Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SlhsALY3pSY3bk6EhJyhdNwJ6CY.roa
File: SlhsALY3pSY3bk6EhJyhdNwJ6CY.roa (raw, json)
Hash identifier: bo/orI7tHYclI6voY9i+GSFlZWU/x06yE5VMKSb0sQw=
Subject key identifier: 4A:58:6C:00:B6:37:A5:26:37:6E:4E:84:84:9C:A1:74:DC:09:E8:26
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7F70BA5CE5C17A65DE3C3034A7A6A1EA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SlhsALY3pSY3bk6EhJyhdNwJ6CY.roa
Signing time: Mon 30 Oct 2023 07:16:16 +0000
ROA not before: Mon 30 Oct 2023 07:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7f:70:ba:5c:e5:c1:7a:65:de:3c:30:34:a7:a6:a1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 07:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a586c00b637a526376e4e84849ca174dc09e826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3a:d4:13:5c:f4:d3:5b:5f:0c:57:f7:92:dc:
fb:99:19:64:fe:76:3d:6a:00:f9:8e:da:73:c2:3f:
53:16:1a:8e:91:b2:b3:f6:d5:45:00:ce:eb:f7:80:
dd:c5:7b:85:0d:7d:4f:7a:e7:81:79:1c:e0:78:d7:
05:10:53:7d:d4:18:d7:a2:ef:26:62:af:80:7d:c3:
77:d4:76:ca:f2:d3:fa:86:0a:07:c6:df:23:c6:e0:
09:9d:01:84:c8:d0:27:4c:f8:7f:ec:27:5e:54:fd:
1d:46:d2:72:33:5d:29:a9:60:f8:1e:34:53:3c:e2:
93:96:83:a4:a2:fa:b5:21:8d:ea:3a:43:d8:90:7f:
0d:bb:c7:5e:e2:64:a3:92:d5:3d:68:95:98:d5:a9:
dd:4c:d0:32:e4:96:74:4c:8b:be:db:a6:72:da:34:
3f:10:55:86:1c:06:45:4d:e7:0f:07:ae:28:b9:93:
c5:f4:b6:8f:e7:6d:59:3f:36:6d:4c:db:3d:06:09:
2e:33:83:d8:6d:15:21:6c:90:45:22:1b:a1:b8:42:
86:17:de:5a:4a:ff:db:c1:4e:e8:b3:3c:93:60:cb:
a9:78:8b:ad:8f:36:20:76:39:a4:a3:96:bb:1d:ed:
fb:d8:b8:45:15:a5:a7:3c:95:e0:30:52:90:9b:d9:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:6C:00:B6:37:A5:26:37:6E:4E:84:84:9C:A1:74:DC:09:E8:26
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SlhsALY3pSY3bk6EhJyhdNwJ6CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:09:cc:d1:89:6e:3f:24:81:96:fa:22:38:10:d5:6e:30:d1:
6c:2e:b3:39:b4:34:75:67:a0:62:8a:56:b2:a8:0d:84:2d:d0:
4d:b8:63:d6:36:9d:15:d9:9e:e4:89:ca:77:6f:8f:ba:09:b4:
01:22:92:1d:4e:08:2d:85:d5:c7:61:2e:f8:2f:c0:74:45:46:
04:90:dc:62:a9:37:69:e1:25:42:4d:31:a2:2e:86:95:2c:ed:
a9:e9:a9:1b:ae:b5:0b:e5:1d:f3:b1:e5:50:36:16:3e:45:fd:
bb:7f:fe:e1:b4:12:29:98:60:cd:68:6b:24:09:35:13:05:0e:
21:99:b8:93:01:30:e9:9f:bc:02:af:0a:50:da:b7:0e:59:6d:
03:0a:58:eb:3a:9f:9f:10:d5:12:9e:4f:59:74:99:fe:c6:f8:
ec:10:b1:28:70:70:ab:71:33:8c:6c:11:5b:45:15:c1:67:e1:
0f:9f:c3:33:89:67:53:7b:b7:a2:16:0d:9c:58:bc:b0:29:ce:
6e:61:f0:20:9b:4f:8b:ef:9b:62:3c:65:c5:b5:c9:a2:c9:9a:
08:0a:b9:b8:55:b0:3b:04:89:db:15:ab:17:e8:fe:0f:5a:6a:
a2:83:07:3b:20:4b:d9:cd:f2:8a:b0:b4:b4:4f:1d:b6:f1:9c:
42:48:51:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:52:00 2025 by rpki-client