Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/icCkHoF0w1ENOcOG-UEO1JtqOvE.roa
File: icCkHoF0w1ENOcOG-UEO1JtqOvE.roa (raw, json)
Hash identifier: FBoQS79DVOQEdpQAZxHrLB0RHIYZb6TyvomaFu8pLg4=
Subject key identifier: 89:C0:A4:1E:81:74:C3:51:0D:39:C3:86:F9:41:0E:D4:9B:6A:3A:F1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF387556A0C30DB07CA84F399C06BFF1B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/icCkHoF0w1ENOcOG-UEO1JtqOvE.roa
Signing time: Tue 21 Nov 2023 20:16:54 +0000
ROA not before: Tue 21 Nov 2023 20:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:87:55:6a:0c:30:db:07:ca:84:f3:99:c0:6b:ff:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 20:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89c0a41e8174c3510d39c386f9410ed49b6a3af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:32:4a:7a:c1:69:d8:b4:f6:22:3c:96:9b:
ec:de:0c:77:0d:1a:4f:8f:53:1b:59:e0:b5:52:a2:
5e:14:ad:95:9d:f0:46:15:f5:4f:25:b7:96:93:75:
86:1c:c9:95:6c:dd:09:d4:76:96:47:94:3a:6e:63:
e4:94:1b:f6:06:75:94:31:06:50:24:7b:2e:6d:24:
3a:8e:51:0c:c2:95:da:a4:e7:31:e4:f6:f5:67:78:
01:45:3b:a6:c6:be:bb:2f:b5:56:2d:08:f9:97:3f:
c3:56:b3:ae:f0:dd:ce:b4:63:d9:f4:c7:fb:8b:11:
bf:7c:77:c9:66:fb:42:ac:31:3d:88:df:2a:61:4f:
55:64:1f:a7:e0:be:bd:13:9f:ec:61:dd:07:68:23:
6f:f1:ac:76:bc:5e:88:01:5a:06:73:d0:e9:c9:b0:
dd:f5:0e:7e:d0:64:dd:79:11:72:09:91:13:7e:15:
ee:c5:5f:e6:2f:93:2c:0e:25:32:09:f7:6c:02:26:
1d:56:dd:fd:9f:fe:e0:04:f2:f8:21:12:95:50:e6:
ec:95:0e:e0:ef:25:2d:df:8c:26:a0:f2:39:67:a5:
0e:c1:18:66:7b:c9:41:a4:79:17:cb:44:74:28:be:
5e:5d:0d:b0:e5:3f:d5:af:81:39:e6:66:c7:16:91:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C0:A4:1E:81:74:C3:51:0D:39:C3:86:F9:41:0E:D4:9B:6A:3A:F1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/icCkHoF0w1ENOcOG-UEO1JtqOvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:86:34:cd:be:27:4d:22:b2:4d:a6:52:86:b0:bc:4f:a0:04:
b0:0e:95:50:a0:6f:db:ce:cb:51:ff:92:e0:ed:08:ca:bc:ae:
f4:13:36:b8:7b:8c:77:21:6d:27:be:2a:16:41:cb:79:0a:b7:
95:9b:d8:c5:72:68:bc:25:1c:cf:37:e8:86:86:64:05:d2:aa:
ef:4a:c1:2a:fa:17:bf:cc:b9:d5:74:e2:69:c3:92:ec:5f:0e:
d8:17:83:b4:a9:17:56:b2:c8:3e:f7:4d:79:69:11:dc:16:f1:
ba:51:d5:c1:14:f5:47:4e:1f:bc:83:4d:67:e0:7b:1c:bf:36:
d7:c3:f7:43:1c:25:ae:ab:3d:47:09:82:36:b1:7e:52:cd:d6:
30:61:81:06:16:57:43:5f:f8:12:5a:76:ad:9a:8e:81:d9:49:
68:0b:5b:ac:61:4b:89:72:17:17:b5:1b:0e:a3:d0:d7:d0:68:
06:99:3c:6e:f1:fd:37:7b:2f:50:9b:b5:15:5a:2b:74:5d:b4:
d8:f6:22:68:d9:f4:ec:a7:a3:11:a7:08:23:d0:de:04:45:b3:
49:9a:3f:d6:12:a5:71:ca:2f:24:d0:92:05:98:5a:0a:70:cd:
ec:28:25:15:c1:f0:b6:fc:b6:af:15:02:56:af:d1:08:9e:c0:
7f:ee:b6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:40:23 2025 by rpki-client