Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a5NhO3Jf3aEelH4ZYo54r77bRbI.roa
File: a5NhO3Jf3aEelH4ZYo54r77bRbI.roa (raw, json)
Hash identifier: mJgN+DGRVN5cjNkenMIp0HxH735y/7ekPlrEOk2a9PE=
Subject key identifier: 6B:93:61:3B:72:5F:DD:A1:1E:94:7E:19:62:8E:78:AF:BE:DB:45:B2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC9022B66C47CCD850519A7767C1CA82B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a5NhO3Jf3aEelH4ZYo54r77bRbI.roa
Signing time: Sun 24 Sep 2023 21:04:37 +0000
ROA not before: Sun 24 Sep 2023 21:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:c901:f5d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c9:02:2b:66:c4:7c:cd:85:05:19:a7:76:7c:1c:a8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 21:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b93613b725fdda11e947e19628e78afbedb45b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:a3:be:df:d7:06:18:53:dc:70:19:4c:21:
7e:75:81:1e:7c:a5:a2:60:ec:d6:e1:12:12:76:77:
07:2b:66:04:10:af:98:29:84:34:12:77:9a:77:79:
fa:79:89:b9:55:77:9c:80:18:e4:9f:09:de:cb:69:
04:39:a9:ce:d4:f7:6a:a9:3c:9b:e9:10:d6:6f:87:
60:67:5b:25:d5:96:5b:b1:0b:38:1f:93:04:43:e9:
f1:58:a9:4b:40:cc:84:59:07:f1:d6:d7:be:be:4c:
ec:d7:db:5e:04:2a:f6:53:ee:0e:ca:05:a1:36:34:
55:a1:98:fa:93:d1:d6:22:18:42:1d:63:b5:76:5c:
3f:80:c5:b2:cc:2a:2d:9f:5b:0a:5d:95:76:d0:20:
4e:b7:74:9d:0f:22:b9:c7:21:92:bb:d5:33:13:8b:
3e:2d:14:16:63:18:8b:c0:0c:94:59:cc:b9:0d:95:
8d:f6:71:c8:0e:9d:de:9f:6b:22:29:ab:dd:66:5e:
de:09:39:b2:24:b3:36:d5:bb:39:03:e7:c7:4a:37:
7d:06:ac:70:13:7c:b3:ea:3e:7b:86:a5:53:0b:84:
ee:72:85:57:df:8e:0b:b7:46:80:8f:dc:3b:bd:8b:
01:1d:3c:35:55:06:4a:00:aa:ac:e2:e6:27:2c:ca:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:93:61:3B:72:5F:DD:A1:1E:94:7E:19:62:8E:78:AF:BE:DB:45:B2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a5NhO3Jf3aEelH4ZYo54r77bRbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:ab:95:13:02:db:1b:e1:b5:4e:11:f4:60:18:01:72:df:ac:
2e:54:b9:ca:58:21:59:29:b8:89:b9:fd:ca:d0:2b:6e:ca:34:
e7:4f:6e:89:f0:86:81:31:16:8a:40:3b:bc:3e:3b:d8:77:b9:
c7:54:bf:14:86:90:44:91:3f:0c:29:3a:05:9a:01:c1:82:6f:
29:08:22:a2:28:b4:09:cb:96:c1:45:85:9d:e1:16:b0:6f:18:
43:7b:58:9c:ae:33:09:8f:ff:9d:f0:f7:b3:49:60:99:d6:af:
ef:46:1d:fe:12:d8:7d:cb:7b:7d:aa:74:2f:c4:c0:62:1f:71:
3c:53:2a:37:52:08:20:34:d3:12:e3:2c:85:ef:df:e1:58:93:
c0:aa:5b:99:e2:e9:10:18:b5:f8:05:58:34:4c:28:af:0a:82:
5f:71:06:21:4b:d2:8d:af:98:ee:fa:57:96:03:db:20:16:41:
07:b1:67:7d:37:3e:44:72:be:7d:8c:27:62:a5:e3:22:c3:a3:
8d:96:ca:f9:e3:42:f7:e2:73:26:59:76:a0:0b:c7:79:ab:27:
cf:cd:10:ea:28:81:c4:41:55:c5:15:43:a9:d4:63:87:fc:83:
09:92:89:f8:4f:f0:59:8d:ef:6b:93:34:ce:e4:be:d2:b0:9b:
6e:6a:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:29:01 2025 by rpki-client