Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iDnehwv5JUIXNf0P2kE2Xwr_6GE.roa
File: iDnehwv5JUIXNf0P2kE2Xwr_6GE.roa (raw, json)
Hash identifier: BZnGx0VbTz9S5NK3yfgYlt44lQScfKBcfTBRFHNdero=
Subject key identifier: 88:39:DE:87:0B:F9:25:42:17:35:FD:0F:DA:41:36:5F:0A:FF:E8:61
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B95C45D8B96603CE3B78D4C3E17D584D0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iDnehwv5JUIXNf0P2kE2Xwr_6GE.roa
Signing time: Fri 03 Nov 2023 15:19:16 +0000
ROA not before: Fri 03 Nov 2023 15:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:c4:5d:8b:96:60:3c:e3:b7:8d:4c:3e:17:d5:84:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 15:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8839de870bf925421735fd0fda41365f0affe861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:2e:a2:c1:ea:30:4c:20:0c:a3:a9:e7:04:
6b:0c:64:7a:83:f2:c1:09:b3:1e:c8:75:c1:40:97:
b3:92:eb:04:d7:39:89:45:91:df:70:47:cb:45:36:
61:17:3c:23:4b:3a:44:2e:75:8d:02:65:5f:bc:9c:
6e:e7:4a:f1:d6:af:e8:96:74:7a:1c:7d:1a:b2:76:
c8:09:a8:81:9c:18:d6:58:2c:68:f0:7d:ff:a6:91:
a6:82:11:2e:80:d9:7a:5e:83:58:d2:56:82:72:6e:
0b:cd:55:08:87:57:0b:73:a0:72:ed:93:f5:73:a0:
83:13:95:fd:ed:4d:e8:47:be:c2:77:cd:32:ba:97:
56:df:3a:87:e5:36:dd:79:20:bc:86:67:3d:93:fa:
3f:ac:90:d6:b6:66:53:2c:aa:73:00:33:92:d8:8c:
28:23:81:7c:63:c4:eb:0e:36:1b:2f:e1:7f:e5:7f:
d7:40:c0:85:ab:ac:a2:30:ae:51:ad:ab:3c:56:4c:
ee:a9:58:95:5e:00:56:91:cc:d9:8d:80:30:ed:b4:
b0:83:3e:fb:8e:c9:27:ae:39:52:c9:ee:1a:68:af:
8c:08:8b:b9:39:2e:6a:1d:e0:53:24:9d:9d:3d:f0:
97:6c:d4:30:e6:d3:68:cc:bd:c8:7f:1b:41:53:f8:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:39:DE:87:0B:F9:25:42:17:35:FD:0F:DA:41:36:5F:0A:FF:E8:61
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iDnehwv5JUIXNf0P2kE2Xwr_6GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:17:6c:6f:0f:67:91:96:1d:a5:24:7f:69:35:ef:d4:93:65:
e3:80:de:9b:da:f1:a8:53:e4:fc:db:f4:62:56:5d:03:bc:2a:
0f:3e:99:5a:5e:2b:96:20:cb:99:c6:d1:d0:8b:77:8d:7e:3a:
3a:39:ba:f9:54:56:bc:c6:ff:15:98:6e:ad:7d:6c:90:3b:7a:
24:00:ca:2e:d6:eb:0a:fc:5c:ad:b6:1a:51:95:a0:86:23:15:
f5:11:58:07:d9:41:f2:52:04:09:d8:c6:db:b2:cc:43:d8:68:
ee:8a:53:71:3f:ee:5a:92:bd:d5:e3:3f:3d:70:1e:87:38:01:
b8:52:6a:b2:4c:45:8c:53:7e:f9:4e:5e:e0:59:0c:05:47:10:
d2:a7:17:94:4f:74:62:d1:49:80:c0:bd:73:ec:ef:a0:04:f1:
cb:f3:9f:88:90:c4:a4:6c:8c:77:6b:a0:0c:b3:ba:42:21:d0:
b6:70:23:88:ce:75:4c:85:34:c0:72:0f:8f:ab:cb:55:8d:83:
c1:30:ba:b9:4f:8c:21:64:79:a4:5d:bf:cb:0c:8c:d7:9b:cd:
e5:55:9d:9f:4a:9b:50:b9:e7:37:15:d9:12:19:a0:cd:e2:92:
83:3e:44:fe:d3:7d:38:75:d5:52:a2:86:3b:24:73:53:7e:bf:
e4:44:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:49 2025 by rpki-client