Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aUalYBAphKweUxF19AM_PB3xim0.roa
File: aUalYBAphKweUxF19AM_PB3xim0.roa (raw, json)
Hash identifier: HuJxXoqMKxDvela3LI2A21rbE5quA3EiRAhmcS3zTKY=
Subject key identifier: 69:46:A5:60:10:29:84:AC:1E:53:11:75:F4:03:3F:3C:1D:F1:8A:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE9006F2C615362DB61AACDC919619C1A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aUalYBAphKweUxF19AM_PB3xim0.roa
Signing time: Sun 19 Nov 2023 19:13:21 +0000
ROA not before: Sun 19 Nov 2023 19:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e9:00:6f:2c:61:53:62:db:61:aa:cd:c9:19:61:9c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 19:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6946a560102984ac1e531175f4033f3c1df18a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:99:a8:a8:01:23:3b:8d:65:80:ea:e1:c9:
90:fb:03:4e:45:e8:bc:61:9e:db:b4:3b:ee:39:da:
ab:0c:36:f4:16:01:f2:13:e8:60:3b:26:6a:c6:4c:
c3:9c:fa:72:41:ae:d4:f8:93:a7:19:c7:31:3c:ee:
11:2d:b4:f5:d3:ed:83:aa:e0:ae:b5:e5:b8:fd:d3:
b8:85:77:da:4f:34:d0:e7:3f:88:6b:98:f4:b6:3e:
5c:cf:e1:df:af:52:bd:04:f5:a0:8e:01:e2:ac:42:
0d:22:a1:cf:dc:9e:82:5b:3c:10:9c:48:49:a2:81:
1f:1b:e2:f7:de:b2:44:32:b9:80:ae:d7:fa:08:21:
f8:18:22:c7:22:96:63:16:40:0e:24:d8:b9:17:86:
d3:34:88:df:d7:c0:be:cb:9c:b9:b7:d2:d5:7e:a9:
42:b7:01:d1:ed:03:71:a7:66:0c:f3:26:b8:69:0c:
22:fc:44:93:b3:83:f6:07:bf:11:2a:96:ac:18:28:
16:de:fe:f7:be:3b:23:9c:ff:de:5e:d4:27:ef:5d:
f4:18:e8:22:69:27:b1:a7:73:be:d6:21:62:f7:2c:
c5:cf:83:43:40:34:0c:5e:24:5d:20:e5:9f:f0:44:
1c:e9:17:b4:dc:a1:cc:40:d9:4c:fd:4b:f2:a1:f9:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:46:A5:60:10:29:84:AC:1E:53:11:75:F4:03:3F:3C:1D:F1:8A:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aUalYBAphKweUxF19AM_PB3xim0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:3d:17:80:2e:52:32:bb:b6:d1:95:01:19:ba:99:b4:e6:67:
aa:41:62:98:fe:10:8f:ba:a2:96:bc:89:ba:56:ee:15:76:9c:
9a:cc:6c:ff:8c:b2:6c:37:56:cd:3f:f5:e3:6e:44:9f:a3:73:
be:e2:64:31:57:a3:81:a9:23:6e:52:a4:4b:0d:f1:02:c1:db:
40:c9:c0:18:fa:c6:4a:14:e6:a9:00:0b:0a:bc:07:e1:2f:7f:
46:9c:dc:f9:53:b0:11:79:55:32:43:fb:70:04:92:83:5b:25:
48:a4:bb:09:97:b8:5f:8b:e8:ea:6c:04:c5:03:d1:20:42:e6:
12:5e:c3:71:11:b2:63:f2:c6:53:6d:b2:c7:22:b3:e2:74:31:
cf:57:fa:37:19:6e:b1:58:a3:6b:9e:d3:05:3e:dd:23:47:82:
92:f8:5c:7f:b6:9d:99:d1:b7:71:85:74:34:ac:04:14:35:ab:
98:74:65:e3:35:30:3a:34:e7:e9:92:e8:dd:42:b6:0e:7f:d9:
8c:38:16:4a:8e:1a:68:09:1b:38:a9:b6:4a:66:95:d4:67:40:
63:fb:4e:9c:91:bc:d5:b4:3b:c3:2a:bb:e4:13:3c:1f:bf:66:
a7:99:16:45:91:ac:38:dd:88:f9:9c:f0:ea:c4:c3:f5:29:91:
db:94:ca:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:49 2025 by rpki-client