Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ka0ePQLGfSNv16AZfNERUCOu9Y8.roa
File: ka0ePQLGfSNv16AZfNERUCOu9Y8.roa (raw, json)
Hash identifier: OZt6KjQ8FBgokvKzZ06iAAPx9C/F6xlPQY+Rj3zjTaw=
Subject key identifier: 91:AD:1E:3D:02:C6:7D:23:6F:D7:A0:19:7C:D1:11:50:23:AE:F5:8F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6BE733E3E9D8AFD4A95D7796BC1C4731
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ka0ePQLGfSNv16AZfNERUCOu9Y8.roa
Signing time: Thu 26 Oct 2023 12:13:16 +0000
ROA not before: Thu 26 Oct 2023 12:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:e7:33:e3:e9:d8:af:d4:a9:5d:77:96:bc:1c:47:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 12:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91ad1e3d02c67d236fd7a0197cd1115023aef58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:73:c3:a3:ec:1f:19:6f:e2:d3:90:8a:54:
13:ba:fa:2f:f7:9d:cf:8b:97:b0:86:80:8c:14:42:
41:72:2c:55:d3:f4:de:00:cf:00:4f:ad:10:62:73:
c3:aa:af:1c:09:cf:9f:31:01:d7:84:8c:26:3d:d6:
7e:99:13:1e:96:d2:35:94:93:f5:55:ba:b0:42:08:
27:9b:dc:2f:ae:b4:34:e2:73:35:dd:76:87:8a:2f:
92:26:c8:aa:01:8c:45:57:d7:ea:74:69:7d:ad:50:
2f:8f:b4:17:8e:5b:1c:db:99:72:86:52:6a:7f:93:
b2:89:47:41:a8:b5:9d:01:c5:d2:8d:a6:f6:56:a9:
ad:92:e9:f0:96:b8:0e:f6:87:60:87:6e:75:3b:f3:
3c:da:02:8e:3e:28:87:a4:64:f8:67:dc:ae:64:41:
59:e2:81:df:44:6f:2c:23:31:3e:cf:2b:7a:37:f1:
18:a7:50:33:e0:48:78:7f:13:98:54:a2:94:ed:98:
4b:80:a0:cf:5c:ad:9b:37:d0:fa:2d:4b:0e:10:fa:
46:36:06:fa:aa:b4:85:f4:28:cb:44:fd:0f:b5:21:
bc:f3:80:a2:91:dc:43:de:e5:0f:8f:d8:9d:85:39:
9e:ab:29:c3:2e:eb:b2:0e:76:1c:91:3b:6a:5f:17:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AD:1E:3D:02:C6:7D:23:6F:D7:A0:19:7C:D1:11:50:23:AE:F5:8F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ka0ePQLGfSNv16AZfNERUCOu9Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:d5:35:7a:18:66:02:6c:31:1b:e7:5f:94:7a:cd:b7:9a:04:
bc:ac:f2:56:76:25:e3:37:57:cc:cb:4c:2d:5a:01:45:90:1c:
07:0c:ae:ea:2b:82:bd:ee:63:41:22:b8:f7:70:d1:ea:06:b2:
ab:f9:36:80:93:7c:ea:53:6c:82:bc:6c:24:c8:94:04:0a:92:
3c:87:a2:bc:ee:65:a9:f8:b1:98:8f:1c:af:76:89:7b:d2:d6:
17:f1:fb:52:a7:a6:f7:06:3c:b4:d6:f7:0e:b6:42:dc:66:4a:
c8:39:f4:5c:65:66:6b:0a:63:c0:bd:83:7b:5d:83:e0:a0:c1:
41:59:99:08:47:f2:6f:9f:dd:13:59:dd:77:52:19:0a:7c:47:
ec:3a:7a:10:96:68:29:b1:a1:8f:ef:60:46:65:8e:b4:9a:f6:
b5:c2:d8:de:36:43:9b:68:1f:fd:66:68:79:8c:20:38:c1:7a:
68:92:4f:ce:52:70:c5:ae:92:f3:81:ba:6f:90:ef:72:4a:57:
96:c4:35:22:ef:53:19:c6:8b:30:38:b5:f3:8e:da:37:89:1d:
a8:b1:89:25:73:33:ec:01:c7:f0:0c:41:01:63:c9:5e:ce:67:
6c:15:20:3f:3e:d0:e9:7d:22:83:88:c7:96:01:26:90:45:0b:
a6:c3:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:25:01 2025 by rpki-client