Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kaJzqXrDoXFjjvaAO8F6TivgKV0.roa
File: kaJzqXrDoXFjjvaAO8F6TivgKV0.roa (raw, json)
Hash identifier: ekg+H9r2WcQXoSe0MGoZPfMdp3dV80wWINeMLdrcOaM=
Subject key identifier: 91:A2:73:A9:7A:C3:A1:71:63:8E:F6:80:3B:C1:7A:4E:2B:E0:29:5D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3CB2187EC5F2EAE9AE734858237B2E85
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kaJzqXrDoXFjjvaAO8F6TivgKV0.roa
Signing time: Tue 17 Oct 2023 08:13:06 +0000
ROA not before: Tue 17 Oct 2023 08:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:b2:18:7e:c5:f2:ea:e9:ae:73:48:58:23:7b:2e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 08:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91a273a97ac3a171638ef6803bc17a4e2be0295d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:7b:2c:f4:ad:ab:95:be:54:17:8e:7b:ac:
db:ef:49:23:d7:69:6e:05:19:58:c8:ef:9d:b8:12:
77:ab:00:7e:5c:d6:fc:e4:ca:11:32:bf:e7:e1:5e:
b1:4c:8f:6c:fe:99:63:f0:8b:67:9e:27:a6:e5:f8:
25:f2:60:eb:32:40:d9:75:07:f1:a3:71:56:c6:9a:
8d:21:2b:ae:ed:17:a0:f8:38:f1:9f:ce:25:de:0b:
2c:6c:25:ea:9c:72:39:78:da:f7:f4:ba:87:47:75:
c5:0e:3c:92:61:8f:ee:b2:9a:fd:30:b2:39:1e:8d:
bd:61:a3:a4:28:5a:d1:7a:b6:77:f9:a1:b4:8f:ec:
d1:cf:06:42:64:af:87:0b:38:db:1d:60:d5:44:0d:
ee:04:0b:6a:3e:72:e4:df:07:fc:60:55:ff:43:96:
a3:3b:9b:91:06:7f:47:d7:06:b9:58:91:e9:eb:fb:
31:5f:13:ac:2e:61:41:c9:0a:1d:e2:39:23:43:45:
21:67:e1:8d:aa:58:57:2d:43:bf:05:a4:30:29:01:
41:76:ba:c3:51:7e:c3:b8:33:f9:28:76:91:94:66:
eb:df:b4:44:9c:c1:33:5e:8e:d4:fc:51:74:68:1c:
07:d2:39:1e:40:f0:f1:18:fb:c8:6a:60:33:33:b7:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A2:73:A9:7A:C3:A1:71:63:8E:F6:80:3B:C1:7A:4E:2B:E0:29:5D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kaJzqXrDoXFjjvaAO8F6TivgKV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:24:2a:ad:e7:f1:02:c1:b9:d6:c4:8c:fc:f7:73:3b:ee:76:
57:b8:b9:5b:d0:2e:c2:7c:a3:d7:9e:50:aa:b1:0b:b3:ff:d4:
62:05:04:29:28:db:0b:c3:fc:2a:e6:73:f8:05:70:60:f6:f8:
90:25:0d:48:57:18:c2:29:50:28:c4:f5:fa:a1:61:d5:38:c5:
28:a2:93:e0:48:9e:9e:e0:97:df:ad:42:28:2c:a1:71:3d:02:
d2:b7:f4:be:c5:ad:20:e0:22:a4:1e:05:16:0f:70:51:41:4c:
57:66:1f:3c:4a:e5:3b:87:3d:76:bb:38:ff:97:7b:dc:b1:9b:
8c:4b:72:10:f0:38:44:48:78:0d:91:72:4b:26:da:c5:22:8e:
96:64:d6:f5:b8:11:f2:b9:82:4e:df:f6:b0:4c:70:09:2a:0a:
cb:f0:3d:8b:e1:c6:b7:db:e2:3c:bd:7f:2b:d3:ea:54:0c:8f:
9c:67:74:ec:f4:da:e0:bd:8c:23:60:7c:0b:8a:93:7e:b2:fd:
ba:37:ee:31:00:54:91:0b:37:b3:c3:4c:a6:5e:6d:9a:97:2d:
ff:39:39:f6:17:69:5a:7e:0b:9e:5e:ec:53:55:f8:50:50:0f:
9b:4e:d9:52:29:e9:ad:81:21:db:31:b1:43:f9:9b:1c:93:a5:
9a:d3:c8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:49:54 2025 by rpki-client