Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aUPtfKq7LZ0HUk3viABwQLbriAw.roa
File: aUPtfKq7LZ0HUk3viABwQLbriAw.roa (raw, json)
Hash identifier: Gb2HYlGcGPSnNT0Qw2uMXRY/X8NSOVnp2xmqMjA8Dvc=
Subject key identifier: 69:43:ED:7C:AA:BB:2D:9D:07:52:4D:EF:88:00:70:40:B6:EB:88:0C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA8D50BB36723580648C4CFC62827CD09
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aUPtfKq7LZ0HUk3viABwQLbriAw.roa
Signing time: Tue 07 Nov 2023 08:10:16 +0000
ROA not before: Tue 07 Nov 2023 08:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:d5:0b:b3:67:23:58:06:48:c4:cf:c6:28:27:cd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 7 08:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6943ed7caabb2d9d07524def88007040b6eb880c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:b6:16:3c:a5:8a:43:23:02:c3:d0:69:c5:
f7:31:87:d9:b9:35:d4:35:d2:17:11:8e:e6:b3:be:
6d:ad:3f:3b:e3:43:14:c4:71:67:5a:e2:67:c8:a5:
ba:5f:5d:83:b1:f4:ba:b5:52:9a:71:44:86:7a:31:
3b:54:d9:30:2c:0f:1a:21:2e:76:26:9a:78:09:5a:
81:8c:9c:ee:77:5b:35:4b:f7:78:87:18:87:48:8a:
10:36:d0:c7:95:70:13:f9:38:3f:37:0f:c9:bb:3f:
1d:de:8b:02:33:fd:c6:b4:ab:e8:2d:b7:7a:2c:7a:
85:09:df:cf:1b:97:7e:a0:92:76:be:ef:95:03:11:
16:fa:1b:0d:e3:b4:80:b4:7c:49:4c:a4:4e:38:ab:
ce:12:e3:49:67:ad:b4:2a:4f:8e:02:a1:44:12:18:
bd:4f:51:f9:36:b4:0c:3c:db:39:95:b0:66:4b:f6:
b9:d2:3c:ed:8a:fc:c0:03:57:16:ae:22:86:38:58:
a9:01:71:0e:19:65:ea:3f:e4:3f:40:73:d0:f9:d9:
49:6b:6f:41:e5:65:eb:62:7d:93:86:3c:cd:8a:ad:
c0:a7:6b:3b:3c:0e:32:96:16:16:fa:e9:4e:19:b5:
5b:f5:bc:34:73:ea:e2:15:b1:74:5f:79:d9:ed:d2:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:43:ED:7C:AA:BB:2D:9D:07:52:4D:EF:88:00:70:40:B6:EB:88:0C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aUPtfKq7LZ0HUk3viABwQLbriAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:ab:36:43:8e:a9:e0:90:b6:53:5d:d9:a7:d4:e5:9a:13:1e:
97:43:48:7b:7f:56:fd:93:f3:f4:0a:d2:21:af:a0:7b:3a:20:
07:57:ef:80:ff:dc:b0:6e:58:34:45:f4:5b:8d:f0:f6:a1:e1:
2d:d1:cd:ec:2d:51:3d:55:c9:8e:b0:fd:90:68:cc:b7:d4:16:
ce:99:d6:52:b5:7c:77:6c:fe:1f:cc:15:d3:6c:0e:7a:c3:1c:
11:3d:04:16:5d:09:a0:1e:5c:98:95:ee:cb:46:1e:c9:21:d8:
2b:8f:d0:3d:06:36:fb:14:da:7e:e6:54:dc:22:0e:bd:be:ff:
cf:79:6a:c6:ea:3f:06:f5:7a:03:bd:db:fb:de:a9:bf:01:85:
62:0d:11:c4:e3:f4:1d:39:91:c5:cd:79:2c:bf:41:d5:4d:9c:
f0:80:05:ca:28:04:3b:dc:fb:10:99:97:8c:4d:9d:43:2b:94:
a1:47:64:30:54:a6:e3:d8:90:b9:63:6f:1d:bd:9a:64:ca:df:
9a:d2:a9:88:c5:2e:68:b1:f2:81:e3:d1:ad:6f:90:a5:03:0c:
ed:7a:b9:0a:c4:24:00:76:16:73:5c:42:5c:55:35:ac:df:ec:
57:c7:fc:e1:16:d3:e0:8f:1c:6d:49:b8:7d:31:ff:dd:9f:17:
7a:57:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:26:48 2025 by rpki-client