Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c-l2wRU188s1v7Ytks21HH9Wtyw.roa
File: c-l2wRU188s1v7Ytks21HH9Wtyw.roa (raw, json)
Hash identifier: b/9UvC/zo5eK9Z83IYbB7+3ksbDIDvUPPWtzMwzaX0U=
Subject key identifier: 73:E9:76:C1:15:35:F3:CB:35:BF:B6:2D:92:CD:B5:1C:7F:56:B7:2C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2F9B19E6764F243CBF2390F921094B19
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c-l2wRU188s1v7Ytks21HH9Wtyw.roa
Signing time: Sat 14 Oct 2023 19:12:55 +0000
ROA not before: Sat 14 Oct 2023 19:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2f:9b:19:e6:76:4f:24:3c:bf:23:90:f9:21:09:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 19:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73e976c11535f3cb35bfb62d92cdb51c7f56b72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:7a:b0:c9:e6:7e:15:cd:f2:ef:3c:ee:bc:
c1:b4:bd:44:ac:b9:03:90:6e:82:e6:57:0b:92:ed:
16:fb:65:de:10:79:57:bf:8d:47:d4:00:48:83:fd:
c5:f0:13:8e:0b:87:78:31:29:58:ee:d3:af:20:0c:
6e:7d:48:74:69:16:d8:ce:ff:55:a2:61:d7:e1:d9:
ec:f7:fc:a6:03:80:a4:76:d7:30:63:d8:b2:c3:fc:
b2:a5:df:35:bf:aa:59:3a:ad:10:44:17:d6:e0:ea:
57:72:44:e9:f1:2c:8a:26:48:4d:98:e0:7f:dc:70:
f0:2b:4a:af:b9:f4:21:d4:88:c0:2a:00:08:5d:eb:
e6:93:c4:09:0d:57:41:27:74:f4:69:59:8f:f0:fc:
e7:a0:92:26:ac:ec:35:46:de:5e:4f:4b:de:0c:1e:
33:38:5e:a2:e8:29:f9:a9:36:d6:36:1c:c3:fa:7c:
d0:57:c0:85:e7:75:a5:0c:36:17:ff:6a:87:6a:8f:
51:ff:8f:b4:8e:5f:b8:68:2e:95:80:25:f8:ee:80:
52:ee:f4:e5:9f:20:be:1e:2d:46:5c:7b:85:1c:05:
34:9a:89:2c:ca:de:07:19:4a:45:48:70:14:12:02:
4c:1f:c1:d5:e5:94:86:d6:d3:10:da:98:85:48:56:
bb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E9:76:C1:15:35:F3:CB:35:BF:B6:2D:92:CD:B5:1C:7F:56:B7:2C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c-l2wRU188s1v7Ytks21HH9Wtyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:d1:3d:2a:8d:8c:2e:1e:0a:c7:ac:1a:18:8e:74:44:d9:1c:
02:9b:44:fd:e4:ea:15:50:14:20:e6:8a:40:38:40:1a:30:b5:
e7:ef:e1:30:85:de:82:2f:a5:2f:32:96:ec:29:ea:fc:e2:8f:
4e:19:44:bc:2d:10:9d:98:89:23:b4:da:a6:48:ea:46:e6:64:
c1:bf:c1:37:68:a9:66:fb:16:62:e7:80:7f:6d:1b:61:05:06:
9e:2e:38:e1:bd:18:bb:f4:12:b8:03:18:09:70:5c:2b:6f:b3:
fd:4a:5e:e0:70:f4:2a:ad:21:64:44:fc:d1:52:3b:a6:83:a3:
e2:7a:a3:fe:fd:e9:4f:d4:34:65:8a:7a:55:57:eb:69:c7:6f:
4a:a0:14:57:67:f4:d1:c8:fa:c1:2c:07:7e:f9:84:c5:d6:10:
31:80:24:a0:84:4b:33:f0:57:3d:e9:07:b6:3a:78:a3:31:57:
77:c3:ab:6d:9f:a2:52:72:07:07:00:a5:ac:78:8c:e4:a1:2b:
e5:31:18:6e:76:b2:ab:83:48:7b:6c:27:e7:e0:77:f3:fd:ca:
24:46:01:a4:9f:af:34:68:bf:89:48:2f:f4:c7:f4:e3:8a:7b:
8d:46:63:97:2b:1a:5f:84:ed:bf:58:cb:72:29:f0:72:37:2d:
81:86:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:12 2025 by rpki-client