Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cAiug0sv6ACxevgIJjAfyTXOYEg.roa
File: cAiug0sv6ACxevgIJjAfyTXOYEg.roa (raw, json)
Hash identifier: gJN4R+8VPmeQ9A7BKA64Qxi6hiaD/HWo42qgrUafrVc=
Subject key identifier: 70:08:AE:83:4B:2F:E8:00:B1:7A:F8:08:26:30:1F:C9:35:CE:60:48
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE5CB9A22A91B009F2E3C0484B507917F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cAiug0sv6ACxevgIJjAfyTXOYEg.roa
Signing time: Sat 30 Sep 2023 11:14:00 +0000
ROA not before: Sat 30 Sep 2023 11:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e5:cb:9a:22:a9:1b:00:9f:2e:3c:04:84:b5:07:91:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 11:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7008ae834b2fe800b17af80826301fc935ce6048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:c8:cc:78:58:fc:09:47:a8:fd:9b:1a:60:
56:ae:64:b2:0e:14:c6:7d:6e:1f:99:ea:37:eb:e5:
82:f8:42:53:b8:53:0c:f9:c5:e6:53:c6:4f:fd:49:
06:8e:68:83:1b:1c:cd:67:89:5d:96:a9:f7:eb:a6:
5a:f1:15:a7:5b:14:f2:87:db:c8:7c:74:9c:00:b1:
e8:5a:a3:2d:27:10:a1:5e:2d:59:13:03:92:e9:79:
1a:41:25:d8:21:cb:c9:dd:35:b5:fb:ff:8f:30:db:
17:97:8f:bd:d4:d4:13:94:e7:11:e6:b7:ef:87:40:
55:87:1b:10:08:52:a8:5a:3f:8c:c6:d9:2d:f5:bd:
a9:f6:32:bc:25:31:92:d7:cb:d6:d0:75:18:d3:39:
3b:7c:9f:eb:02:c5:67:03:0b:3e:d5:15:19:8b:a7:
ae:36:62:cc:7a:67:c6:66:4f:2f:21:37:56:e4:2c:
46:92:f7:87:42:fe:dd:17:80:16:cf:1e:04:51:db:
e8:da:d9:bf:07:96:d7:6f:c4:b8:15:cf:38:a7:7b:
67:9e:9a:87:e3:dd:7b:77:36:2b:b3:d0:c0:d9:48:
90:e6:69:82:83:6d:25:52:4b:f2:b4:31:b2:bd:14:
50:a8:6f:48:4f:2b:88:84:72:cf:20:ef:4a:90:12:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:AE:83:4B:2F:E8:00:B1:7A:F8:08:26:30:1F:C9:35:CE:60:48
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cAiug0sv6ACxevgIJjAfyTXOYEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:5b:8e:7d:1a:ce:ee:52:a2:7a:3e:1c:e4:7c:68:34:38:ea:
4d:a3:eb:37:31:98:51:cf:d9:54:47:82:74:7e:11:cd:b6:18:
9b:09:9b:85:80:21:ac:e0:a1:32:a3:ca:d6:ae:ec:09:93:e7:
8d:a8:4a:d0:0b:99:89:8e:b7:5d:b0:b9:46:22:d6:de:5c:79:
40:aa:22:16:7e:bc:c5:09:9b:b6:ad:70:e1:e8:10:e8:4e:6b:
6a:5c:a6:d6:44:61:de:18:77:e6:b7:dc:18:85:c9:07:a1:38:
8f:10:c6:3f:de:8e:f2:4b:80:65:19:8d:e6:43:c3:b5:f3:5c:
07:73:13:aa:03:d1:c8:75:85:41:38:d0:8b:bf:23:13:f7:4d:
48:1c:97:c7:b1:82:37:9f:79:04:5a:9f:a2:27:a4:13:05:be:
e1:bc:cf:1d:9e:4c:ff:02:5c:92:45:5a:8d:cb:35:9a:29:cd:
56:11:df:85:c6:d4:cd:92:7f:1e:82:6d:d0:d8:8c:dd:23:8f:
2d:a7:a3:f6:dc:6d:8e:86:53:5e:a3:05:60:d3:d8:f3:a7:19:
97:e2:cd:e8:90:82:c4:bf:df:ff:0c:1c:2f:52:d5:4c:e1:aa:
c0:45:5a:6c:87:3b:1f:3d:37:d1:13:c4:74:e1:c4:4e:53:82:
6a:c3:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:43:52 2025 by rpki-client