Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SaOkp8I78QNbWZcbzYAOfCtAR7Y.roa
File: SaOkp8I78QNbWZcbzYAOfCtAR7Y.roa (raw, json)
Hash identifier: +tGEhtUTbw2hxemmnidJKtlrfCWvuuhiH1SRtq+Y1f4=
Subject key identifier: 49:A3:A4:A7:C2:3B:F1:03:5B:59:97:1B:CD:80:0E:7C:2B:40:47:B6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5F458FDEF5518D9E6AE56D881587056E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SaOkp8I78QNbWZcbzYAOfCtAR7Y.roa
Signing time: Tue 24 Oct 2023 01:21:16 +0000
ROA not before: Tue 24 Oct 2023 01:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5f:45:8f:de:f5:51:8d:9e:6a:e5:6d:88:15:87:05:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 01:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49a3a4a7c23bf1035b59971bcd800e7c2b4047b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:73:fd:3b:4e:77:2b:0a:22:db:69:ff:8e:
6f:a4:59:f5:aa:8f:ab:3c:ef:6d:de:23:55:2b:e4:
23:c9:6b:65:d4:d4:bd:e9:ab:28:30:77:3f:45:8a:
ca:b5:a8:0d:9d:84:6e:b5:0f:be:4b:60:1c:1a:65:
b6:59:60:83:e7:0d:0e:a2:f9:f4:91:d3:62:65:92:
da:79:87:3a:3f:37:91:1f:fd:e8:13:90:ad:79:59:
ba:76:0f:cf:c3:73:a3:e3:ad:27:72:3a:5b:ff:69:
03:80:fb:a4:e6:ee:7f:5a:89:3e:61:60:c9:6e:b1:
a5:2e:e6:23:85:b3:ab:66:d5:fb:74:25:71:c9:03:
f9:f2:fd:0e:c2:82:87:0c:e1:5b:f6:32:4d:5d:06:
a6:fe:c3:d0:77:62:83:5b:a3:cf:d1:c8:b8:09:0a:
ab:c9:4b:3b:92:2a:30:02:77:aa:56:09:f6:a4:46:
43:6e:c4:3e:15:eb:79:e7:29:42:d8:5c:9d:94:20:
b8:72:1a:9d:73:b0:f3:70:2d:bb:10:d8:2a:89:c9:
9b:92:50:3f:f6:33:ff:b7:4f:82:43:5e:5b:31:59:
75:4d:8d:de:d5:e3:57:86:a2:c8:6c:47:6d:d9:de:
f2:cd:b5:88:01:83:25:1e:26:b3:6c:f9:98:62:21:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A3:A4:A7:C2:3B:F1:03:5B:59:97:1B:CD:80:0E:7C:2B:40:47:B6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SaOkp8I78QNbWZcbzYAOfCtAR7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:03:5a:8d:5b:54:b3:eb:d2:df:66:25:97:ee:31:46:16:4f:
45:e2:4a:96:46:fa:ee:b6:f6:04:f5:7d:48:21:39:f6:b3:19:
7d:07:e2:92:b2:8c:6d:27:b5:b8:01:bd:4c:c6:2b:1e:ed:7c:
0b:b0:c5:e8:64:a1:f1:3d:af:27:64:a3:f3:d6:c2:c6:a1:51:
49:85:b2:9b:aa:54:b1:3a:cf:52:ae:87:e7:50:83:e1:e0:a9:
6d:61:95:9b:b2:3e:6b:65:45:d3:84:c1:57:5f:d6:ea:09:81:
e8:53:ac:6f:b5:4e:33:59:1c:8c:78:59:79:ce:1c:2c:78:cc:
59:1a:1d:58:17:b9:04:e6:19:96:ac:0d:40:50:68:37:da:db:
d1:e6:ac:cf:2a:58:7d:54:b0:18:e0:76:42:44:2d:26:ff:33:
37:43:2e:97:3f:c2:a5:3f:e2:8e:7c:5a:2e:63:b4:d6:50:38:
31:d1:3d:e6:3b:09:65:bd:c8:b4:48:4c:24:15:b2:cf:e8:8c:
1d:4e:f1:ad:d0:6d:06:a1:04:2d:ff:06:a7:dd:b9:08:e5:9a:
5b:e5:21:41:b6:1f:e1:88:c1:c5:ac:55:db:fc:74:a2:b6:b1:
70:67:49:1f:ae:2b:6c:cc:2e:c9:21:68:97:38:7f:04:95:15:
41:8e:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:31:54 2025 by rpki-client