Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cdpAs_xNqb-LqNaH3qDFLOCO5Jk.roa
File: cdpAs_xNqb-LqNaH3qDFLOCO5Jk.roa (raw, json)
Hash identifier: 2E7UGoWnEzbRhDPytoNZzcHlIOD8i1MzTxEPl1TSlzE=
Subject key identifier: 71:DA:40:B3:FC:4D:A9:BF:8B:A8:D6:87:DE:A0:C5:2C:E0:8E:E4:99
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD7995E58042BDFB2E65B9393C6DBE6BA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cdpAs_xNqb-LqNaH3qDFLOCO5Jk.roa
Signing time: Wed 27 Sep 2023 17:04:27 +0000
ROA not before: Wed 27 Sep 2023 17:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:d799:5997/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:99:5e:58:04:2b:df:b2:e6:5b:93:93:c6:db:e6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 17:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71da40b3fc4da9bf8ba8d687dea0c52ce08ee499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:75:7c:61:a4:e9:d7:a5:8b:88:78:f3:79:
be:e0:1d:99:49:f0:38:38:db:f6:19:c8:b2:1f:66:
e3:16:b8:64:5e:bc:eb:17:5a:a3:1f:6b:ba:4d:ca:
24:56:93:34:59:3f:3a:68:84:98:3b:13:8b:47:81:
67:4a:82:55:a7:6c:1f:27:0d:12:d9:23:cb:9b:06:
96:aa:0f:15:01:34:00:32:03:30:a6:4e:ce:10:a0:
39:6d:5d:86:6b:5a:fc:02:d8:f0:83:40:9f:27:1d:
98:b4:12:e3:9b:31:a8:e5:3e:ae:2b:a6:a1:3b:05:
f1:92:c6:20:a9:5f:89:a3:21:ee:7b:f7:22:45:b7:
63:9c:be:6a:c6:66:1e:e1:32:85:f2:b8:3d:3b:35:
02:10:d1:cc:57:e1:b7:06:ac:02:3e:2d:f6:e5:65:
14:5d:71:bf:f6:30:a5:d0:0f:18:a4:30:ab:10:b1:
21:57:d3:3b:ca:66:f7:0a:3a:90:26:a4:35:0d:bb:
d9:9c:39:0e:2e:07:cb:5d:ca:10:d0:dc:3c:0d:3f:
56:55:35:95:89:71:4a:14:04:05:31:83:9a:da:63:
27:24:30:a6:fb:5a:c1:0b:d4:ad:a3:e9:3a:22:25:
41:5b:c2:3f:bf:22:50:00:55:f9:be:b8:13:6c:09:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DA:40:B3:FC:4D:A9:BF:8B:A8:D6:87:DE:A0:C5:2C:E0:8E:E4:99
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cdpAs_xNqb-LqNaH3qDFLOCO5Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:97:2e:c1:e4:03:b5:ad:79:fb:9d:26:84:d4:0e:07:33:73:
96:9d:de:3f:65:8a:64:4a:f7:73:f7:ce:0b:39:7f:b4:9b:97:
03:1a:e6:dc:c9:67:e6:7e:a6:5f:b3:72:50:2d:04:74:0d:a8:
04:c2:7a:9a:c8:39:93:1d:74:55:e0:4b:4d:40:e3:f1:04:c8:
31:d3:4e:c7:2f:a6:48:fd:33:cd:c0:53:4c:c3:c9:12:16:2c:
d2:20:34:6f:87:20:15:92:0c:47:e2:1c:40:e5:54:1e:f9:a1:
7d:52:1f:02:9d:20:05:0a:73:47:04:22:b5:3a:64:0c:af:7d:
4f:37:1b:9c:9c:53:02:2a:87:01:87:40:7b:e4:26:55:27:0d:
b2:a7:fb:86:ae:49:c5:f3:6c:e3:42:d2:8e:ee:35:c0:dc:98:
c5:c8:52:07:c2:08:54:58:38:e0:05:27:03:30:a9:1f:04:b3:
19:ce:cd:c0:21:7d:6c:74:5b:a7:81:58:e0:e5:07:67:b1:d1:
55:7d:bc:62:c3:d5:7b:47:35:f5:2a:3f:91:33:ce:5e:1f:ba:
97:f6:e0:77:76:eb:9e:62:1a:44:a7:1d:69:0b:e8:8c:9d:7a:
71:0f:96:33:32:e7:a2:33:cf:92:20:35:6c:85:e2:38:6a:dc:
1e:83:04:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:55:41 2025 by rpki-client