Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i8EzflpTLH88nl_9x-KramCiqAY.roa
File: i8EzflpTLH88nl_9x-KramCiqAY.roa (raw, json)
Hash identifier: rc0V0b/WupkZeVO4kKBmdLC0iNRJ4qqfbfr26aJ0kDE=
Subject key identifier: 8B:C1:33:7E:5A:53:2C:7F:3C:9E:5F:FD:C7:E2:AB:6A:60:A2:A8:06
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF0B4BF77671642976CC7B840DD1259D4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i8EzflpTLH88nl_9x-KramCiqAY.roa
Signing time: Mon 02 Oct 2023 14:04:51 +0000
ROA not before: Mon 02 Oct 2023 14:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:f0b4:3475/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:b4:bf:77:67:16:42:97:6c:c7:b8:40:dd:12:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 14:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bc1337e5a532c7f3c9e5ffdc7e2ab6a60a2a806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:57:e3:2a:1a:35:85:a8:03:59:1e:ba:c0:
a0:91:85:2b:b7:56:66:b1:a2:87:10:9e:65:3d:a8:
95:b1:cd:e4:84:af:82:46:f1:32:cf:53:b2:b8:58:
9d:7e:59:aa:5b:cb:49:23:ad:65:ba:1d:e6:26:46:
03:d2:d5:3f:0d:20:c1:cd:e8:5d:d7:58:e2:6f:e3:
91:1e:29:87:92:38:77:3e:53:e4:41:c7:63:d2:a9:
a4:96:98:26:a9:11:d8:af:76:4d:c5:3e:b6:b1:6a:
78:17:c6:32:b2:c3:3c:88:96:e2:96:15:e7:54:84:
52:a0:d7:1c:db:c0:38:ff:65:a4:f8:03:17:65:66:
75:8d:5c:f0:26:69:7c:ae:fd:05:86:60:67:df:b4:
f3:bd:ef:4f:4c:3a:d4:5a:96:31:01:ca:bf:cc:4f:
07:9a:ec:0e:49:17:06:9f:2a:3c:96:ef:40:0e:42:
0d:22:30:ee:6b:3f:ae:7c:5a:5b:cf:5a:22:47:d3:
7a:2e:5f:6c:90:77:4f:ca:dc:d5:5a:07:a1:cb:af:
7c:ae:bb:aa:57:90:1c:cb:2b:27:a5:8f:9a:91:96:
67:ca:e3:29:0f:9b:82:1d:62:91:be:94:3a:c8:a1:
44:d9:21:8a:c5:1d:c7:f7:c5:61:50:7b:b7:b3:70:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C1:33:7E:5A:53:2C:7F:3C:9E:5F:FD:C7:E2:AB:6A:60:A2:A8:06
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i8EzflpTLH88nl_9x-KramCiqAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:ca:e1:41:09:eb:49:ec:08:93:be:36:b0:8e:b6:0c:10:b8:
81:cd:bf:05:f4:80:b5:19:1e:7c:f9:2d:69:95:1c:62:6e:23:
f0:27:32:da:b8:c4:a7:15:21:94:5e:cf:06:85:76:cc:a0:6d:
a9:68:48:67:bf:62:e8:b1:51:37:41:62:24:26:7f:5e:8e:fd:
72:4a:6c:b6:2b:d9:0c:47:66:00:41:fc:cb:ec:71:bd:69:7c:
56:63:82:b7:68:dd:e2:82:51:72:2d:ef:6a:a9:4d:91:f1:e3:
e4:46:22:25:f3:b3:63:0e:3c:0d:ea:65:52:59:8a:6b:ef:1c:
f6:4a:95:1c:8e:85:5a:d7:3b:24:bb:41:2d:f9:45:96:0f:a4:
25:df:6e:d3:30:9a:8f:60:7d:eb:eb:58:b3:08:b6:e2:03:c8:
1f:c6:00:28:bd:8e:98:cc:d2:ba:d1:c4:7e:c6:0f:58:73:ae:
d3:d5:12:ec:4d:14:d5:ee:e6:e4:96:16:dd:9b:ad:de:c3:9a:
41:3e:4c:04:46:0a:76:a6:66:1b:6e:07:b4:22:e2:86:a2:6d:
6d:08:6f:ce:ed:99:03:48:1a:27:b9:7d:79:9a:97:f4:c9:43:
6f:26:c0:be:c4:52:1c:50:6d:10:33:bc:23:84:d9:58:e2:b6:
fe:79:0f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:49:26 2025 by rpki-client