Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/geR6_QrtUvTf0sm0mtjf_aLzroM.roa
File: geR6_QrtUvTf0sm0mtjf_aLzroM.roa (raw, json)
Hash identifier: zE8Uz+rx0Wc/c1Fch8sur9cvvYKY8/rhOD7q74iUeYM=
Subject key identifier: 81:E4:7A:FD:0A:ED:52:F4:DF:D2:C9:B4:9A:D8:DF:FD:A2:F3:AE:83
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C15A23706FE620A968C669284B0E3A108
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/geR6_QrtUvTf0sm0mtjf_aLzroM.roa
Signing time: Tue 28 Nov 2023 11:13:21 +0000
ROA not before: Tue 28 Nov 2023 11:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:a2:37:06:fe:62:0a:96:8c:66:92:84:b0:e3:a1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 11:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81e47afd0aed52f4dfd2c9b49ad8dffda2f3ae83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:aa:5d:b2:e8:e4:fa:5c:b0:65:15:7b:16:
a0:55:3f:7e:32:db:b2:7b:6a:ff:9d:9a:a6:b5:3b:
52:4a:a3:a5:88:75:92:10:89:4c:3a:d6:43:c0:17:
31:fc:22:4d:0b:59:82:a2:d2:a7:cc:8e:08:d4:91:
b9:6d:10:89:a3:24:ec:0e:14:7d:c9:73:5f:40:d0:
66:5f:a9:8d:62:3c:ce:7c:32:81:8b:e7:bf:93:3d:
92:9e:5d:2e:df:8f:49:71:6c:ce:87:19:00:01:c8:
c5:2d:b5:b1:59:29:dc:c0:b5:25:d0:52:02:4c:4b:
ef:73:06:58:67:ec:3d:1c:f3:63:c0:5a:ad:89:53:
9a:be:0d:7e:58:40:de:f2:b0:e9:4e:ec:ed:dc:86:
92:a2:b4:3f:b4:81:5d:a5:53:50:2d:8a:07:89:e9:
49:2e:d4:2c:48:f9:c0:1e:2b:23:c7:a6:43:96:34:
51:c1:2d:dd:6c:3d:7e:fc:52:d5:db:53:83:a4:75:
d9:ae:85:6a:ea:83:8b:a6:b3:dd:ef:9f:07:6c:56:
c7:d4:cf:9b:94:13:a3:d2:ec:5c:22:b0:bf:1b:33:
99:5c:87:65:ae:5f:d5:86:9b:61:c5:fb:9c:45:68:
94:e0:e5:72:d8:e5:c6:a0:98:b3:80:81:00:af:26:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E4:7A:FD:0A:ED:52:F4:DF:D2:C9:B4:9A:D8:DF:FD:A2:F3:AE:83
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/geR6_QrtUvTf0sm0mtjf_aLzroM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:2c:ea:38:da:bc:ba:4d:a0:ee:69:1c:c0:1b:e6:88:4b:dd:
e2:88:1c:86:b7:07:ef:e2:a5:58:67:08:1c:df:38:57:e1:30:
ba:55:e3:57:b7:07:39:dd:2c:35:ea:03:95:69:a5:00:9a:8e:
2c:51:2a:66:85:f8:06:07:ea:6d:be:14:1f:67:df:06:fd:25:
cc:3f:42:8e:be:69:38:48:a4:25:b0:ec:0e:c3:72:c8:d0:a1:
20:d2:b2:b1:0f:72:e6:13:8e:b1:14:b0:00:a3:05:fb:a8:99:
db:52:2f:d3:9a:6a:12:90:77:f9:9c:83:62:73:17:30:af:c3:
a9:2b:4e:38:c4:12:55:e2:86:8e:07:da:84:ae:ef:b8:62:b8:
c9:d5:48:37:2a:2d:eb:b5:f4:d7:74:d9:66:a9:e9:cf:c3:b5:
ac:36:d6:8a:3f:7a:7d:43:84:7b:ed:f2:44:fe:51:9c:29:fa:
5d:cd:c5:d1:8c:d6:3b:47:c6:5b:92:6b:99:74:2b:7f:27:27:
3b:a5:1b:89:c5:9d:63:df:4c:83:2e:b5:d3:a0:bb:7f:0a:1c:
6a:ab:2a:eb:dd:28:1f:6a:f3:37:2e:d3:4e:24:4e:98:57:1c:
a3:66:47:05:50:33:7b:0a:38:54:76:bd:af:7e:5d:6a:71:d3:
48:6e:10:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:53:48 2025 by rpki-client