Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SrGt1nW43LjHypxcsi0MrhwuHB4.roa
File: SrGt1nW43LjHypxcsi0MrhwuHB4.roa (raw, json)
Hash identifier: 7WLTroGbsst4x7bEEOnnoABqRoo+EFWKk/3QxMtu724=
Subject key identifier: 4A:B1:AD:D6:75:B8:DC:B8:C7:CA:9C:5C:B2:2D:0C:AE:1C:2E:1C:1E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0998B1E3F35AD043722CC1A31BFE67BE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SrGt1nW43LjHypxcsi0MrhwuHB4.roa
Signing time: Sat 07 Oct 2023 10:04:43 +0000
ROA not before: Sat 07 Oct 2023 10:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:998:4b7c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:09:98:b1:e3:f3:5a:d0:43:72:2c:c1:a3:1b:fe:67:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 10:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ab1add675b8dcb8c7ca9c5cb22d0cae1c2e1c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:d8:1e:14:67:25:3c:0c:fd:f9:2d:0f:ca:
e4:48:b6:b3:40:fa:af:99:89:28:54:a0:26:4d:40:
d5:1f:7c:66:b2:19:bf:09:a5:a0:25:33:27:de:1d:
de:41:e4:af:79:72:91:6c:12:33:39:d4:19:8b:9b:
50:25:ed:3a:60:2c:38:4a:d6:b3:ec:03:fa:dc:66:
3f:52:cb:8a:c7:6d:89:d4:d6:dc:42:2d:eb:ef:88:
92:5a:62:b9:4c:14:62:07:bc:37:cd:81:29:3b:4a:
d6:55:a8:39:57:9b:6d:29:cf:10:91:d9:36:62:ad:
c5:17:ec:fb:8c:84:73:7d:55:94:e5:9b:78:44:5d:
cc:99:89:a8:d6:7c:c4:de:78:ab:83:ff:40:86:e7:
d0:65:64:48:2e:2f:3d:49:9c:8b:15:85:37:01:bb:
3b:93:a7:ac:c3:53:f0:bf:66:cb:83:22:e2:ef:19:
6f:9a:18:87:1d:4b:f3:9b:f8:4e:fc:47:98:1f:fe:
cb:b1:aa:bf:0a:f1:a4:65:a4:98:e6:dc:f7:11:6b:
43:c4:2f:06:6a:cc:a4:68:39:71:14:b9:47:e1:0f:
51:f7:a6:9b:04:23:9f:b0:64:a0:a8:64:ba:5b:65:
46:ba:f3:6f:cf:85:ff:cd:22:31:d7:e3:14:c6:d3:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:AD:D6:75:B8:DC:B8:C7:CA:9C:5C:B2:2D:0C:AE:1C:2E:1C:1E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SrGt1nW43LjHypxcsi0MrhwuHB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:7d:ee:35:1a:3a:52:c9:d1:1a:9b:f8:6c:6a:ae:2c:2b:3d:
18:7b:10:1c:26:3c:d8:f4:0a:b3:d8:41:82:1e:c9:3f:97:c7:
79:ae:e6:bd:f3:ed:7c:bf:8f:c0:3e:3c:b4:1a:26:a9:25:70:
2d:8c:a2:ea:94:72:44:27:29:9d:f5:85:71:10:67:13:3a:c3:
bb:cb:bb:74:77:f9:55:57:25:26:e7:8c:26:f1:b4:d2:f2:6f:
4a:12:88:f9:3b:d1:5b:d0:e6:1e:1e:b2:c9:01:8c:f7:e9:6a:
7b:3b:a6:b8:d9:33:39:4a:27:02:19:78:13:d4:52:d7:8d:28:
f4:4f:78:4c:75:9d:de:f8:ba:d0:81:4c:2a:95:15:d3:8f:80:
f2:c0:da:a8:d1:9e:78:e7:08:48:e2:72:a0:74:4b:72:06:ca:
ee:bb:d6:58:a7:25:77:5c:fd:72:e8:2f:4f:5f:26:0d:7c:d5:
d7:99:ee:0a:ce:86:15:4d:81:72:a3:b3:15:82:40:c1:69:52:
9e:e3:41:ac:85:b6:be:87:39:a9:33:c5:aa:f4:b7:e5:7f:c7:
8e:26:39:15:85:1a:bb:57:d0:c8:12:c0:d9:24:b7:e9:d9:bf:
57:af:0d:ef:66:08:2f:4b:2f:f2:2c:87:1e:a1:e4:1b:a0:6b:
0d:0a:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:31:18 2025 by rpki-client