Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/adn9EcfuFywovD6_HNEJbWB3DtY.roa
File: adn9EcfuFywovD6_HNEJbWB3DtY.roa (raw, json)
Hash identifier: ELyHW/BoPI2BWe6vW1d83Thl6G557CHDd4A9KkFMCkc=
Subject key identifier: 69:D9:FD:11:C7:EE:17:2C:28:BC:3E:BF:1C:D1:09:6D:60:77:0E:D6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAF401FB44A4CAA40932EBE4ABF2B17DE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/adn9EcfuFywovD6_HNEJbWB3DtY.roa
Signing time: Wed 08 Nov 2023 14:04:57 +0000
ROA not before: Wed 08 Nov 2023 14:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:af3f:988f/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:40:1f:b4:4a:4c:aa:40:93:2e:be:4a:bf:2b:17:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 14:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69d9fd11c7ee172c28bc3ebf1cd1096d60770ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b6:12:35:1a:a5:cb:1f:70:72:5e:65:54:49:
c3:9e:1c:ac:72:a9:29:57:fa:e4:ac:66:95:33:d0:
1a:fc:ff:0d:fb:dc:6b:5c:77:01:e9:27:37:94:bb:
29:ef:8f:db:cd:e2:40:5f:d0:0a:05:93:0c:30:8f:
5d:7f:21:df:d4:3c:a0:69:a3:68:ce:5a:a2:10:b5:
52:a7:e0:fd:31:09:28:46:f0:d2:75:d5:9d:1e:01:
30:a4:46:16:54:ae:d2:38:d1:ed:8c:84:01:c3:76:
1e:17:b6:bc:bf:ab:25:c7:13:0f:ce:31:b8:88:7b:
4f:e3:3c:62:b3:68:4b:7f:bf:ca:6b:c9:97:92:fa:
c5:37:32:c7:96:b2:c9:4b:3e:65:39:fd:bd:f2:e4:
7d:ac:1a:b5:46:89:f1:35:77:2e:e0:21:e7:b7:66:
69:9c:df:9c:2e:af:28:4a:05:7e:26:bf:99:21:9e:
b6:cd:64:50:62:c4:a0:17:01:87:92:b2:9c:22:56:
bc:80:47:ea:0c:43:28:e1:3d:df:bc:55:25:1d:53:
fd:d4:3f:d6:f4:4c:9a:02:e7:f8:d5:dc:52:db:95:
ed:fd:35:8a:59:56:d1:46:61:9f:8f:a4:b5:d5:ca:
d9:d0:56:3b:0c:94:c3:89:cb:a9:a4:62:eb:1f:fa:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D9:FD:11:C7:EE:17:2C:28:BC:3E:BF:1C:D1:09:6D:60:77:0E:D6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/adn9EcfuFywovD6_HNEJbWB3DtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:e2:52:d7:de:5f:fe:37:bb:ab:d4:bb:63:a3:ef:4c:84:3b:
86:d9:5a:a2:7c:8d:ac:cf:3a:23:fb:6a:74:9f:c6:4a:77:7d:
2a:21:c1:9f:11:33:c3:a6:95:49:be:18:b2:61:14:e0:b9:35:
0e:45:7e:c4:50:9b:36:50:00:85:cd:b9:3f:07:e3:9d:a8:c8:
52:35:49:59:a4:44:9b:07:10:ef:e3:fb:db:24:d0:86:61:e1:
44:60:28:dd:bd:0f:0c:f9:5f:14:54:34:a5:60:df:43:5e:02:
b5:b0:f0:8f:9b:92:27:28:71:44:e1:52:c3:dd:e0:f4:37:69:
e8:c1:c0:f6:a4:06:4d:4d:6c:de:66:df:da:dd:dc:05:02:27:
2f:80:8d:2a:6a:87:82:30:35:1a:96:e1:85:fa:f7:19:43:ea:
10:34:c8:cf:f1:e8:47:d5:29:67:dd:d0:7e:9b:0b:e8:72:7f:
5b:bf:80:ca:d9:cb:54:64:2f:78:58:1d:17:d9:c0:2a:66:e8:
34:c5:df:44:ae:0f:0d:34:96:71:28:e0:9c:ba:9d:01:e0:87:
ce:a1:a0:a6:ef:c0:2e:d8:8e:d2:c4:10:24:4f:3c:53:86:88:
9b:1c:ac:2a:33:aa:1f:d1:a7:3d:e7:1d:19:b2:63:24:53:7f:
94:81:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:38:21 2025 by rpki-client