Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SaB746RngOMTo4oMxRouxEBeOvY.roa
File: SaB746RngOMTo4oMxRouxEBeOvY.roa (raw, json)
Hash identifier: g/S2nu2wp7y714+oPI30kPsrKCCnJGHjMIUIsGp30w8=
Subject key identifier: 49:A0:7B:E3:A4:67:80:E3:13:A3:8A:0C:C5:1A:2E:C4:40:5E:3A:F6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C249F3050C6DF1D42FC0ADA51B718E572
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SaB746RngOMTo4oMxRouxEBeOvY.roa
Signing time: Fri 01 Dec 2023 09:04:21 +0000
ROA not before: Fri 01 Dec 2023 09:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:249e:efcc/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:9f:30:50:c6:df:1d:42:fc:0a:da:51:b7:18:e5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 09:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49a07be3a46780e313a38a0cc51a2ec4405e3af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:b8:2e:55:a7:9a:7c:f0:5f:39:e7:00:66:
da:34:d1:60:2a:60:82:6c:b8:2e:8b:a5:cb:28:ba:
b5:8d:68:93:9c:d8:da:71:a6:20:bd:fd:1a:7a:24:
eb:0a:20:30:eb:30:63:8b:8d:91:b2:aa:af:a6:d6:
f9:30:b1:dc:c8:a2:a2:2a:03:f6:29:43:9a:3f:22:
31:85:ee:a8:6f:21:d7:a3:ea:7f:77:c7:2f:70:7d:
8d:6c:65:92:e6:8e:d6:f8:01:9d:d1:f2:4a:70:73:
b7:5d:d0:04:c8:3e:e2:10:87:5e:69:32:f3:cd:43:
d6:09:a8:ba:a4:9f:cb:7f:13:cb:dd:f4:03:35:c7:
e6:2c:a2:85:44:8b:7b:9c:3b:f5:9c:f4:7b:ed:cf:
22:ca:1a:54:79:69:51:87:36:98:2c:8d:88:eb:29:
b7:57:5d:7c:d3:25:1f:71:2a:e0:47:73:39:99:5e:
83:2d:20:13:ea:a6:a1:a1:b6:53:c2:7b:de:e7:07:
0f:e7:5c:56:9c:17:7a:e5:82:48:24:d1:55:20:51:
8f:c4:15:4b:46:fd:a3:10:68:8d:e4:26:6d:0a:28:
5d:7f:cb:01:bd:8a:cd:56:48:9e:aa:c0:e4:2f:48:
a1:02:56:4d:a7:f3:88:50:34:93:58:80:19:90:66:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A0:7B:E3:A4:67:80:E3:13:A3:8A:0C:C5:1A:2E:C4:40:5E:3A:F6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SaB746RngOMTo4oMxRouxEBeOvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:84:07:1b:8b:f1:97:55:a4:5c:cb:67:6f:d1:d5:50:0e:ea:
1f:8e:dc:9c:8f:e2:04:54:6c:d5:cd:ea:08:d1:73:4c:1b:8d:
36:a0:45:8b:2a:8f:ff:26:8a:b8:aa:03:4e:e8:97:ac:d3:83:
51:15:53:a9:c4:6a:0f:67:ce:81:63:f6:85:62:0a:72:de:82:
8e:4a:5b:a2:9f:eb:d1:a9:f0:36:14:ad:65:b0:b5:3a:8b:ea:
a4:1e:ab:90:81:cd:87:7f:29:92:55:72:e8:20:c6:27:bb:67:
63:94:8d:bc:c0:c0:28:7c:7d:43:af:10:5f:e0:b7:ec:a5:63:
eb:36:af:a0:73:38:23:30:ef:b8:ad:87:b9:d5:fc:2a:2e:bb:
2f:bb:71:05:6a:f4:8e:e8:2a:94:a0:8c:7b:49:a8:6c:a0:e7:
fa:dc:99:2e:81:1d:eb:45:8e:48:45:55:f8:af:2f:69:5d:48:
88:3d:2c:40:fd:cf:f3:b0:51:85:ba:48:8f:90:02:ce:24:9b:
98:94:ea:c7:d5:9a:f3:92:28:5f:0e:45:1c:15:24:1a:c9:70:
18:b1:72:d3:28:3f:ae:5a:3a:b1:70:d5:01:ca:51:af:b8:d5:
b7:b4:32:a2:89:48:20:93:c8:53:9f:95:73:ca:ac:73:43:96:
7d:db:3b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:15 2025 by rpki-client