Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ut7SOiv25kiz82rzSy6MqbSpOls.roa
File: Ut7SOiv25kiz82rzSy6MqbSpOls.roa (raw, json)
Hash identifier: mryGAMoLnGivrVgGUyWvNgesPuxHM2XIuWQjT3+hkxM=
Subject key identifier: 52:DE:D2:3A:2B:F6:E6:48:B3:F3:6A:F3:4B:2E:8C:A9:B4:A9:3A:5B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BEC7064A467BBCD5872D4911C978C5B46
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ut7SOiv25kiz82rzSy6MqbSpOls.roa
Signing time: Mon 20 Nov 2023 11:14:30 +0000
ROA not before: Mon 20 Nov 2023 11:14:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:70:64:a4:67:bb:cd:58:72:d4:91:1c:97:8c:5b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 11:14:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52ded23a2bf6e648b3f36af34b2e8ca9b4a93a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:43:2b:ba:0f:4b:6f:81:63:b5:79:bc:4f:
6f:25:58:05:4f:15:74:a8:08:db:70:0b:6c:a8:5f:
5a:63:64:ce:8e:e7:7f:81:58:82:03:ae:58:ac:ee:
79:b3:8b:91:f3:20:eb:7b:b6:cc:e6:d6:be:d5:b2:
76:92:c1:4e:d0:a5:8b:60:a4:8e:e9:5d:2a:a8:5b:
30:c3:4b:69:12:f5:ed:d8:25:27:4f:ea:66:86:36:
f1:6b:24:07:9d:d1:12:17:d2:5d:e1:2d:48:0f:e6:
03:e4:a5:14:50:a2:c6:be:14:de:f2:9d:62:1b:ca:
e7:dc:d3:28:d5:b3:c7:57:1a:52:52:9a:37:20:29:
90:67:c5:02:5c:8a:5d:2c:70:34:62:27:a4:59:55:
3c:44:a4:0b:bb:89:dd:f2:08:52:94:b1:bc:6e:bb:
53:1e:66:12:1f:e5:a7:0b:e5:8a:a5:3e:24:8a:2e:
e1:e6:05:6d:e5:e4:0d:62:61:23:a0:0e:bd:af:f9:
de:29:e9:54:cf:3b:15:32:35:b1:b3:ea:fc:3e:52:
04:e8:98:ae:2e:27:b0:5e:1f:db:13:08:d6:cc:cf:
fb:b5:e0:79:64:c3:30:db:2b:4c:7e:2f:9b:04:40:
c6:80:6b:cf:6e:3f:bf:d1:2d:d1:0a:a1:e0:12:34:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DE:D2:3A:2B:F6:E6:48:B3:F3:6A:F3:4B:2E:8C:A9:B4:A9:3A:5B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ut7SOiv25kiz82rzSy6MqbSpOls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:e9:f3:3a:b3:0e:d2:b2:33:43:0d:9e:d5:15:b9:6a:a7:9b:
4a:fd:d5:cb:14:a9:d4:a2:36:e6:5f:29:cd:98:e1:c9:e0:d1:
a0:89:f9:14:53:a7:ef:bf:9e:05:eb:6c:71:d7:d6:e8:4b:57:
1b:e9:eb:6d:03:0e:e3:ca:d2:92:ec:cf:72:ff:cb:25:57:26:
0c:83:d1:31:d0:f6:df:73:9a:45:8f:5f:f7:d2:f5:e3:d8:c0:
da:a6:eb:e1:cd:bc:27:0d:00:bb:b8:24:24:70:a0:38:70:3a:
8c:66:0a:e2:4b:e4:4f:b6:80:94:62:88:72:6b:44:97:4b:08:
3b:a6:1e:15:f8:d1:97:59:6f:e2:1d:a4:96:03:4f:7b:1b:77:
30:b6:97:fd:9e:bb:57:f3:4c:9b:08:18:87:2d:ba:1e:28:24:
32:54:22:06:98:74:83:aa:ba:c9:48:5e:a8:eb:dc:4c:5c:a2:
1d:86:3c:84:4e:eb:92:40:08:88:97:22:72:6e:9a:d6:dc:53:
e8:f2:f9:48:80:15:6c:ca:ec:cf:27:3c:84:04:68:f2:87:cd:
c3:25:05:70:f6:ae:d5:e0:24:b3:04:26:7f:2b:f2:eb:29:1a:
4f:f4:0c:ca:74:f6:81:b1:d5:3e:67:39:29:b2:43:14:6e:15:
f5:46:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:40 2025 by rpki-client