Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dl58Q4CvODYFaxiRDbizfm-RecI.roa
File: dl58Q4CvODYFaxiRDbizfm-RecI.roa (raw, json)
Hash identifier: dxHBmtAzxJ9oLvBUhfiytS1ompitvscv4CgH0bHlJ/s=
Subject key identifier: 76:5E:7C:43:80:AF:38:36:05:6B:18:91:0D:B8:B3:7E:6F:91:79:C2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C40561F0F2B5D7CF11931EB954C8AF9FB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dl58Q4CvODYFaxiRDbizfm-RecI.roa
Signing time: Wed 06 Dec 2023 18:13:55 +0000
ROA not before: Wed 06 Dec 2023 18:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:56:1f:0f:2b:5d:7c:f1:19:31:eb:95:4c:8a:f9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 18:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=765e7c4380af3836056b18910db8b37e6f9179c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:92:e5:40:dc:68:a3:e9:da:6f:3f:04:ec:
4b:bd:f8:fb:97:5d:52:46:bd:52:ec:1d:0e:2b:14:
ee:d7:69:4c:48:75:db:5b:1e:6a:8e:03:95:51:48:
c9:d8:4e:9d:da:96:ee:bc:13:44:a6:27:6d:e6:8a:
31:b4:e1:2b:a0:48:35:c1:25:24:77:8b:e8:16:ac:
54:94:69:f9:d1:f9:ed:5c:56:66:af:bc:7d:77:84:
e8:6f:23:0f:6c:04:32:d5:e3:1c:53:d1:df:48:dc:
5d:7b:3d:f3:e3:5a:55:68:de:28:69:9c:b9:c4:ef:
68:6d:f1:13:0f:3c:b1:a9:33:ed:2e:e9:a7:13:e8:
37:11:b1:d9:d4:a6:e5:ca:eb:8f:df:9c:df:22:3e:
a1:0b:5e:44:43:a2:2c:b4:9f:7d:6e:0f:ba:56:ba:
17:40:fd:a9:ab:96:bd:bd:98:f7:83:8f:96:ee:da:
16:5f:73:c6:a7:29:76:21:61:47:a7:66:08:0b:f5:
69:62:c6:c7:fe:bc:44:5a:53:5c:53:9e:d5:6f:20:
5f:e9:2c:43:59:cb:05:de:07:37:9c:9a:c5:c1:d9:
75:35:bb:ed:8e:e0:86:65:0f:72:ef:79:7b:e6:6d:
03:26:3b:c7:08:ca:6d:5d:20:49:b3:73:69:87:1b:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:7C:43:80:AF:38:36:05:6B:18:91:0D:B8:B3:7E:6F:91:79:C2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dl58Q4CvODYFaxiRDbizfm-RecI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:f3:5b:32:3e:90:d1:ea:51:6e:7c:b9:a3:3f:30:04:35:f8:
dc:e1:0d:5e:e4:80:55:c3:35:1c:97:99:72:fc:40:cd:1e:31:
94:f4:90:20:16:61:c6:28:bb:06:07:bf:2a:52:50:7b:09:07:
43:bf:b0:1c:5f:e8:83:67:0c:76:3a:73:38:b6:d5:ee:0f:20:
e4:26:ae:bc:11:aa:c3:64:80:ba:7d:6d:4f:43:50:8e:77:15:
d3:8a:88:47:6c:7b:38:06:97:03:6c:01:a0:d8:c0:b7:8e:80:
d5:34:73:f3:5e:1c:ed:ed:e3:c3:1c:d9:c3:4c:d1:47:af:63:
84:f7:a8:59:0e:61:cf:f9:f3:a4:72:f4:4e:42:1a:89:61:2a:
6e:92:1b:10:25:46:a9:e5:46:2a:56:fd:c8:2a:0d:8f:cf:d8:
2c:94:5a:ea:4f:55:ad:66:af:a9:07:b1:c6:ce:50:60:b9:29:
8d:ad:40:f2:d6:b8:e2:62:f1:35:eb:29:8e:8d:b3:c5:36:7f:
4f:55:d7:61:c3:98:67:da:74:c4:50:36:a8:cf:42:7f:8c:80:
2a:47:85:0e:85:76:b4:44:16:a3:68:5c:59:fd:0a:bc:ad:16:
13:ad:dd:bc:f5:22:e0:97:23:0b:91:37:ce:f9:68:c6:d7:4a:
30:04:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:10:54 2025 by rpki-client