Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/atGUgblM_8fLKUQO_KPg_u9Czgk.roa
File: atGUgblM_8fLKUQO_KPg_u9Czgk.roa (raw, json)
Hash identifier: /nZ1E6FnOavTeW38o7jKrelgRgQNkVEQLX7aUl97wE8=
Subject key identifier: 6A:D1:94:81:B9:4C:FF:C7:CB:29:44:0E:FC:A3:E0:FE:EF:42:CE:09
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACE2887BB1EC910608FEEA8C7740827E6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/atGUgblM_8fLKUQO_KPg_u9Czgk.roa
Signing time: Mon 25 Sep 2023 21:04:37 +0000
ROA not before: Mon 25 Sep 2023 21:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:ce28:443f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ce:28:87:bb:1e:c9:10:60:8f:ee:a8:c7:74:08:27:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 21:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ad19481b94cffc7cb29440efca3e0feef42ce09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:74:44:58:7d:0c:63:48:11:a9:53:cf:d2:
7f:15:6b:d5:8d:77:18:02:a9:2d:1a:b7:b8:4a:80:
1b:bb:f6:17:f9:8d:51:e4:a8:ad:36:60:19:a7:60:
85:e9:1f:d0:10:0d:1d:d9:9c:f8:df:3b:ae:b7:ab:
f0:da:21:51:0b:93:d7:95:ec:22:c4:68:a1:57:bb:
22:09:ae:4f:f6:66:d3:4c:03:7b:47:61:c5:b6:fe:
36:71:d0:60:03:b8:0c:ab:ee:12:2c:75:ad:63:12:
4d:12:52:22:f2:24:24:e8:e5:92:f2:48:da:d2:04:
9d:af:9c:0e:ea:19:70:ba:af:67:44:c2:b6:a6:12:
dc:32:18:c9:be:a4:2f:aa:50:80:88:13:e8:02:fd:
ea:98:eb:3e:4d:49:b9:e2:9c:80:3e:6c:bd:23:75:
9c:fb:cc:c4:96:6d:6e:60:5e:59:cd:36:47:f3:b7:
32:31:98:2e:19:e3:62:c3:84:4c:f2:f2:25:06:fa:
46:5f:8e:df:6b:74:56:42:26:1b:ec:f7:67:07:86:
18:ba:d0:57:53:7b:91:0b:ae:2b:71:87:64:2f:10:
0f:0b:73:a6:ae:a2:e8:12:b1:b3:44:26:bc:7d:fb:
16:3e:b9:01:f1:3a:d2:87:7d:b1:c2:23:01:aa:64:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:94:81:B9:4C:FF:C7:CB:29:44:0E:FC:A3:E0:FE:EF:42:CE:09
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/atGUgblM_8fLKUQO_KPg_u9Czgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:0c:3b:dc:62:10:d9:0a:ce:e5:b4:af:7a:4f:6e:6a:4c:97:
27:75:bb:f1:b4:e4:ae:52:cd:a1:47:22:bd:3b:4a:38:16:6e:
4c:a8:ac:e9:4f:0f:89:43:65:ee:95:f2:46:c5:fe:7f:86:6a:
78:a2:aa:46:ab:b5:a6:fe:17:3f:a9:4e:12:ba:81:55:d9:f8:
ff:d2:62:1c:5f:8a:bd:16:ee:02:c7:df:43:9e:61:a7:7b:96:
f8:3b:4d:bd:6e:0a:98:d6:96:69:4b:eb:d0:80:f9:cd:70:56:
75:68:61:4a:9d:94:b4:a3:86:ea:d2:3a:5b:e3:a9:0a:d5:fe:
4a:51:29:af:38:7b:c0:98:0b:d8:d4:97:60:ba:ea:a0:10:d8:
01:cb:c2:01:6f:12:b4:48:24:22:e2:c5:c7:2d:ce:ae:49:fd:
63:22:ef:18:2b:26:ec:21:7e:42:5c:2f:5f:03:d2:13:46:f3:
32:50:25:95:4d:93:97:fd:3a:a7:e7:a5:a5:1c:bf:cb:a9:27:
3a:a0:96:11:0a:82:c1:3e:ab:97:1c:15:93:c2:a0:e5:0b:66:
e5:e5:8b:da:2d:3f:64:09:a0:21:0f:f2:56:ea:46:d0:8b:83:
23:89:1e:4b:16:5f:48:fa:a3:4b:f7:d2:d0:8e:2d:a4:d0:0a:
6b:7c:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:33 2025 by rpki-client