Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cXxBFWtdvqVGiwY9LqR1JueR_BQ.roa
File: cXxBFWtdvqVGiwY9LqR1JueR_BQ.roa (raw, json)
Hash identifier: tUz+zSqoVJzN6k458ZTdrNVaDB850StYQYy1V7E/BH4=
Subject key identifier: 71:7C:41:15:6B:5D:BE:A5:46:8B:06:3D:2E:A4:75:26:E7:91:FC:14
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C26C480EDEED3FC4F7D85E93ED7540D88
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cXxBFWtdvqVGiwY9LqR1JueR_BQ.roa
Signing time: Fri 01 Dec 2023 19:04:21 +0000
ROA not before: Fri 01 Dec 2023 19:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:26c4:7d24/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:c4:80:ed:ee:d3:fc:4f:7d:85:e9:3e:d7:54:0d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 19:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=717c41156b5dbea5468b063d2ea47526e791fc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:69:97:58:4d:38:4c:69:4b:3f:3d:ac:6c:
3e:24:1a:0c:70:93:e1:b5:11:74:a1:ce:9f:70:01:
ba:a7:4e:6c:8f:9b:4d:95:8c:51:bc:80:bf:80:11:
84:c7:ac:38:9c:b9:2d:05:15:98:2b:69:b6:1c:a2:
a6:f7:e3:b0:59:02:48:0c:a0:8e:3d:9d:c9:f8:2e:
c7:79:3f:63:50:78:a5:66:0b:17:53:e5:95:8e:95:
8f:86:73:89:a0:24:0b:b6:fe:31:3e:fb:01:78:88:
16:17:b4:01:16:bf:e4:7d:bf:77:a7:43:a2:f0:22:
7a:ad:b9:8f:73:02:d7:b9:3a:0e:40:c9:07:fb:79:
2f:db:37:68:2d:9b:71:a4:63:84:e6:47:2d:5f:84:
b4:56:ee:e6:06:2f:73:78:0f:a4:2d:80:26:d6:d0:
d6:bc:1a:29:da:bb:6c:91:50:ff:6a:ce:cc:38:e3:
25:36:e0:f1:12:bd:b9:83:8d:cb:06:b3:26:b6:cf:
ad:32:cb:73:66:fb:86:54:10:25:8e:05:8d:24:7f:
72:c2:ec:92:8c:ea:57:9e:c7:e0:0a:be:aa:19:68:
8d:37:d6:e3:95:e8:c9:53:1b:28:e5:18:57:50:a1:
40:bc:07:01:d2:23:53:71:09:15:86:62:ee:65:f8:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7C:41:15:6B:5D:BE:A5:46:8B:06:3D:2E:A4:75:26:E7:91:FC:14
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cXxBFWtdvqVGiwY9LqR1JueR_BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:37:ab:d7:1c:f9:07:78:9b:55:a7:53:e7:40:63:0f:f7:59:
5e:86:c1:88:64:83:a8:41:81:10:df:cb:2d:8e:cf:be:78:f5:
74:cc:25:96:cd:4c:5f:15:2e:b0:f4:b0:10:b7:cc:f2:75:79:
41:40:2b:00:8e:61:6b:5d:34:c0:df:43:c6:16:0d:8f:dc:89:
4d:d0:28:c3:35:66:31:fc:a4:ce:0e:6e:f1:e3:a6:c3:97:42:
26:1b:08:64:e3:77:d6:b7:86:ab:5a:0a:14:1d:ec:7d:36:2e:
0e:23:c1:7b:3d:4f:73:5e:c9:61:3d:2d:d3:75:ae:01:98:4e:
4a:64:40:a9:b0:08:e8:bf:78:d3:02:2f:74:3b:60:0b:26:bd:
41:1e:1a:9f:2a:59:5b:ef:1e:79:f2:25:be:e7:9a:25:6b:3e:
b0:e6:61:0e:80:25:b4:8c:2d:d3:37:fb:16:21:23:7e:65:64:
c0:1d:f1:bf:0f:42:9d:47:7c:2e:1b:f9:2f:1b:ff:3f:41:d7:
21:ba:db:79:60:ca:51:4e:b2:25:fb:81:c9:14:d9:2c:e7:ba:
0f:11:40:c9:25:b2:ca:73:09:3f:87:7a:53:54:dd:8b:2b:e9:
74:c4:a1:07:c3:ea:91:22:79:18:0b:07:dd:68:4b:3e:1c:fe:
b1:37:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:53 2025 by rpki-client