Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jm2vRmha3knrK3BzMgIOiM_kJTc.roa
File: jm2vRmha3knrK3BzMgIOiM_kJTc.roa (raw, json)
Hash identifier: SK+QEogd5rhXt+BVgvwgBWMBuXMrN7FIQW4/k7qpHaw=
Subject key identifier: 8E:6D:AF:46:68:5A:DE:49:EB:2B:70:73:32:02:0E:88:CF:E4:25:37
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADEB5EFB86A32EFAC0EFF473AA9257334
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jm2vRmha3knrK3BzMgIOiM_kJTc.roa
Signing time: Fri 29 Sep 2023 02:12:59 +0000
ROA not before: Fri 29 Sep 2023 02:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:de:b5:ef:b8:6a:32:ef:ac:0e:ff:47:3a:a9:25:73:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 02:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e6daf46685ade49eb2b707332020e88cfe42537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:38:a2:cc:d1:89:e6:59:9c:3f:ce:1a:6f:
35:90:40:96:7f:8f:f6:6a:c1:b7:71:55:7b:14:7f:
47:1b:26:f8:51:9a:36:79:cb:4c:72:01:e4:01:ac:
61:f5:6b:38:e1:33:da:04:c3:36:b6:ae:8f:f5:60:
e7:27:df:7f:58:96:d1:36:05:ed:f6:6e:68:1f:20:
79:f5:d0:e1:41:2a:4e:e2:e6:0f:90:d0:aa:1f:81:
e5:0c:49:54:80:3a:c3:1c:20:42:2e:1d:6d:7c:9e:
a0:b4:37:58:d9:43:26:10:8a:7c:a7:c5:d1:a0:6e:
8a:fb:4c:87:9f:ae:93:57:8b:68:2f:60:58:fb:43:
68:93:af:9c:31:b7:75:de:79:97:11:9c:c9:07:46:
21:3d:f0:b9:1c:f4:fb:a0:5a:ec:22:12:2d:06:84:
56:34:65:2a:42:b9:11:01:15:b3:65:7c:b8:e0:b7:
b4:2f:61:16:80:46:1d:31:9b:60:39:f3:25:1f:e0:
7b:e6:e7:57:1e:13:bd:19:f4:26:a4:b9:c1:c9:e9:
6d:ff:6e:d7:45:25:fa:c7:2d:6f:5f:76:b8:a2:18:
3f:3a:c2:29:54:10:ec:b3:b2:eb:1a:08:80:81:41:
c0:7d:a1:10:7b:71:fc:e5:74:2d:7b:c4:d7:cb:c6:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6D:AF:46:68:5A:DE:49:EB:2B:70:73:32:02:0E:88:CF:E4:25:37
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jm2vRmha3knrK3BzMgIOiM_kJTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:d1:a9:15:61:c1:10:ee:d3:54:9d:85:bb:06:7f:25:15:ec:
be:41:bb:7d:f5:55:bb:ab:f1:52:cf:53:f0:41:9c:d4:54:bb:
1c:ea:f2:d5:91:dd:d6:2c:9a:4b:dd:cc:b6:00:4e:86:d6:eb:
bb:2b:9b:44:cd:71:e6:85:a7:21:f7:96:27:4d:07:19:cd:24:
ab:c1:4a:a5:8f:77:7b:b0:eb:a3:18:95:d9:8b:9a:4f:ba:8c:
a7:93:8e:44:8d:ee:72:c5:5b:fa:63:2a:9c:2d:ca:f1:a4:34:
ed:28:85:07:60:ed:88:86:94:82:98:ae:4f:47:11:91:c6:83:
e5:de:bb:54:f0:66:58:e8:59:d6:a3:de:3a:a3:b2:a4:3f:02:
77:a5:39:f8:82:37:79:a7:cd:45:4c:fe:4a:5e:e5:97:82:dd:
27:d3:32:30:4f:bf:b7:a4:cc:92:a4:9a:74:06:fd:dd:7a:e7:
24:b5:49:85:ca:d6:48:36:21:be:99:a5:8a:3c:a2:1b:79:bd:
22:b3:82:a6:4f:1a:f3:22:d0:b6:f5:82:36:37:49:ec:b6:09:
bd:e4:6f:27:cf:6d:55:99:d2:cf:43:c8:7e:24:23:82:33:45:
68:f0:da:89:33:25:6f:b7:ac:77:c2:dc:4a:7b:9f:e3:9a:b4:
51:36:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:36:11 2025 by rpki-client