Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aLmKGGPysfI1fqh00y60Je4bER0.roa
File: aLmKGGPysfI1fqh00y60Je4bER0.roa (raw, json)
Hash identifier: WVu6JT7GxBvgH7cS9C1oy7PGd9AUp0iWVOnn+V3XDnw=
Subject key identifier: 68:B9:8A:18:63:F2:B1:F2:35:7E:A8:74:D3:2E:B4:25:EE:1B:11:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4B4B6BA4F36E45CD3EC5A3E9EFF7112E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aLmKGGPysfI1fqh00y60Je4bER0.roa
Signing time: Fri 20 Oct 2023 04:15:15 +0000
ROA not before: Fri 20 Oct 2023 04:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4b:4b:6b:a4:f3:6e:45:cd:3e:c5:a3:e9:ef:f7:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 04:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68b98a1863f2b1f2357ea874d32eb425ee1b111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:30:56:91:a6:d5:4a:29:f4:70:86:53:1c:
67:2e:9c:19:46:d1:9f:ba:af:f5:a9:b8:94:94:2d:
aa:d0:a2:25:13:37:28:15:26:31:70:b8:73:5b:90:
5f:7d:1c:bb:7a:31:d5:ff:29:a0:a8:fe:3c:d3:08:
9d:dd:a0:0e:0a:12:1b:2d:4b:6c:50:b4:e8:ce:7b:
f0:a3:0a:17:eb:fb:40:ec:1a:a8:e5:3f:6f:51:12:
d5:59:53:29:29:ec:51:a0:e4:4a:93:8e:e3:17:03:
7a:58:15:61:ca:fa:33:37:55:66:97:df:10:36:18:
d8:c3:b1:23:e6:b9:6c:92:28:47:4e:09:9d:df:86:
be:56:91:7c:65:b2:13:30:95:0d:94:5b:e9:ca:b5:
59:69:12:ca:8f:09:92:35:be:7a:71:a7:71:e9:ad:
59:82:3c:fb:7d:05:25:35:44:db:e7:10:ea:b7:62:
fc:10:67:90:5b:61:15:7a:f5:33:0c:d9:e8:32:95:
f9:ff:02:b7:55:e2:ec:d3:7e:43:cd:84:d4:51:0c:
80:f6:e0:6d:71:07:8f:77:ca:8c:0f:dc:25:88:93:
04:1f:f0:08:fb:26:c5:be:50:d9:6c:c5:38:ba:62:
af:a5:c3:44:53:cc:35:d8:53:df:f9:d5:ca:69:40:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:8A:18:63:F2:B1:F2:35:7E:A8:74:D3:2E:B4:25:EE:1B:11:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aLmKGGPysfI1fqh00y60Je4bER0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:cc:27:82:80:6e:08:e6:92:aa:5c:f1:e5:38:f2:1a:ab:e9:
70:d8:ba:7a:cd:da:4d:56:42:fd:9e:38:67:e9:45:c9:b5:5b:
65:26:46:5e:da:d6:db:8e:1c:f0:a5:aa:34:94:44:04:90:47:
e7:3e:8e:85:2b:e5:ed:f0:1b:1b:12:18:b8:bf:fe:93:d7:69:
88:15:aa:74:d4:41:cc:bd:ec:6d:4e:ed:8f:d4:a2:f7:fb:12:
f6:b8:a4:96:b5:40:15:e6:37:e5:7a:c1:5a:6c:70:83:42:b6:
50:87:bb:2e:f5:3a:1f:80:75:8b:77:9d:78:79:4b:d9:5b:b4:
e1:f4:ff:55:49:44:92:90:2f:ac:b8:2c:0f:e0:4b:67:5b:f7:
54:01:32:b0:25:ba:9e:00:68:9d:fb:e7:16:04:08:55:07:bd:
f6:f2:a7:93:5a:81:07:d4:ee:29:fe:dc:e3:2a:bc:ef:28:a8:
73:a7:76:30:77:f1:46:58:24:b0:ec:d5:94:f5:a9:bb:8a:93:
9d:af:a7:2b:d8:bd:66:fb:16:84:e0:9b:c4:87:10:85:0c:0d:
2d:20:e5:51:ef:47:0a:5d:56:0e:8b:0e:8e:0e:dc:9d:2a:8d:
48:91:b9:a9:e2:81:63:49:f4:a2:ad:36:bb:2a:2e:53:5a:fb:
af:14:ca:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:16 2025 by rpki-client