Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iF33_FI8KG0aPZWArO4ttko9oMA.roa
File: iF33_FI8KG0aPZWArO4ttko9oMA.roa (raw, json)
Hash identifier: ogFACwmF7kEWR8bIMlfGyt7pq7Bod2m8exSLw6Zy/XQ=
Subject key identifier: 88:5D:F7:FC:52:3C:28:6D:1A:3D:95:80:AC:EE:2D:B6:4A:3D:A0:C0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C025349A563175EAED36882BC297C4080
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iF33_FI8KG0aPZWArO4ttko9oMA.roa
Signing time: Fri 24 Nov 2023 17:14:21 +0000
ROA not before: Fri 24 Nov 2023 17:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:53:49:a5:63:17:5e:ae:d3:68:82:bc:29:7c:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 17:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=885df7fc523c286d1a3d9580acee2db64a3da0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:56:31:92:f4:cf:24:37:b6:ed:4f:73:3f:
c5:19:8c:b4:d7:93:60:ae:7e:82:8d:68:c6:32:a4:
9e:1d:01:d7:9c:d4:95:41:cc:65:6e:a8:87:a7:63:
25:62:8d:f0:89:63:05:b8:05:84:29:1e:7a:bc:95:
53:9a:6e:c5:2c:46:70:71:73:e5:87:52:5f:42:b4:
96:4b:c1:88:05:f5:17:07:41:a8:94:f5:d1:b5:70:
0e:9d:15:cc:fe:1d:86:ee:70:bd:ee:42:9e:fa:e3:
eb:41:87:8c:30:d6:3d:d1:90:96:d6:ee:e2:cc:47:
6c:64:86:72:5c:5e:aa:5c:20:19:be:6a:c5:bc:28:
d3:a2:33:25:5d:e8:f1:a0:53:73:e1:c2:c3:f4:0d:
80:48:a0:c5:09:01:4e:ed:79:6d:47:b1:a9:66:a1:
82:22:fe:50:54:cc:25:6a:1a:b5:c7:e6:35:f1:42:
ac:35:1a:69:f6:fb:a6:a3:66:96:e5:e9:cc:ba:c4:
0f:42:36:93:52:34:fb:03:55:04:e0:17:f1:2e:48:
19:4c:ca:45:ce:bc:75:32:95:46:f0:84:68:5a:ad:
d8:6e:b0:70:9b:26:cf:a8:33:5f:11:5a:ea:f8:a1:
00:4d:20:71:49:bc:f5:11:a2:63:8b:19:8e:da:af:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5D:F7:FC:52:3C:28:6D:1A:3D:95:80:AC:EE:2D:B6:4A:3D:A0:C0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iF33_FI8KG0aPZWArO4ttko9oMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:ee:bc:93:66:8f:f0:c8:13:0f:6d:0c:66:e0:87:e9:d9:18:
5a:9b:c1:ab:8b:8f:91:e6:33:ed:60:39:b5:e0:71:e7:57:c1:
e2:c4:31:bd:fc:f4:cc:98:3a:8a:b1:2a:a0:d6:88:ba:84:78:
66:99:d4:b0:b9:23:eb:60:ed:2c:5d:f9:15:fe:21:3c:99:c2:
53:9f:19:e8:e2:b3:f2:4a:00:84:73:15:ba:01:b5:fb:c5:c4:
99:fe:ce:e6:c6:04:68:f2:e0:b4:e7:ff:00:d3:84:bb:88:36:
3f:69:6f:a8:99:29:bd:8b:01:b5:70:ef:cb:92:2b:f0:cf:b8:
bd:ef:55:44:11:0e:fe:ee:b5:6b:0c:6d:c9:44:e7:1b:d5:4e:
5c:1e:f5:c5:65:d4:46:0d:fe:8a:50:b5:f1:53:7f:ed:8d:c9:
83:e7:97:a2:e6:cf:b9:6f:4d:c5:6e:fd:60:35:2f:c2:ef:4a:
80:fa:76:13:e8:37:90:7d:31:9f:15:0d:a0:47:b5:8e:47:03:
5a:4d:5d:a2:a2:5a:ed:99:da:b0:fd:ca:75:29:eb:7b:a3:7d:
10:28:28:ff:42:80:df:10:7f:d7:f6:03:bb:b4:19:7b:dd:56:
ce:be:ec:70:52:28:51:98:4f:c7:5b:b3:20:e8:6c:3d:0d:c8:
5c:ec:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:07:38 2025 by rpki-client