Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l8X7w4ZIESLjd-7qyjIJsSAGy8k.roa
File: l8X7w4ZIESLjd-7qyjIJsSAGy8k.roa (raw, json)
Hash identifier: hzA8WMADdBnJMUugEMteD68J6cFovEeycFJkEUjy46M=
Subject key identifier: 97:C5:FB:C3:86:48:11:22:E3:77:EE:EA:CA:32:09:B1:20:06:CB:C9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB6295728DE9D2C645E8A5D7C91655AE2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l8X7w4ZIESLjd-7qyjIJsSAGy8k.roa
Signing time: Thu 21 Sep 2023 05:14:37 +0000
ROA not before: Thu 21 Sep 2023 05:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:29:57:28:de:9d:2c:64:5e:8a:5d:7c:91:65:5a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 05:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97c5fbc386481122e377eeeaca3209b12006cbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:c5:a4:3f:c4:2b:72:77:5e:00:74:c7:2e:
55:7c:02:2b:86:9c:78:e7:b8:18:85:a7:90:8e:6b:
8b:d4:19:ea:84:e7:bf:ea:7d:5e:39:c6:84:44:9e:
5c:cd:b5:75:ec:74:96:a3:b1:9c:61:9c:a3:7a:5c:
58:09:43:d5:84:96:8f:18:e6:9e:58:e9:e3:80:19:
ef:17:17:19:fb:78:54:80:8f:fb:47:bf:c8:c6:af:
e9:81:06:92:82:53:e4:4a:f3:c6:95:53:09:a4:95:
ea:0f:4d:56:3c:04:21:9d:2c:6e:3e:b5:36:f8:4b:
7f:43:dc:25:86:b0:7d:76:d1:fa:a2:6c:33:57:f3:
e9:c3:b8:ad:13:a2:0c:c2:21:5d:92:06:ec:e2:e0:
d7:19:23:a9:10:39:8b:d0:e0:c7:13:05:81:7a:d1:
cc:53:ac:6f:cf:1f:ab:91:fe:7c:6c:42:5f:75:69:
48:66:6e:06:9d:f3:f4:52:2d:63:ac:f6:35:66:ff:
0f:e7:db:a4:ee:bb:3d:82:0e:7e:83:7a:4c:16:e6:
31:fe:3d:d9:bf:96:49:9f:e4:a3:92:95:27:77:60:
70:48:03:df:53:8a:bb:4f:8c:85:f0:6d:76:0f:a6:
fc:fa:11:46:75:22:59:93:83:08:98:ac:07:bf:74:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C5:FB:C3:86:48:11:22:E3:77:EE:EA:CA:32:09:B1:20:06:CB:C9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/l8X7w4ZIESLjd-7qyjIJsSAGy8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:84:cf:a4:6e:bd:0a:f0:2c:0c:51:0c:35:96:b8:3d:a4:b1:
13:12:36:11:52:57:67:e7:a1:d4:f2:af:57:60:73:9e:80:63:
79:1a:0c:8e:04:9f:a9:fd:0b:d3:de:dc:1f:22:6c:ef:63:51:
c2:50:86:65:b2:8b:ff:b3:94:80:eb:de:db:20:78:da:39:04:
47:91:f8:f6:e8:3c:19:fb:26:63:f8:89:8a:db:1f:8a:11:97:
30:86:d8:ea:b3:c2:09:72:68:87:87:1c:ce:92:00:83:76:d4:
96:ac:01:5c:f3:9b:83:09:7e:1c:ec:6c:26:39:95:05:13:10:
79:fc:db:3c:10:24:04:36:97:32:7d:b3:9c:dd:56:ad:25:94:
3c:22:2e:7c:ed:df:1b:8f:c1:8a:8f:0c:a6:9f:7a:9a:b6:7c:
4c:64:8b:f3:93:b9:94:c7:f8:03:65:76:8e:a7:76:51:3f:44:
57:5f:73:09:37:a6:b2:01:49:92:50:9d:18:d6:fa:99:7e:df:
b6:cd:c6:4a:02:a3:97:77:10:71:c0:3e:bd:2f:15:30:bf:54:
6d:67:d8:dd:2d:11:0e:88:72:86:11:b4:92:0e:bc:9b:1c:28:
85:05:3b:76:50:62:4d:51:82:0a:93:bf:6a:0d:f2:0b:cc:46:
34:ee:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:40:25 2025 by rpki-client