Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/amk_0JU2EnVzh9BQff4oeCJhMTE.roa
File: amk_0JU2EnVzh9BQff4oeCJhMTE.roa (raw, json)
Hash identifier: nULkX90FnIbp9kEjQ40sF2M0bOJG9weOmII2W1MSnKo=
Subject key identifier: 6A:69:3F:D0:95:36:12:75:73:87:D0:50:7D:FE:28:78:22:61:31:31
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B40FDA520AA830E0622708E9E87E72C00
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/amk_0JU2EnVzh9BQff4oeCJhMTE.roa
Signing time: Wed 18 Oct 2023 04:14:06 +0000
ROA not before: Wed 18 Oct 2023 04:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:40:fd:a5:20:aa:83:0e:06:22:70:8e:9e:87:e7:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 18 04:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a693fd0953612757387d0507dfe287822613131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:19:5b:57:43:f1:20:14:13:db:e5:b1:f3:
77:16:d0:02:af:46:e2:61:ff:7b:f4:2e:f8:49:4c:
9d:70:e5:1c:64:e8:ef:c8:3d:5c:f2:57:b2:c9:a2:
b4:71:53:0e:49:b3:fb:68:ca:0d:5b:3e:f4:78:ec:
e0:a2:85:a5:51:dc:2e:74:89:57:09:cb:84:7a:51:
77:af:4c:f8:d7:6b:03:de:ad:f2:93:40:d4:9b:9e:
79:a1:d7:ff:52:00:f0:05:67:01:ea:35:df:63:39:
b5:65:e4:2a:c4:cd:f0:23:6b:2c:e4:de:05:42:70:
71:aa:fa:e3:79:22:24:f8:aa:71:de:94:0f:03:fc:
c2:76:c6:34:c4:d3:60:bc:c5:95:aa:72:35:0e:ba:
e7:d1:2e:1b:3d:12:93:41:f1:89:60:a0:ae:72:5e:
d0:23:db:a9:88:54:b5:6c:da:3d:38:7e:bf:75:46:
f5:02:b3:e5:a1:5c:b5:eb:bd:8a:cb:bf:c0:cc:f2:
37:04:19:91:e0:bb:7c:99:55:14:9a:86:6c:30:18:
2a:bb:1f:a6:ab:fa:1b:4d:fb:0d:ad:cf:b2:cb:94:
3e:86:ce:f2:af:75:b2:12:75:bd:b1:91:3b:86:45:
e8:c4:f3:2e:c5:84:54:30:67:66:08:02:0f:e8:8d:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:69:3F:D0:95:36:12:75:73:87:D0:50:7D:FE:28:78:22:61:31:31
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/amk_0JU2EnVzh9BQff4oeCJhMTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:8d:8b:d4:4b:a0:73:b6:1f:49:69:0b:f2:41:9b:fa:28:ee:
46:c1:49:a8:2b:dd:68:3d:d7:d9:ee:8b:87:2c:88:fa:29:c1:
78:28:01:5d:f2:ec:64:42:d7:d4:9f:b2:ee:33:a6:a3:16:77:
c1:0b:dc:b2:fc:c5:43:ce:ac:56:f3:fd:e8:73:aa:0e:92:35:
af:23:8c:6a:93:13:c8:52:84:61:c6:02:c3:dc:dd:86:aa:aa:
0c:16:e6:93:ec:6a:f9:09:e6:ed:0e:da:c9:fc:f9:39:2e:c5:
bf:41:6f:1a:8f:aa:f0:77:37:35:6e:87:b8:66:c0:9c:46:6b:
57:da:96:47:21:ee:2a:c5:a9:a0:44:b2:3d:bf:90:d5:8c:8d:
94:6b:93:bc:3c:48:e8:0c:9e:f0:e1:cf:4e:70:09:96:29:90:
8d:6c:b2:3f:53:56:7c:e4:5e:35:91:c3:19:2d:47:f2:c6:d5:
f6:67:54:d6:f0:8e:db:17:51:b6:fe:64:18:87:cd:14:d8:b8:
4f:ad:00:0b:42:e9:df:e7:32:6c:04:88:8d:ad:59:2b:e9:86:
aa:58:d8:e1:6c:76:a5:db:e9:bf:3b:18:3f:59:20:cb:40:dc:
79:87:09:dd:dd:75:a9:2c:49:26:0c:57:89:b1:38:7e:53:bf:
f5:97:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:30:00 2025 by rpki-client