Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SXqyRfm-jTEWA_10NpFhKnu8zZs.roa
File: SXqyRfm-jTEWA_10NpFhKnu8zZs.roa (raw, json)
Hash identifier: RuZIT4ymfV4aVm+6SO+wPKA91rzUk3Zf82I0Nw/x0tM=
Subject key identifier: 49:7A:B2:45:F9:BE:8D:31:16:03:FD:74:36:91:61:2A:7B:BC:CD:9B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ABC2B6D596A02A2AAA9DF265C2AEEC553
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SXqyRfm-jTEWA_10NpFhKnu8zZs.roa
Signing time: Fri 22 Sep 2023 09:14:37 +0000
ROA not before: Fri 22 Sep 2023 09:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:2b:6d:59:6a:02:a2:aa:a9:df:26:5c:2a:ee:c5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 22 09:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=497ab245f9be8d311603fd743691612a7bbccd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:51:fd:b2:16:cd:41:ba:aa:c4:8d:83:e9:
c4:a9:b5:bb:b1:70:c5:f3:28:b6:0d:23:60:1f:d7:
96:30:62:fc:26:51:ae:f6:e2:0e:34:b1:9a:02:fd:
18:9f:2a:40:6a:00:e1:2d:e5:8a:73:29:73:d1:03:
74:72:0d:3b:19:40:74:0b:b3:3d:02:1d:ce:8e:0d:
e3:24:bd:88:04:9c:15:1b:dd:9e:b4:40:55:35:79:
7a:d6:c4:f2:2b:6d:c2:da:de:4f:81:c0:99:e8:2b:
dd:86:59:dd:80:56:e8:d4:24:99:86:73:cc:a0:ce:
01:ee:1c:cb:48:52:95:fb:30:4d:ac:2c:32:83:16:
b8:dc:4c:e6:96:5e:cd:b4:89:e3:f3:8e:a3:5c:ca:
69:91:99:2d:8a:e1:3c:a6:9f:1d:c6:b7:00:99:02:
34:90:2b:7f:84:bf:69:90:af:83:71:4b:53:b2:d9:
92:fa:5c:8a:35:c6:a6:b2:43:e5:7e:98:d9:98:7d:
0e:f1:e0:15:5c:92:15:19:7a:ad:bb:5b:85:1b:db:
24:83:1a:db:d5:0e:45:af:0e:7c:a0:07:62:98:46:
ba:7e:e7:bb:6b:ca:9b:cf:1a:2a:3d:0a:a8:cd:60:
a0:e3:5c:1d:77:4d:0b:d2:03:80:ee:84:36:c1:5c:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7A:B2:45:F9:BE:8D:31:16:03:FD:74:36:91:61:2A:7B:BC:CD:9B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SXqyRfm-jTEWA_10NpFhKnu8zZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:1a:f9:2c:e6:fa:f8:81:a8:7b:e7:b9:65:25:ec:6a:fd:37:
f2:b3:61:ff:26:32:17:dc:f0:3e:7e:da:3a:e7:87:06:50:5f:
58:62:c3:64:c0:40:7d:0d:3f:ea:68:61:e3:4b:ad:06:79:93:
8b:ac:ff:48:92:2d:7c:d9:56:37:0e:79:dc:2a:2b:b4:45:d8:
9c:4b:49:c9:fb:47:19:1f:b5:e4:d1:fe:56:af:d1:a7:14:be:
c9:b9:ad:52:f6:68:62:2c:97:cb:a7:fb:f2:86:a3:06:11:9f:
b5:32:c2:8c:27:bb:f8:c0:9b:da:bc:65:f6:c0:f8:ec:61:be:
26:82:11:88:96:f5:17:ab:48:93:a6:6b:ab:bc:33:73:cd:91:
c5:d2:d0:dd:29:bb:1d:eb:fe:51:da:4d:42:6a:2b:7e:30:e3:
63:e8:7f:95:45:fc:fd:34:1f:90:6b:15:57:0c:4c:96:69:7b:
b9:48:74:df:45:f7:fe:dd:27:0b:db:18:21:c7:b0:76:92:ee:
d0:74:a7:91:13:33:0d:aa:75:d2:6b:17:53:12:d7:72:49:2e:
25:75:18:db:c2:e9:34:de:0a:90:54:1b:7b:36:41:95:a7:b6:
06:e9:fa:96:5e:d3:b0:32:ec:e0:5f:24:ea:47:45:dc:f3:ac:
5f:e6:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:07:59 2025 by rpki-client