Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_4PmxlKBs5pW7cdlMzShirCYG1I.roa
File: _4PmxlKBs5pW7cdlMzShirCYG1I.roa (raw, json)
Hash identifier: MGB8NuggCuIDDvS5y9Wg7wiPKxXJcthNNbgUzcDfhS0=
Subject key identifier: FF:83:E6:C6:52:81:B3:9A:56:ED:C7:65:33:34:A1:8A:B0:98:1B:52
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3B9DA1B4B92FEB3BA06DD32C27831C74
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_4PmxlKBs5pW7cdlMzShirCYG1I.roa
Signing time: Tue 05 Dec 2023 20:13:55 +0000
ROA not before: Tue 05 Dec 2023 20:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3b:9d:a1:b4:b9:2f:eb:3b:a0:6d:d3:2c:27:83:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 20:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff83e6c65281b39a56edc7653334a18ab0981b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:1a:bc:3b:73:3a:4f:b3:c2:fa:45:1e:11:
45:9c:e9:2f:e0:8c:c9:76:5e:89:f3:5f:15:fb:b6:
33:54:0c:9f:35:92:24:ef:6c:99:43:f2:17:46:46:
30:73:04:a1:07:8d:64:4f:03:c7:25:dc:01:f7:7f:
ae:df:45:fe:de:dd:65:2f:77:61:a2:e7:e9:da:05:
4e:1d:f3:2e:7e:42:7e:95:64:08:5b:13:69:2d:48:
ef:b7:f0:47:ad:f9:ce:27:c2:79:7f:2b:2f:17:91:
17:48:ac:d6:64:01:1e:bd:a1:c6:37:fc:de:de:64:
46:ed:89:57:34:7e:d7:76:69:0e:85:02:c7:a2:b4:
7c:6f:22:4b:05:e5:25:e3:7b:e4:8e:cc:d8:44:e1:
a6:76:24:54:bb:60:1d:29:de:d2:17:75:05:4e:4e:
83:9f:a3:a4:e9:ea:e9:09:26:3f:b8:38:ec:96:5b:
48:da:14:ca:b2:78:84:d7:68:04:d9:22:8b:c6:aa:
dd:15:44:8c:1e:ff:67:29:58:05:d3:c1:98:49:f6:
32:db:ea:0e:d1:c8:b8:e3:33:b8:86:71:c1:d1:e6:
b7:b4:9b:2d:c6:18:4d:89:9c:67:02:ab:d6:d6:0b:
d1:21:e2:92:2a:9e:27:9c:74:dd:64:9a:da:86:c9:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:E6:C6:52:81:B3:9A:56:ED:C7:65:33:34:A1:8A:B0:98:1B:52
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_4PmxlKBs5pW7cdlMzShirCYG1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:cc:7c:60:5e:13:2f:88:7d:72:bb:2b:50:8b:0c:a3:0f:fe:
30:9d:c9:f5:df:e5:72:dd:36:48:16:84:0f:4a:27:6e:fe:6b:
2b:3c:14:05:c2:72:b0:8e:74:bd:8a:4f:f2:9f:db:ca:21:bd:
83:bf:02:d6:0d:cb:de:2c:03:5f:8d:ae:40:ab:8b:4a:4c:98:
61:9a:62:6a:05:a1:a7:c5:12:26:27:e2:15:d7:0b:23:82:bc:
1e:57:93:99:0e:cd:f9:c7:42:20:49:a6:d6:1e:22:64:a6:d4:
e5:a4:80:cc:d8:6d:ed:2b:b4:df:52:3a:5a:e6:f2:3b:8b:94:
43:01:04:25:e7:58:20:c2:d2:91:c4:71:e8:a1:cd:f6:ef:0b:
50:13:75:f9:e3:d4:3c:b9:1f:24:1d:d0:f9:99:e6:e1:a6:16:
54:01:08:5a:15:2a:39:10:8f:12:25:64:60:b8:50:dc:cc:28:
c2:a9:ce:58:d4:40:09:91:4e:be:da:55:d2:b0:51:74:05:b5:
74:ea:ea:a5:54:43:03:a0:32:9e:10:f3:63:25:9b:ab:51:6f:
3d:d3:f4:06:dc:75:37:2e:23:49:43:46:f3:51:94:6f:46:44:
a4:0b:58:7a:fb:cb:44:a8:b0:75:65:91:1e:f9:b1:66:ec:b8:
f0:33:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:27:04 2025 by rpki-client