Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bgBvrNbxFzNrPw2szovU2ieZXqk.roa
File: bgBvrNbxFzNrPw2szovU2ieZXqk.roa (raw, json)
Hash identifier: D4WZrsPciqQWuRBOJDoROg8WuZgSBgj2MGzelKx3GI8=
Subject key identifier: 6E:00:6F:AC:D6:F1:17:33:6B:3F:0D:AC:CE:8B:D4:DA:27:99:5E:A9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7A0EDD20FB0ABEC9BEC89145133D933D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bgBvrNbxFzNrPw2szovU2ieZXqk.roa
Signing time: Sun 29 Oct 2023 06:11:16 +0000
ROA not before: Sun 29 Oct 2023 06:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7a:0e:dd:20:fb:0a:be:c9:be:c8:91:45:13:3d:93:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 06:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e006facd6f117336b3f0dacce8bd4da27995ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:01:2d:4f:d5:69:8e:a7:0d:0e:f1:35:23:
f6:e7:ea:37:53:cd:8d:0b:b0:5a:22:6c:83:51:4c:
01:91:a8:de:43:86:df:95:46:50:e5:a9:d9:69:f6:
0e:4e:4d:e6:60:3b:52:d2:1a:26:af:35:ab:77:58:
aa:bd:85:1b:8d:e9:77:aa:fd:db:d2:5e:0f:6e:e0:
78:7b:6b:e6:9b:ab:e5:5f:d9:32:dc:c1:d1:63:84:
fb:8e:86:f7:4c:f3:75:d1:08:ce:73:17:db:87:9a:
e6:e2:ab:93:4f:74:a9:9f:eb:3f:49:c2:37:04:82:
e5:b2:6d:44:b4:17:bb:0f:48:5e:f9:df:9a:66:16:
74:cc:72:3e:10:c1:2d:be:a0:1a:39:3a:da:6b:0f:
9e:fa:fa:76:4b:c5:d7:17:7b:af:75:a2:e9:c9:89:
5b:66:ae:95:22:e8:58:68:41:4b:66:68:d7:ed:73:
7a:f4:8e:b1:0f:0b:a9:a1:6a:cf:a2:38:5d:84:94:
51:59:10:ae:9d:8b:f2:c0:dd:a9:6c:38:a7:ad:d1:
3a:3e:f5:39:4a:02:db:e6:a2:0b:a7:c3:c7:43:75:
ba:a1:59:96:4f:41:27:c2:79:90:95:85:ce:63:fe:
64:2f:4b:5c:fd:ad:65:1a:4f:58:01:54:1e:0f:85:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:6F:AC:D6:F1:17:33:6B:3F:0D:AC:CE:8B:D4:DA:27:99:5E:A9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bgBvrNbxFzNrPw2szovU2ieZXqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:d5:a6:d6:70:ed:8e:04:bd:4c:e5:8d:4a:c5:32:c9:e0:80:
48:f2:ab:e1:6e:07:e0:d9:70:f6:7c:11:0e:6c:1a:41:f9:f6:
1f:d1:0a:3b:c4:26:4a:e4:04:f9:19:29:dc:ef:74:21:fa:a5:
ec:44:9d:20:23:2e:c7:bc:5d:39:24:a8:42:5c:e9:a8:e3:46:
8b:e0:a9:af:a6:82:df:f7:9a:50:a1:0e:be:58:ef:95:31:18:
dd:e0:97:04:8a:95:d5:d2:79:be:fd:c5:bd:95:da:b9:93:47:
31:39:77:35:1f:a0:11:65:06:fd:69:40:86:d6:29:cd:73:79:
e5:3d:86:e7:eb:d6:52:a2:6d:f8:fe:27:02:2b:b4:0a:e1:74:
7e:59:a9:50:43:a4:1c:10:a5:a3:f6:47:9f:ff:fe:c3:24:cb:
fb:c2:82:b2:18:19:29:44:4d:7b:5b:1b:4c:ab:92:bb:c8:a8:
5b:50:a2:46:ed:7e:b6:7d:29:cf:19:61:21:1a:0b:1a:48:3c:
17:e1:15:0b:22:e8:e8:df:06:94:34:cd:25:8a:d2:6b:dd:01:
df:fa:a0:29:54:7d:54:d9:ff:49:18:f7:f2:cf:d7:f7:e7:29:
ea:cf:24:49:8a:bf:fd:1f:03:18:54:01:41:4a:d3:c7:40:8a:
ae:fd:c0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:04 2025 by rpki-client