Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sz6npzB_58-bjAVnYdNvErFVB7M.roa
File: Sz6npzB_58-bjAVnYdNvErFVB7M.roa (raw, json)
Hash identifier: kvMqfw+6BnSjhRsoBUpNssfsM0HrN7K+1yCIv+OE+5E=
Subject key identifier: 4B:3E:A7:A7:30:7F:E7:CF:9B:8C:05:67:61:D3:6F:12:B1:55:07:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB214288536944D6CF93B5B8DF1E6E17F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sz6npzB_58-bjAVnYdNvErFVB7M.roa
Signing time: Wed 20 Sep 2023 10:13:00 +0000
ROA not before: Wed 20 Sep 2023 10:13:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:14:28:85:36:94:4d:6c:f9:3b:5b:8d:f1:e6:e1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 10:13:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b3ea7a7307fe7cf9b8c056761d36f12b15507b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:25:a8:43:2a:59:36:67:88:fb:5b:dc:ba:
47:f8:91:d0:e7:f2:a6:95:40:af:3b:95:cf:98:5f:
c1:ab:bb:87:cc:d0:83:86:c5:7e:8d:92:22:74:59:
11:80:53:de:32:b3:3f:1c:cf:65:b3:27:26:53:59:
9a:0c:ea:6e:54:3b:66:3b:a6:cc:bf:15:f5:e5:38:
ea:67:20:20:60:e9:dc:33:97:e7:ce:f9:df:79:cb:
e6:dc:3a:09:92:c4:c0:4e:dc:2b:cf:40:52:f7:38:
5e:41:8e:2f:82:cd:19:3e:f9:d9:96:57:a0:0f:db:
2d:a8:e3:57:db:9e:3a:93:2b:bc:3e:40:a7:74:8f:
89:78:d3:48:37:78:17:45:ab:29:20:66:da:b8:3f:
82:4e:8c:a9:c4:f4:cb:ab:4c:7a:8c:82:5b:90:6e:
79:c2:18:88:13:1c:5a:63:d7:ab:40:a3:bb:ec:9b:
fb:9c:73:04:c3:a0:39:79:5f:16:82:33:7c:e0:f4:
ee:8b:23:89:e3:78:fc:b5:4c:fe:a8:af:54:90:ca:
7b:7b:97:50:f5:b4:83:9d:b3:86:89:17:08:35:fd:
9c:51:54:65:4e:d4:9d:78:f1:87:28:14:b7:8c:97:
db:cd:3c:e2:8e:7f:49:d8:60:23:bd:37:ea:82:21:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:A7:A7:30:7F:E7:CF:9B:8C:05:67:61:D3:6F:12:B1:55:07:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sz6npzB_58-bjAVnYdNvErFVB7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:54:df:d1:24:84:03:5e:3d:e4:16:42:56:d6:35:77:10:ce:
0f:69:bf:df:76:39:2c:61:c3:60:35:e8:06:87:e7:8e:82:80:
4c:ed:2a:0a:9d:cb:63:2e:e5:52:a4:78:c0:75:0f:d2:ba:d1:
9a:88:ee:08:0e:2b:f5:f0:8a:75:13:1e:0b:58:e7:12:f4:4e:
05:a2:83:9a:cd:8d:73:b8:8f:ef:43:04:fa:f9:52:0f:91:36:
98:5b:ad:a7:91:b6:c0:a2:1f:41:6b:c9:f8:40:87:12:8b:b9:
73:e5:fc:54:39:70:55:87:70:fa:1b:c6:4f:c7:26:27:87:3f:
e9:2d:c5:3f:56:74:46:95:39:c2:c7:b7:e5:5e:ad:92:30:b5:
fb:0f:a5:e6:7c:73:03:5c:97:93:2b:00:54:dd:0a:d9:f0:5e:
b0:66:99:9b:4f:fe:d8:e0:77:fa:e0:8b:3c:df:df:97:02:8f:
08:df:07:51:0b:35:18:f0:d7:61:e5:07:69:45:99:04:1e:67:
7d:62:25:8a:3c:c8:d8:f9:03:1e:75:2a:40:f8:17:63:89:c8:
b9:f2:3f:7e:88:4b:80:27:75:56:90:f9:e8:e0:44:38:a3:45:
44:da:80:da:61:1c:b7:a0:bb:2e:5b:e2:33:fe:20:53:5b:4f:
bd:0d:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:37 2025 by rpki-client