Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SjxLkPSYWQfRZI49OsmbT6rY8Lg.roa
File: SjxLkPSYWQfRZI49OsmbT6rY8Lg.roa (raw, json)
Hash identifier: zqbKh7bPQhE/AMdlKo0BCr2tBMeJtTRUqM0Sgvc/Z8o=
Subject key identifier: 4A:3C:4B:90:F4:98:59:07:D1:64:8E:3D:3A:C9:9B:4F:AA:D8:F0:B8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C08555E97D123ED6709E181B21E8291D1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SjxLkPSYWQfRZI49OsmbT6rY8Lg.roa
Signing time: Sat 25 Nov 2023 21:14:21 +0000
ROA not before: Sat 25 Nov 2023 21:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:08:55:5e:97:d1:23:ed:67:09:e1:81:b2:1e:82:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 21:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a3c4b90f4985907d1648e3d3ac99b4faad8f0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:cf:18:59:bf:d5:39:aa:43:50:e7:49:53:
da:e5:ca:bb:31:ee:76:2c:e2:0d:26:15:16:71:94:
fa:3c:de:13:a0:12:e6:65:ff:22:06:5e:19:a3:b3:
b3:48:59:bf:da:cd:6a:e1:7c:1f:bb:fc:c5:77:ed:
70:9b:32:1c:26:91:43:15:d2:c9:59:3d:e9:67:30:
18:ba:f1:d9:2c:82:43:c8:7f:29:0e:d4:cd:18:51:
a2:7d:df:6e:20:ff:30:75:b7:8b:75:7f:e7:c4:3d:
47:14:e3:3b:80:8f:26:e8:17:ee:2b:25:a5:09:b2:
ee:91:fc:8d:36:a3:e3:3a:4c:7e:7a:c5:d7:2f:e9:
4f:f2:78:a3:64:5a:b0:ab:61:71:7c:f2:0c:86:e9:
8e:b7:ba:f5:cb:7f:68:79:8f:7b:f2:9f:b4:9c:42:
ea:74:cc:75:54:ac:17:26:3d:57:85:2e:5d:f2:57:
73:b9:25:4a:f4:c4:d0:fb:0b:03:28:36:5a:ab:00:
3a:c2:63:73:ee:90:78:e4:a6:5c:49:e9:27:f3:90:
5d:ee:f7:fb:60:c5:0d:63:de:20:97:be:0e:87:b9:
47:8f:9e:8c:0a:06:65:51:85:88:18:11:01:9f:a4:
6b:be:35:7c:3b:66:db:13:aa:03:40:fb:fa:2b:2a:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:4B:90:F4:98:59:07:D1:64:8E:3D:3A:C9:9B:4F:AA:D8:F0:B8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SjxLkPSYWQfRZI49OsmbT6rY8Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:8f:0c:19:bd:03:76:11:3a:d1:8b:0a:7a:56:82:d2:c0:37:
c8:fc:a0:bb:ff:d9:4f:be:10:d5:39:3a:04:77:78:a7:f6:c3:
18:6d:10:05:92:41:a6:b9:cc:55:88:ff:42:57:73:72:70:a4:
28:43:f1:78:40:8c:8b:32:b8:df:21:72:9c:7c:bc:8e:3d:ac:
82:73:47:68:b0:ab:39:48:67:85:ef:eb:74:c7:a1:2c:9d:40:
61:da:0b:fb:9a:1c:cf:15:c7:2f:e2:f0:82:04:fd:8e:eb:c5:
e6:cd:b5:6e:1b:36:71:d9:4e:d8:ff:8d:e2:c3:84:20:24:3d:
e6:7f:12:ba:3a:3a:05:bf:fc:5a:4a:f8:23:d8:74:89:8c:13:
4a:15:7a:00:25:a5:d9:1c:76:7c:28:31:ac:8b:dc:c5:f7:df:
0b:b7:05:a8:47:17:34:3f:d9:18:7b:ff:8d:11:9f:a8:41:05:
47:e8:b9:12:9c:c1:db:14:8c:a0:64:d9:45:af:52:7c:ee:a3:
e2:07:4d:31:75:77:0b:f7:65:12:69:d6:d4:e7:0b:c4:4f:6e:
c7:59:04:43:7f:9b:1d:0e:e9:57:c7:25:e1:69:eb:09:c2:a0:
b2:23:cf:be:07:f3:14:b3:b9:11:82:74:0d:2b:1b:db:a7:b0:
02:7f:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:55:01 2025 by rpki-client