Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fik5An8hL50pWg5UFhbumAjZ8VU.roa
File: fik5An8hL50pWg5UFhbumAjZ8VU.roa (raw, json)
Hash identifier: 1KWd9sEVg4k2NGxuV2xaM5BBd8doS6iJ/tqWktDuMS0=
Subject key identifier: 7E:29:39:02:7F:21:2F:9D:29:5A:0E:54:16:16:EE:98:08:D9:F1:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAE68F9C6AEC090592FCD77E8C9BF5690
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fik5An8hL50pWg5UFhbumAjZ8VU.roa
Signing time: Wed 08 Nov 2023 10:09:57 +0000
ROA not before: Wed 08 Nov 2023 10:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:68:f9:c6:ae:c0:90:59:2f:cd:77:e8:c9:bf:56:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 10:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e2939027f212f9d295a0e541616ee9808d9f155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:ae:8a:97:b4:90:65:ab:15:79:6c:04:13:
30:e6:73:7b:d6:13:b6:2b:02:cd:3b:7b:da:c1:c0:
f5:39:52:6e:bf:59:c5:54:a6:2e:1c:e8:86:74:80:
c0:99:32:99:69:8b:b1:ce:f2:76:cb:73:8a:f5:82:
d3:d9:68:63:a3:b2:2c:05:73:3a:3e:e3:3a:50:3e:
b2:5e:aa:3e:c6:9b:66:ce:e1:98:bb:17:3d:b3:52:
22:92:61:ae:f7:0a:57:a7:cb:60:02:a2:3a:e4:6a:
17:05:0d:46:cc:f0:60:56:f5:c0:6a:af:8c:71:d1:
2f:2d:00:4d:57:6c:a4:1b:d0:29:56:27:4a:a1:fd:
a1:c2:f9:58:15:75:64:e9:dc:32:1e:a3:73:32:e5:
04:ce:ff:83:bd:3e:b5:10:8e:39:14:b0:4e:a3:5c:
a2:76:79:d8:b5:f3:b0:35:d7:f5:96:ae:fd:3e:6f:
33:e1:5c:b1:d2:6e:35:14:ab:5b:65:0f:62:ac:8f:
b5:49:99:01:ea:c5:5d:91:11:e5:66:44:87:38:b8:
e3:0c:8c:48:cb:fb:03:52:d1:5d:03:06:12:8c:0c:
e9:6e:1d:19:be:cf:1d:59:14:f0:9d:c9:b0:1d:ec:
11:1b:90:c2:be:3a:9e:a1:fe:10:8b:20:48:f3:1e:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:29:39:02:7F:21:2F:9D:29:5A:0E:54:16:16:EE:98:08:D9:F1:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/fik5An8hL50pWg5UFhbumAjZ8VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b9:72:9b:56:7e:ac:9a:b3:39:ce:21:6e:a0:3a:7a:79:c4:56:
6d:f6:72:67:71:fd:4e:d7:5f:1d:6f:ae:b3:8d:8c:7f:bf:1f:
7e:c8:63:e1:7e:e4:ff:7c:78:8e:92:8d:43:51:a8:a3:67:26:
98:e4:57:a1:54:78:c2:68:5b:55:e4:5a:0a:f7:75:7e:11:0c:
25:98:4c:a1:19:9e:bf:b4:72:2b:1d:6f:99:67:4e:e3:49:c4:
97:c9:54:8d:af:6b:dd:28:c9:b9:eb:ed:df:59:1e:69:cf:8a:
c9:22:b0:26:24:76:9a:34:b7:5a:ed:ed:30:33:04:7d:45:6c:
71:b2:d3:79:ce:ce:5b:f5:9e:9d:e5:88:00:f0:e6:1a:d3:2d:
df:1a:6d:2a:2c:7f:e3:47:ad:a8:9c:b2:96:07:00:b7:e8:7a:
a3:70:49:9b:e7:50:d4:8a:4f:5c:44:e5:05:74:0e:42:48:bd:
75:1b:47:86:ac:59:28:f4:65:79:12:13:aa:26:d4:24:6e:11:
84:5e:ad:e0:b6:85:16:1d:5c:9f:9b:42:ad:a6:bc:83:87:4c:
00:d0:6b:33:16:95:b2:fb:a8:8c:9a:07:f9:fa:5e:53:99:5b:
4a:3c:95:99:9b:0b:6d:c1:62:f5:b6:6c:55:2b:ea:dd:10:e1:
fb:08:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:23 2025 by rpki-client