Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iwDIBII95AIrD_nrg_7nqaAvxRs.roa
File: iwDIBII95AIrD_nrg_7nqaAvxRs.roa (raw, json)
Hash identifier: 8D8YViajPivWEgyUWLnA424nHFJcz8V3ibOZMj+azMA=
Subject key identifier: 8B:00:C8:04:82:3D:E4:02:2B:0F:F9:EB:83:FE:E7:A9:A0:2F:C5:1B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7F3543ACB4D7269F7BC67083F58122FA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iwDIBII95AIrD_nrg_7nqaAvxRs.roa
Signing time: Mon 18 Dec 2023 23:14:06 +0000
ROA not before: Mon 18 Dec 2023 23:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7f:35:43:ac:b4:d7:26:9f:7b:c6:70:83:f5:81:22:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 23:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b00c804823de4022b0ff9eb83fee7a9a02fc51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:07:5a:fa:8f:22:68:bd:a7:19:8e:b4:0b:64:
be:23:64:19:f9:31:ac:6f:4c:77:25:34:73:24:34:
91:b2:3c:f5:fc:38:1c:ca:08:5a:19:d9:88:f8:91:
8e:8f:f3:a9:ab:ef:56:ed:c6:89:0e:eb:07:e2:c2:
1e:2a:31:c8:18:38:ca:20:2e:57:ac:8d:14:64:df:
af:d4:9c:b4:2b:d6:99:17:87:fe:fc:be:d6:aa:38:
cf:67:14:72:2f:53:f9:b0:b6:f9:eb:04:b1:f5:57:
76:d5:08:4c:05:ae:9f:fb:7e:d9:30:dd:cd:d5:8b:
79:24:05:9e:5b:88:42:c0:ba:e2:42:b6:75:d8:47:
0f:83:0e:f2:db:93:be:d0:1b:60:79:a7:35:d5:70:
f5:23:36:98:f5:3f:a6:a5:4c:c8:ef:f2:c1:82:63:
1e:7f:ee:fb:54:ac:08:a2:fe:d4:89:fa:f3:d4:de:
f2:9a:6a:cc:ea:3f:eb:9a:9a:08:22:69:e4:eb:63:
fa:f0:52:27:9f:89:d1:ea:b6:eb:06:a2:1d:f1:80:
2c:ff:0d:88:51:5a:2b:9d:99:cd:e9:da:7c:1b:1a:
7b:74:c9:76:08:75:61:4f:cb:28:d9:57:14:d0:6f:
e6:de:2d:ec:41:c8:56:d0:71:f3:b1:a7:21:6f:7f:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:00:C8:04:82:3D:E4:02:2B:0F:F9:EB:83:FE:E7:A9:A0:2F:C5:1B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iwDIBII95AIrD_nrg_7nqaAvxRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:6f:2e:c0:fc:15:84:fb:62:b8:f0:6e:ff:79:28:13:b1:a3:
f1:95:a3:ff:cc:5e:46:57:74:db:39:fb:69:c6:94:fb:e8:f1:
c9:e4:01:20:20:7c:f4:23:7a:75:c6:04:6d:5d:85:f2:80:d4:
a8:6d:d2:f9:21:ca:52:48:34:03:99:d9:94:46:b2:fd:4c:22:
9d:01:93:9b:86:eb:44:72:2c:ba:c0:cb:21:08:6b:8c:be:86:
d5:ec:e5:cf:4d:cc:92:ff:45:32:f2:81:1e:41:a6:af:c5:ef:
a1:5a:0e:d3:c8:dc:55:c4:b2:f4:47:24:37:f3:eb:e0:9e:32:
18:5b:94:a6:80:0c:8a:b1:3d:67:79:7a:8d:50:d9:66:a5:9f:
2d:2f:d1:b9:ed:f6:bb:49:65:1f:8d:0a:dd:9d:c9:9d:94:a2:
1d:f9:4c:82:1a:fa:ca:fa:52:4c:cb:bb:49:87:2f:70:4f:ab:
4d:a5:c5:fe:bc:13:21:32:ed:d5:64:2e:4a:fc:59:cf:b9:0c:
16:49:b5:01:c2:14:e6:f0:15:9f:be:69:67:6a:f6:a6:bd:16:
33:0c:62:ae:db:9f:31:40:84:68:77:44:dc:5b:e7:b8:d2:1a:
e4:cf:78:de:e1:58:6d:32:21:bc:46:ed:38:03:da:62:07:d3:
99:c1:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:36 2025 by rpki-client