Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aHN6qPGGYBTa7mxjHN6PuQ0Io3Y.roa
File: aHN6qPGGYBTa7mxjHN6PuQ0Io3Y.roa (raw, json)
Hash identifier: Uocyu4kubcIXu+xqGMQekAL4vIS8oz+lnJo90VcPAts=
Subject key identifier: 68:73:7A:A8:F1:86:60:14:DA:EE:6C:63:1C:DE:8F:B9:0D:08:A3:76
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C597060E8DC1889389D95581D16FF37A8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aHN6qPGGYBTa7mxjHN6PuQ0Io3Y.roa
Signing time: Mon 11 Dec 2023 15:13:06 +0000
ROA not before: Mon 11 Dec 2023 15:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:70:60:e8:dc:18:89:38:9d:95:58:1d:16:ff:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 15:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68737aa8f1866014daee6c631cde8fb90d08a376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:a7:b7:8e:a2:ce:1a:8a:b6:50:c6:ae:a5:
8a:24:0e:b8:70:72:00:ef:1f:97:dd:69:ee:d9:0c:
41:13:a8:05:00:07:80:7f:d9:2d:3a:5a:ed:e1:d6:
c5:a8:5e:9c:25:75:06:a3:44:3f:5a:98:05:58:9c:
da:a5:6b:db:ff:73:67:09:37:27:26:50:2d:1d:1e:
bd:06:5d:7f:ed:94:49:6f:b8:01:7a:e7:0e:69:35:
32:57:6e:ad:38:10:a7:1f:ad:00:7c:1f:17:4b:4b:
66:3a:59:35:bd:bb:16:2e:54:fb:23:64:b6:26:d4:
92:c0:10:ec:2d:f1:87:51:ee:f7:0e:9d:f9:ab:8e:
89:28:b6:91:00:12:e3:f5:17:51:b4:c0:f0:27:89:
8c:f8:1f:d0:8e:02:23:b2:69:9e:37:a6:60:6e:13:
e8:91:66:c6:5e:d6:21:9d:d7:ab:91:89:fa:2b:80:
9e:fc:86:65:68:e4:4a:68:81:e5:5e:e7:89:1a:f8:
3c:fd:41:8d:8a:1c:83:78:1d:55:56:0e:9a:02:38:
be:6f:a1:d0:c9:cf:93:8a:4a:d5:d9:61:19:52:41:
de:64:6f:27:48:bd:af:1c:ac:8b:d4:1e:55:66:ac:
d6:8a:eb:15:7c:71:be:a7:f2:c8:46:e5:c9:0b:ab:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:73:7A:A8:F1:86:60:14:DA:EE:6C:63:1C:DE:8F:B9:0D:08:A3:76
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aHN6qPGGYBTa7mxjHN6PuQ0Io3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:44:38:a1:e1:6f:c5:40:ee:f6:79:28:4c:81:9d:6c:68:e9:
ed:3b:bd:14:6d:d7:08:e1:e8:83:00:6a:7b:e6:27:ec:ed:bd:
ab:e2:46:89:f4:fb:b4:4f:38:30:40:67:62:e5:a7:21:cd:d4:
d4:ac:c1:72:08:0c:7e:55:01:87:1d:e7:ee:9d:16:bc:d5:b9:
97:1f:85:59:2b:e4:d6:6b:8c:79:08:b3:41:3c:0b:0f:a1:ed:
bf:af:c2:23:f2:d6:5e:67:6c:70:36:48:92:cc:13:14:6d:5a:
02:db:a3:24:d3:48:4d:c8:86:aa:eb:a0:96:dc:a0:24:9e:75:
db:fa:c8:3b:7f:b8:29:4d:99:66:d8:84:fc:aa:24:3f:4f:ec:
dc:c6:a1:eb:33:32:15:2d:be:7f:c9:30:40:34:3e:90:ef:35:
fa:a1:3d:fa:f2:44:76:e7:31:23:1c:fe:9f:8a:d7:95:57:52:
13:c2:ab:4c:93:97:eb:da:85:b0:a3:7e:64:3f:a4:e9:48:9f:
29:b9:37:da:d8:bd:aa:b1:3c:f1:37:28:88:0e:02:09:d1:86:
52:bd:ea:b6:0b:66:dc:53:65:87:47:47:96:3b:71:36:5f:dc:
67:42:36:63:a5:dc:2a:64:1b:5e:4a:ec:ad:5f:8a:3b:58:4f:
c7:cd:af:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:33 2025 by rpki-client