79:83:
de:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5D:04:D1:C6:B3:8C:6A:F4:05:76:04:27:56:6E:6E:41:03:19:0C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SF0E0cazjGr0BXYEJ1ZubkEDGQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:69:bc:9b:08:0b:99:06:51:86:18:65:39:0b:b3:1d:f1:c9:
71:60:d2:26:f3:70:1d:91:14:87:e6:8a:e8:d9:c2:c5:79:fe:
d0:d4:c2:97:ae:94:94:d6:fc:68:fb:be:3a:dc:9c:7f:c8:44:
6f:ea:98:fc:3a:b4:c3:9c:b8:ea:8e:84:98:ce:97:28:13:86:
5a:0b:ff:63:8c:fa:81:d3:7e:57:c0:db:50:88:45:71:60:5a:
83:38:0a:b4:76:74:cd:3e:ef:77:a6:38:34:ff:52:ee:9b:0a:
90:0b:90:55:3e:a5:95:d2:18:b3:e2:5f:ef:6c:5c:b0:90:b4:
16:22:3e:c0:bc:14:18:1b:ec:8a:c7:65:2f:4d:65:6c:82:0a:
f5:9c:8f:e1:7b:f5:17:51:e2:e7:28:76:09:36:c7:ef:21:ba:
6d:59:52:94:b5:67:43:8e:29:69:19:fe:2d:47:cd:74:16:21:
9d:d8:29:d5:9f:37:10:03:d6:ff:a5:33:b9:de:21:2b:10:50:
cc:68:46:cf:c3:29:c1:a0:69:c4:14:5c:2a:70:b2:37:04:04:
91:4d:f0:8b:93:4e:18:33:c2:2f:9f:51:86:a2:80:fd:68:a0:
9c:40:fb:bd:e8:53:61:d3:48:c6:21:fb:72:7b:fd:f7:ed:d2:
4e:0e:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:52 2025 by rpki-client