Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_raSSUi6RTxLUjRlBtjaMJrAHSQ.roa
File: _raSSUi6RTxLUjRlBtjaMJrAHSQ.roa (raw, json)
Hash identifier: X85YcbnEYjxhZxSD2dDpsf0pY6NAD0VtxViQdvJfGEI=
Subject key identifier: FE:B6:92:49:48:BA:45:3C:4B:52:34:65:06:D8:DA:30:9A:C0:1D:24
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC71DE3FA21A293A0E7011395F321BECA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_raSSUi6RTxLUjRlBtjaMJrAHSQ.roa
Signing time: Sun 24 Sep 2023 12:15:39 +0000
ROA not before: Sun 24 Sep 2023 12:15:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c7:1d:e3:fa:21:a2:93:a0:e7:01:13:95:f3:21:be:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 12:15:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feb6924948ba453c4b52346506d8da309ac01d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:a1:12:72:97:05:e3:21:62:6e:35:55:bc:
f6:0b:dc:82:f0:ad:b4:60:4a:bf:dd:02:c4:fb:36:
f2:88:dd:62:0e:b3:28:15:74:8b:3f:93:c0:2c:b8:
7c:5c:9d:8e:72:00:7b:71:56:0d:f0:de:9f:a4:2c:
7d:5c:cd:8e:fb:14:5d:a2:8d:f5:b1:17:c2:d2:ce:
e0:7b:95:b9:b7:a5:98:bb:bd:c2:b0:b1:fb:bd:96:
97:9c:72:a0:e8:b4:f6:82:ff:6f:6b:fa:b2:06:75:
f9:13:7f:3e:9b:08:32:de:cc:2e:f3:62:9a:4d:c5:
4e:68:4c:78:bc:05:d5:e0:fb:a0:cd:76:8c:6c:96:
88:c2:60:98:c7:88:db:e2:12:c6:ae:91:36:d1:58:
eb:be:b7:29:03:bb:57:6c:0b:d7:1e:7b:84:40:85:
df:9d:10:22:1b:e4:b5:97:5c:a3:69:a2:73:04:41:
98:d5:4e:10:29:ec:4d:47:40:36:4d:23:00:92:59:
93:ae:af:9d:ee:8d:c7:d2:35:8d:6b:f2:57:5b:6d:
fa:63:da:55:c7:b7:36:82:ea:57:c6:15:c0:66:d0:
09:cc:ae:37:ec:57:c2:ab:e5:22:c0:ea:67:bd:c0:
29:2a:e0:6e:db:ab:a5:d1:57:4c:e7:ec:26:98:d8:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B6:92:49:48:BA:45:3C:4B:52:34:65:06:D8:DA:30:9A:C0:1D:24
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_raSSUi6RTxLUjRlBtjaMJrAHSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:51:71:6a:23:4c:0e:e8:4f:b8:4e:f1:16:99:73:9d:c8:35:
49:c7:bd:7f:cc:80:01:2c:8f:72:c3:dc:85:13:3c:ad:21:7e:
ce:63:88:20:ff:5d:0d:f0:ac:95:1d:0b:52:cc:88:e8:ab:c1:
42:97:12:2f:01:42:f6:f1:e5:e8:97:ac:b4:da:f0:64:d8:21:
a7:51:82:de:5a:e9:2d:5e:d7:0d:4d:4e:b4:c8:c0:9c:41:bf:
db:1d:f4:70:1c:42:b7:ce:09:23:7e:fa:c5:f8:78:fd:4b:54:
48:68:d2:d7:67:d5:29:f3:fb:d8:ce:cb:e0:77:b8:a4:a6:10:
6f:33:26:5f:3f:73:b4:1f:0c:07:29:7f:10:e6:b2:62:6d:35:
a8:f3:f3:c0:46:f3:2c:91:0e:7c:39:80:d3:d1:34:32:8d:1c:
62:73:c8:36:5f:14:80:9e:32:c5:30:68:c0:66:1c:a5:db:6b:
61:40:e0:ba:74:e1:35:83:af:37:05:78:16:8d:23:f5:89:21:
73:d1:d3:d3:ec:73:68:9b:bb:33:40:09:9f:08:f4:c7:4d:42:
27:83:19:9e:db:6e:c3:4a:c1:cf:58:16:70:cb:0d:51:59:df:
9e:b9:c9:f3:2c:4a:6d:e4:6b:c9:0c:25:1c:5a:a5:9a:69:c3:
aa:c2:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:42:11 2025 by rpki-client