Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Vm6NjJ3kJyPI3J28d9p8pe1ceAw.roa
File: Vm6NjJ3kJyPI3J28d9p8pe1ceAw.roa (raw, json)
Hash identifier: cUeUS7vIuF6P+RI8AZVkhTeOY8jUDYdCZE69ByKYuII=
Subject key identifier: 56:6E:8D:8C:9D:E4:27:23:C8:DC:9D:BC:77:DA:7C:A5:ED:5C:78:0C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C8678B29E24AC33329ABEFDDCB5DC3B0C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Vm6NjJ3kJyPI3J28d9p8pe1ceAw.roa
Signing time: Wed 20 Dec 2023 09:05:06 +0000
ROA not before: Wed 20 Dec 2023 09:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:8678:36d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:78:b2:9e:24:ac:33:32:9a:be:fd:dc:b5:dc:3b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 20 09:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=566e8d8c9de42723c8dc9dbc77da7ca5ed5c780c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:bd:85:76:8e:4a:d7:43:2b:31:a4:2a:11:
c2:ce:40:39:43:ba:50:d8:5d:16:01:15:c5:b7:ed:
37:c1:29:d3:05:d0:fe:1d:36:d6:fd:51:03:f1:55:
75:17:80:b4:d6:6f:af:fd:c4:79:a4:6a:cd:4b:44:
2d:2c:c6:c1:33:48:d1:88:ba:c4:62:76:85:4a:a3:
5d:e8:c0:1b:9d:95:99:81:0e:03:23:3b:1f:c8:38:
e5:9e:3b:ef:93:08:0b:82:c1:78:1b:61:bc:99:6e:
ba:87:f6:0b:bb:7a:b6:4c:1a:fb:b7:51:2a:80:fb:
05:72:ae:db:bb:88:df:21:cc:47:42:6b:14:fa:b2:
6d:16:d2:18:e6:45:42:ce:2f:e7:34:b9:87:c4:f4:
d1:6e:3c:e5:0d:9e:27:4e:e9:8c:f2:50:31:5c:fb:
7f:6d:f3:2b:64:b6:9c:75:14:93:e7:c2:d1:a8:9e:
f5:98:f1:d9:7d:8f:9f:8a:ed:97:05:08:8b:d5:5b:
42:bf:6d:44:5d:45:0a:64:72:1d:44:7d:ce:d0:e3:
c6:60:0f:b5:18:bb:67:9c:39:d0:68:5f:c7:9d:fe:
cf:33:91:34:52:7b:8a:7d:fa:b1:dd:a7:a6:5f:7b:
8e:70:d0:94:04:27:35:a3:1b:cc:07:e2:4c:5c:76:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:8D:8C:9D:E4:27:23:C8:DC:9D:BC:77:DA:7C:A5:ED:5C:78:0C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Vm6NjJ3kJyPI3J28d9p8pe1ceAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:d1:e1:e0:93:74:b8:13:dc:5f:ac:fe:55:3e:02:cb:2d:ac:
ea:4d:04:b5:c1:0a:56:98:6b:1b:fe:45:8d:b7:8a:d3:ce:c4:
f8:d7:cc:ce:09:5e:45:96:fb:df:8e:f4:7e:4e:95:b1:70:ac:
cf:84:c4:dc:66:ae:e1:89:19:e1:b2:28:70:1a:e2:87:74:ff:
88:fc:ac:4c:23:85:92:56:ca:31:37:17:2e:bb:e1:b4:c1:4e:
45:4a:6f:59:19:69:77:79:b4:32:05:14:bd:9f:47:43:ea:e1:
dc:6f:d6:68:fe:d8:2d:c8:3b:6e:be:2c:b5:d9:ad:c2:af:d2:
1b:cc:07:75:c4:9f:10:89:72:a4:1a:3b:b0:c8:7d:85:f5:f5:
40:6e:99:45:f8:2e:80:4b:d8:f7:0b:01:4b:b3:24:21:6b:f8:
f4:2a:4a:f4:d4:eb:0e:b6:5e:64:1a:d1:3a:93:4d:2d:7c:35:
97:3f:99:32:bb:c0:6e:7e:d6:98:c8:9a:af:d2:f7:c9:95:65:
e5:3c:2a:aa:a6:97:b0:91:b1:bd:46:07:a1:ae:0e:03:46:b1:
7e:63:13:c4:88:d0:ae:f2:85:63:66:ce:84:b7:81:59:3b:e2:
7b:f2:51:bf:f0:6e:c1:82:f4:5e:af:3b:bd:d1:ae:80:9e:12:
64:32:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:05:50 2025 by rpki-client