Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cvwsuG4cylrlUiv4eVuCU2upal4.roa
File: cvwsuG4cylrlUiv4eVuCU2upal4.roa (raw, json)
Hash identifier: LEcSo1IjBP2yEr7Qt71FzttGFVtCrGRSsMWin53Web8=
Subject key identifier: 72:FC:2C:B8:6E:1C:CA:5A:E5:52:2B:F8:79:5B:82:53:6B:A9:6A:5E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB54BC87581D8C17F48C63E72EB446F63
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cvwsuG4cylrlUiv4eVuCU2upal4.roa
Signing time: Thu 21 Sep 2023 01:12:37 +0000
ROA not before: Thu 21 Sep 2023 01:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b5:4b:c8:75:81:d8:c1:7f:48:c6:3e:72:eb:44:6f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 01:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72fc2cb86e1cca5ae5522bf8795b82536ba96a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:c9:c2:37:eb:2f:06:46:44:c0:7b:61:cb:
a9:6a:fa:1e:81:f3:0d:eb:2f:a3:b9:8d:86:ee:b6:
5c:86:b7:c7:d8:af:08:b8:46:cf:ee:d3:4e:dc:d2:
94:7c:2d:57:f2:d0:e0:7e:f1:63:7c:74:bd:bb:10:
3e:d4:fc:a5:fd:70:50:e8:9d:e4:5d:4c:f3:3c:09:
27:04:8e:f0:6a:e2:2a:fc:2e:aa:21:d9:dc:ad:23:
89:ad:47:a6:4d:4a:ff:58:90:84:d2:f6:80:b4:50:
5f:a4:c0:4d:6b:84:4b:0a:c7:c7:a0:64:18:94:04:
c8:b5:24:8f:2c:82:5d:0b:b8:7d:be:eb:b9:2c:f4:
14:28:42:e2:41:fb:c5:0c:8b:31:09:f8:49:a6:38:
27:52:6c:5a:62:97:a1:01:c8:5d:ec:76:68:1d:b3:
88:4e:fb:7b:29:ac:74:8a:77:a8:bf:b3:4f:6f:6c:
4c:62:6e:09:c5:17:d7:20:ad:ee:5c:23:bb:a0:e3:
54:be:63:e4:86:af:da:9e:5b:a2:e6:a9:d9:b5:b6:
ab:0d:7d:a8:8a:06:73:ee:d0:9e:7d:62:3b:b7:96:
db:54:c0:25:27:e7:c1:93:05:7f:20:e9:02:a7:52:
c3:27:33:f2:81:11:1a:7f:8d:95:d6:0a:ca:5d:29:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FC:2C:B8:6E:1C:CA:5A:E5:52:2B:F8:79:5B:82:53:6B:A9:6A:5E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cvwsuG4cylrlUiv4eVuCU2upal4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:0e:b4:e2:13:60:ae:5b:92:c1:c1:3b:29:77:6d:dd:8f:bc:
af:2d:ab:50:34:9e:6a:17:06:9b:bb:ae:74:5f:20:28:06:8e:
06:0f:dc:01:d3:59:8b:d2:03:ee:ff:da:8c:47:bc:12:90:3e:
44:39:49:85:5c:17:c6:2b:90:3e:e8:d9:1c:70:f4:40:15:2f:
da:71:ec:9c:d6:f2:ec:8b:0e:de:16:6d:db:83:4d:d1:46:6e:
d6:e6:9f:85:8f:58:60:d8:bf:6f:23:09:55:18:a1:fa:16:ea:
37:ff:e4:75:86:6c:c4:09:91:49:3f:1b:04:c9:7c:2b:54:db:
37:ba:c2:06:2e:b0:2b:16:f9:c7:d8:0b:8b:3f:29:3e:60:df:
e0:23:c4:df:c0:78:42:7a:05:4c:99:53:ce:0b:d2:1e:54:d0:
a7:1c:7d:0a:77:14:48:e3:66:52:50:43:f9:2c:68:92:14:d7:
28:dd:df:a4:02:05:69:ef:66:68:73:41:2c:3b:b3:db:08:f4:
6b:d7:16:2a:68:3a:cb:04:08:f9:78:48:c6:57:d8:24:bf:75:
2a:e3:b9:37:38:b0:18:a0:38:3f:a6:a7:7c:7e:c4:68:b4:c7:
1b:01:ec:78:ca:55:c5:44:9e:12:bb:af:c2:a2:a1:1f:2d:06:
94:4a:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:45 2025 by rpki-client