Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aF2PWI0Gci6HYK2MhfbB3zSB6VU.roa
File: aF2PWI0Gci6HYK2MhfbB3zSB6VU.roa (raw, json)
Hash identifier: y/+3PGI8xOlV+FZ+RLFDg6Bn2aoY8uKoLg2xzZKY5mM=
Subject key identifier: 68:5D:8F:58:8D:06:72:2E:87:60:AD:8C:85:F6:C1:DF:34:81:E9:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BADC73D938A42ECE4D8E028054196316D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aF2PWI0Gci6HYK2MhfbB3zSB6VU.roa
Signing time: Wed 08 Nov 2023 07:13:17 +0000
ROA not before: Wed 08 Nov 2023 07:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:c7:3d:93:8a:42:ec:e4:d8:e0:28:05:41:96:31:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 07:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=685d8f588d06722e8760ad8c85f6c1df3481e955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:be:b0:5c:5a:e5:43:6e:4e:f8:40:bb:a0:
78:78:f7:d4:e2:0b:e1:6c:98:bb:c2:d4:a5:6f:fd:
0d:9f:31:3a:fb:f0:ae:7e:31:d4:0b:6d:03:8a:f6:
df:59:fe:fe:94:5a:5b:79:5f:df:2f:ef:b8:4e:5a:
a6:70:2e:f0:b7:a1:df:e4:26:5c:2b:d5:3e:1f:97:
fb:09:69:08:16:97:3b:78:64:bd:4f:80:20:3a:b6:
b8:8f:5f:e1:41:8e:2b:a8:20:01:db:52:f5:02:e1:
4f:a6:96:42:f0:45:17:53:91:ab:71:14:f4:3e:77:
89:56:16:d9:4c:46:b8:01:70:43:89:bb:7c:b8:56:
53:fe:61:56:74:b7:88:05:5c:c7:1a:7f:60:c1:e4:
a3:6b:b7:1f:66:4c:0b:86:fb:a1:48:88:a6:15:eb:
cd:b8:b4:61:b6:ba:77:e5:b5:40:2c:28:47:97:78:
df:71:0c:de:86:bd:71:fe:1a:4c:46:39:9c:cc:d5:
76:48:19:3d:59:ab:76:c6:74:c1:61:71:ae:b8:3d:
43:dc:88:62:fa:8f:62:3a:23:8b:d7:8a:f3:6b:6e:
72:14:19:13:fc:9b:fd:c0:94:44:e3:57:33:2e:b5:
92:50:14:95:14:7e:fe:10:23:43:dd:86:74:9e:0e:
d1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:8F:58:8D:06:72:2E:87:60:AD:8C:85:F6:C1:DF:34:81:E9:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aF2PWI0Gci6HYK2MhfbB3zSB6VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:1b:a1:29:18:9f:c1:08:86:5e:ad:aa:7c:df:e3:6a:59:a0:
90:ce:fa:3c:94:b4:13:4b:3d:94:68:c3:d8:26:d0:db:56:e3:
8d:99:6a:09:e6:06:de:d1:f6:e7:00:66:b6:87:86:5c:d1:ee:
a0:f0:8c:61:3c:24:c1:1f:2d:5d:86:ab:8a:c2:44:24:39:a0:
7b:48:ce:d7:03:21:dd:ab:2f:3c:85:7f:01:74:b2:64:e4:71:
6c:c1:ab:ab:80:db:65:e4:2e:92:6f:95:c7:dc:39:06:78:2d:
0d:89:ba:ae:79:e1:45:fc:58:bf:29:29:c6:af:1e:22:8b:ac:
9d:e5:58:09:1f:a9:06:18:46:3e:bc:f5:bb:05:6f:8b:86:dd:
a8:f3:2f:d8:81:40:6b:de:b3:a9:c9:e1:1a:54:c5:4d:5c:e1:
e6:b8:45:ed:18:1d:3e:56:38:50:d9:ab:35:c8:6f:78:88:77:
bc:b1:66:85:48:7e:87:29:37:52:01:ad:52:4c:c3:c1:cc:76:
a7:04:a4:08:2e:20:ba:de:1b:a0:70:e0:de:83:ac:63:5a:96:
f5:b4:a7:2d:86:92:fb:26:f9:46:16:69:18:37:14:1f:c4:53:
9c:67:f2:6d:6b:4c:c2:c0:1a:44:5c:7e:a8:09:60:88:c4:68:
1d:ef:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:48:34 2025 by rpki-client