Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/h8_kufZ5tOqkVmfX02lrrntgLBg.roa
File: h8_kufZ5tOqkVmfX02lrrntgLBg.roa (raw, json)
Hash identifier: ARJasMKxnQ9RSdciOu4NVT2oeCUXfJv3nmOeq0OOyZI=
Subject key identifier: 87:CF:E4:B9:F6:79:B4:EA:A4:56:67:D7:D3:69:6B:AE:7B:60:2C:18
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD5B3390E04C178FAE77CEFB3D9D6013A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/h8_kufZ5tOqkVmfX02lrrntgLBg.roa
Signing time: Wed 27 Sep 2023 08:13:27 +0000
ROA not before: Wed 27 Sep 2023 08:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:b3:39:0e:04:c1:78:fa:e7:7c:ef:b3:d9:d6:01:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 08:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87cfe4b9f679b4eaa45667d7d3696bae7b602c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:97:da:ff:ee:ea:06:6d:8b:f0:8b:a0:9e:01:
1f:d3:e4:65:25:70:55:c4:07:54:8a:9f:5b:51:67:
d8:47:6c:3b:e9:12:97:74:3d:ea:12:ab:de:78:b9:
34:9f:63:7a:76:df:d4:6a:3a:32:15:78:1a:68:f3:
cc:4f:a5:cc:0b:95:43:c5:e2:d7:50:37:df:a0:d6:
5e:87:3e:93:28:72:79:ff:1c:91:2e:ef:6a:c0:b6:
f5:a2:ca:d3:8e:fc:49:d1:38:b2:9c:9b:ee:20:91:
4d:6e:3f:fd:a4:9f:3f:51:18:13:92:ca:0b:3a:d7:
0e:25:26:9a:e6:f0:ee:be:a9:72:f7:e6:f2:86:75:
59:55:d2:c0:68:4a:b8:ea:9d:c8:6d:b6:4c:6a:a5:
b7:1a:3f:2d:39:27:a5:92:54:68:aa:99:24:fd:c9:
9d:ef:36:b9:10:90:9e:70:03:03:af:5b:16:a7:0e:
0e:43:bc:ea:1a:48:48:97:f6:44:17:fc:54:cd:8d:
05:ea:38:45:02:8e:08:7c:62:a1:32:ad:1b:8f:74:
15:28:9e:30:fe:2b:0d:a6:2e:40:10:98:40:e6:eb:
a7:6c:bc:f9:89:56:ed:f8:e2:68:4b:9e:c7:a6:08:
2b:ba:56:6d:ea:00:46:1e:7c:9b:24:f6:ae:0c:81:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CF:E4:B9:F6:79:B4:EA:A4:56:67:D7:D3:69:6B:AE:7B:60:2C:18
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/h8_kufZ5tOqkVmfX02lrrntgLBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:be:ca:08:a3:90:3a:84:7a:c2:66:8d:dd:31:9d:8c:8b:0e:
df:66:89:d6:5a:cc:e8:03:52:c9:bc:15:a2:6b:56:c1:cc:08:
69:b6:f9:21:66:b8:16:31:bb:d6:16:27:13:12:71:a4:e9:be:
51:77:26:63:65:ad:fb:77:bb:b7:f6:c8:16:3d:e2:60:4f:c8:
e8:21:22:1b:aa:71:13:f3:58:65:ed:bb:db:68:82:29:28:6b:
d4:ec:78:b5:4b:27:4b:59:78:f3:17:cd:59:a4:e8:60:d3:37:
0e:cf:e6:16:51:87:90:6b:5d:5c:9c:a4:e5:97:2e:5b:91:99:
a5:1d:21:b0:0e:01:97:61:6d:77:7a:95:09:da:ab:b7:f5:be:
b1:aa:84:8f:eb:76:08:d3:85:4c:ad:e4:25:fd:28:54:ee:be:
0b:a1:9c:12:cf:95:c9:de:c1:2d:67:fd:2e:a3:05:b4:3e:25:
59:2a:d9:62:f8:70:d5:3d:ef:0f:30:6e:67:92:d4:30:6e:f3:
dc:ef:36:db:bf:76:6a:d0:1e:88:2c:e0:20:78:53:64:de:6c:
c1:6d:a4:18:76:c0:61:f8:a8:27:3d:01:cf:b2:12:ed:24:03:
ea:bb:02:00:9b:a8:62:d8:4b:93:65:d4:24:b6:0a:f2:3c:3a:
57:ff:40:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:41 2025 by rpki-client