Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_sV51jCP0cwZGN3tsimJFBbtAjU.roa
File: _sV51jCP0cwZGN3tsimJFBbtAjU.roa (raw, json)
Hash identifier: MWMtN8YgmOwIC1odEz+LkHploUF0lZ9ifKuFt//bmaM=
Subject key identifier: FE:C5:79:D6:30:8F:D1:CC:19:18:DD:ED:B2:29:89:14:16:ED:02:35
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B34539932A820799260482CE31ECAC59F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_sV51jCP0cwZGN3tsimJFBbtAjU.roa
Signing time: Sun 15 Oct 2023 17:12:55 +0000
ROA not before: Sun 15 Oct 2023 17:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:34:53:99:32:a8:20:79:92:60:48:2c:e3:1e:ca:c5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 17:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fec579d6308fd1cc1918ddedb229891416ed0235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:60:88:f3:84:f1:f4:9f:1e:6e:f1:1f:6d:
83:64:28:26:41:04:a4:6e:c4:65:d5:8d:d2:78:5b:
c1:bf:7b:3f:7a:06:56:f6:e9:01:da:2d:fd:c3:4f:
c1:11:21:52:47:b3:c6:b4:51:f6:ec:71:ba:50:b6:
d8:aa:40:d4:98:fa:ee:e6:ae:fd:a1:b3:fa:fd:31:
59:64:f5:a4:98:9d:7d:f0:fe:6d:82:b1:e1:3a:8c:
f1:95:88:4f:66:af:cd:47:b1:93:0a:39:a8:98:a2:
74:31:fe:69:fb:b6:38:bf:4e:51:e2:0a:b3:83:5e:
8e:07:ec:43:6c:54:ab:51:08:07:75:da:b9:75:b7:
59:7b:6c:11:1e:60:bc:98:25:1b:28:c0:f6:13:cd:
01:27:35:ab:f4:78:93:b6:4f:8e:92:35:c1:99:bd:
96:9d:84:56:2d:7d:2d:76:68:af:fe:6f:3f:49:ae:
ba:9f:be:56:66:7c:61:a2:ac:ac:7e:c2:8f:ae:9b:
77:fe:bb:04:39:03:3c:16:36:20:7c:10:d2:20:0e:
dd:3e:33:31:a9:72:33:3b:34:b3:65:8c:ac:ef:1b:
a0:4a:23:f6:06:05:d1:55:b4:e3:39:39:a9:da:46:
64:91:78:de:71:db:02:e3:31:9a:c0:59:43:61:8c:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C5:79:D6:30:8F:D1:CC:19:18:DD:ED:B2:29:89:14:16:ED:02:35
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_sV51jCP0cwZGN3tsimJFBbtAjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:37:d6:52:c2:7b:7f:fc:3b:a1:6e:bd:a3:a3:88:5b:51:95:
13:a9:e3:c2:fb:10:ae:d0:74:82:fb:24:2a:e3:00:aa:26:3a:
59:1e:86:f6:26:7d:09:fc:8a:78:07:ee:f8:c9:d5:b2:23:55:
11:47:fe:c9:ff:fb:1a:b6:87:e0:1b:70:e0:8c:ea:bc:59:93:
37:17:1f:a4:36:1e:2b:4a:43:a8:fc:13:74:59:74:4c:92:bb:
49:87:71:7b:90:e5:11:c8:43:39:73:5c:57:20:71:81:08:21:
af:c8:b4:61:51:d1:93:86:c2:2f:a6:e4:f9:f6:46:58:72:44:
bf:4b:f4:79:cf:52:e7:d4:39:2a:5d:91:0a:97:41:ac:16:b5:
a4:93:32:f3:09:f6:93:28:0e:7b:24:3e:8f:17:83:c0:a3:85:
43:ac:aa:15:ce:51:e8:fe:45:1b:6a:64:5f:74:3a:80:33:5c:
0c:1b:c5:0a:6f:af:82:6a:93:1e:3d:f0:fe:5d:98:d0:23:6f:
2c:e3:7f:be:16:d4:89:40:f2:2c:1f:74:e9:ae:bc:79:e9:d9:
ce:8c:e1:12:1c:2d:47:16:fb:23:b9:a9:46:b0:4a:0c:73:ed:
ec:12:c0:07:74:bf:cd:92:f8:f1:a0:65:45:50:79:e3:19:25:
53:ae:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:28:29 2025 by rpki-client