Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyWnoXdmlRQyY-q3TQaz6d4Qbu8.roa
File: kyWnoXdmlRQyY-q3TQaz6d4Qbu8.roa (raw, json)
Hash identifier: qBIrcgjK6K9Z6U7jI4TOEGlwhpRWyD+6YdN7rZAUafE=
Subject key identifier: 93:25:A7:A1:77:66:95:14:32:63:EA:B7:4D:06:B3:E9:DE:10:6E:EF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C81926CF7A99C3E9D6449B1A6E0FE9F32
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyWnoXdmlRQyY-q3TQaz6d4Qbu8.roa
Signing time: Tue 19 Dec 2023 10:15:06 +0000
ROA not before: Tue 19 Dec 2023 10:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:92:6c:f7:a9:9c:3e:9d:64:49:b1:a6:e0:fe:9f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 10:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9325a7a1776695143263eab74d06b3e9de106eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:58:bd:b7:a0:e7:4e:1f:82:a7:43:43:2f:c3:
22:83:07:5c:38:de:1f:a1:60:04:99:e7:f1:9e:d0:
e3:b9:b8:7f:35:93:85:e5:34:9b:81:be:db:f3:20:
76:aa:c9:37:ef:4f:b8:7c:f5:9a:fc:64:e0:4e:77:
74:cb:fc:16:2c:0e:0e:74:9d:25:93:37:19:c5:53:
86:81:38:4e:e2:09:19:4f:6f:af:2a:c0:8b:8f:c6:
c6:51:9a:0a:40:c2:b6:91:1b:bb:ac:e0:2f:98:57:
9d:26:3e:63:2e:6c:6d:de:a4:37:ba:7c:57:ba:c4:
e4:87:a0:24:a5:5a:96:eb:65:57:76:77:3f:6d:9d:
bf:6f:90:fe:7f:36:49:d5:46:17:4a:16:f5:48:ed:
e5:fb:b6:9d:09:ab:f2:8c:bc:db:f5:b9:ab:bb:ad:
f6:bd:18:87:ae:d8:b9:e5:53:29:11:b0:1f:80:d9:
ac:77:9b:fb:d6:8f:3d:be:ee:20:63:12:9d:45:29:
7f:74:51:d8:09:07:95:58:b0:1b:79:eb:6d:e9:2f:
e8:1a:8a:c7:ca:29:06:6e:8d:e8:14:f1:24:75:ae:
3f:1a:71:b8:b3:9b:83:32:1a:f7:50:c4:1e:24:c0:
03:60:4d:8e:fd:45:74:84:8f:93:9c:2d:d8:7b:32:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:25:A7:A1:77:66:95:14:32:63:EA:B7:4D:06:B3:E9:DE:10:6E:EF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyWnoXdmlRQyY-q3TQaz6d4Qbu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:77:02:d7:33:ca:4d:82:f8:58:cd:b7:55:73:54:d6:86:01:
52:c6:29:a1:35:ff:6c:1d:ca:8e:db:6d:5a:f8:b4:a9:ae:a3:
c0:e1:e0:df:19:e6:cf:87:10:d4:01:0e:8d:50:62:85:fa:12:
ce:a9:fe:0c:fe:26:fb:5e:f4:c5:0d:c3:a9:81:5c:ca:a6:4c:
38:c1:a6:46:c7:15:43:b7:7e:c1:90:4d:51:f4:8d:6f:a4:60:
ae:62:2e:72:c0:ed:90:b2:e4:b5:db:d7:67:1e:56:ef:26:8f:
89:75:7b:a5:42:e0:66:f7:1b:5d:13:58:bc:0d:31:21:23:d6:
12:fd:f9:7b:f4:9e:3d:19:c4:fa:60:14:91:79:39:10:61:98:
c2:45:93:4f:8b:53:64:52:75:05:bb:61:02:53:e8:e4:ec:59:
49:84:0f:21:39:de:c7:45:42:cf:7d:92:3a:d9:a6:a8:09:b4:
cf:2d:9d:65:03:2d:51:73:ae:78:81:ee:45:b6:ee:65:18:56:
50:80:aa:2d:84:d3:52:8d:35:0d:e4:de:3b:70:3d:9e:2a:60:
ef:aa:c4:3a:72:f2:19:72:57:b6:f1:f0:d0:75:3a:42:52:3f:
84:e8:d8:70:39:b3:c6:b2:ca:04:55:88:ff:34:3a:78:c5:d4:
f1:5b:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:25:09 2025 by rpki-client