Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/k4izEjzEVXvvahaGq6mKiFAhiGE.roa
File: k4izEjzEVXvvahaGq6mKiFAhiGE.roa (raw, json)
Hash identifier: 5St41n0LzsEcqO1ffbvfm66XpLPwnaB7RrKjd7FP+eU=
Subject key identifier: 93:88:B3:12:3C:C4:55:7B:EF:6A:16:86:AB:A9:8A:88:50:21:88:61
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B01B1619765D06DAA4509126E20D1A0F5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/k4izEjzEVXvvahaGq6mKiFAhiGE.roa
Signing time: Thu 05 Oct 2023 21:14:43 +0000
ROA not before: Thu 05 Oct 2023 21:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:b1:61:97:65:d0:6d:aa:45:09:12:6e:20:d1:a0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 21:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9388b3123cc4557bef6a1686aba98a8850218861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:13:e2:8f:a5:0d:9b:85:92:cb:21:7f:86:
d4:c7:b0:c4:4e:a7:58:3c:f7:a2:64:2b:df:cb:5d:
ad:ae:99:d6:0c:cb:26:5c:0b:3f:02:15:84:dd:73:
b6:7b:ff:37:2c:c0:1f:7b:be:44:45:df:05:2f:df:
04:75:cc:82:a3:00:cd:72:bc:c5:25:30:2c:30:c8:
77:19:72:00:3f:95:60:92:1e:7b:1a:4a:60:38:c9:
2f:89:1b:28:35:da:44:ac:95:26:77:e6:82:f6:ee:
91:0c:c4:9b:d7:3f:a6:96:3d:36:c2:c2:93:fb:18:
48:b2:a1:40:38:ec:98:c7:1d:4a:11:f1:c7:20:31:
2d:67:4b:bc:4e:c0:0a:46:42:c9:c0:34:a0:e9:0b:
ae:4c:7d:78:bf:25:ab:33:15:14:5f:6c:f0:94:80:
4d:9b:55:5e:38:5e:bf:7f:5e:b2:eb:fc:34:d6:55:
de:3d:f8:3e:ca:6a:fe:b2:6e:90:48:5e:e9:73:6a:
ef:10:91:0b:8d:e0:17:31:97:66:9c:f3:e5:50:4b:
31:05:f4:b0:14:d2:0d:6e:cd:ab:ca:6a:70:e7:78:
4c:b2:f1:f2:cf:83:ef:43:9d:ed:d6:a2:bb:da:0c:
10:b0:cf:f3:8e:5d:24:fa:a1:22:e5:3e:98:d5:27:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:B3:12:3C:C4:55:7B:EF:6A:16:86:AB:A9:8A:88:50:21:88:61
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/k4izEjzEVXvvahaGq6mKiFAhiGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:1f:e4:c0:33:02:57:36:36:85:b8:07:34:6f:b9:61:d0:ab:
28:06:af:23:d2:d2:78:82:41:8f:ab:32:f2:41:2d:d7:b0:94:
71:e4:50:03:a7:f5:06:b9:75:75:9f:cd:df:45:94:fc:67:a4:
25:f9:46:3c:ec:96:30:3c:2b:ca:65:94:1a:5b:b0:b1:18:fe:
18:66:9b:d7:19:42:e7:63:84:c6:83:3f:11:38:29:3f:d1:77:
b5:8d:4f:08:cc:6f:0e:6d:b6:2e:34:b9:91:eb:cf:7e:71:11:
06:64:84:01:51:c5:21:14:47:66:91:51:c3:0f:0d:f7:b4:36:
9c:9e:2c:71:06:11:6d:38:21:63:73:a2:41:af:ca:ab:a8:01:
c1:b5:75:41:a0:55:72:39:b5:3a:a6:6f:62:ab:73:22:eb:4c:
3f:95:c5:19:bd:04:74:df:eb:cb:38:a7:17:4f:53:3a:a2:17:
75:f6:a6:73:85:0f:6c:18:cc:b9:3e:35:b9:4b:c7:24:0c:d0:
54:66:85:f5:67:a3:e3:6a:01:27:fe:15:c9:7d:fe:d5:4d:b7:
ce:88:bb:9a:9c:ea:77:41:b6:aa:22:c7:94:66:35:9e:a4:6f:
86:ad:64:eb:1a:87:b4:1c:b6:d9:9d:2b:6c:fd:6f:14:6d:58:
5e:87:7d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:39 2025 by rpki-client