Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lInYt6kDaMooL5sEJ2FFUv4wgIY.roa
File: lInYt6kDaMooL5sEJ2FFUv4wgIY.roa (raw, json)
Hash identifier: 1W96b2ERqFUsIRh4M7l0vQWFms2DTyRgH5ko9eBJxWQ=
Subject key identifier: 94:89:D8:B7:A9:03:68:CA:28:2F:9B:04:27:61:45:52:FE:30:80:86
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BCFE2505F50B8D9944BD4F0ECE94478D5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lInYt6kDaMooL5sEJ2FFUv4wgIY.roa
Signing time: Tue 14 Nov 2023 22:09:57 +0000
ROA not before: Tue 14 Nov 2023 22:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cf:e2:50:5f:50:b8:d9:94:4b:d4:f0:ec:e9:44:78:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 14 22:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9489d8b7a90368ca282f9b0427614552fe308086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ea:fd:16:2c:dc:77:51:04:36:28:af:d9:29:
f5:f9:77:33:7a:4d:e7:76:2e:47:5e:93:45:73:30:
fa:68:a7:c7:e4:cb:22:64:7d:05:4e:87:22:8c:63:
08:62:94:2b:34:6f:cf:91:a4:7b:1f:57:d8:a8:ba:
1a:2b:e5:1a:65:5b:5d:c6:68:25:b1:df:05:d3:03:
33:91:f7:59:36:cc:8c:58:c7:50:06:25:6a:36:12:
9f:e8:22:71:2a:06:1f:b2:a3:94:62:b3:1b:ac:14:
5b:04:c6:b7:6a:9d:4a:de:8b:df:f3:4c:e4:5b:36:
39:c0:44:5a:7a:2d:5b:3e:db:56:11:50:b1:cd:94:
f4:c9:a9:47:5d:39:b1:90:1f:b0:19:7d:da:b2:ec:
5e:16:42:27:ed:81:68:22:47:15:d9:13:b1:d0:cd:
e3:b4:1b:4f:5f:f2:30:8c:71:f1:01:1b:d8:63:57:
be:93:41:f2:6c:94:cf:34:19:69:71:4f:9c:40:99:
53:c6:d3:c6:aa:90:d6:8a:cb:b8:5f:92:a1:a9:35:
1d:ab:e9:ff:08:2f:b1:ea:ed:9d:97:1e:d1:18:92:
da:de:ce:d4:35:17:4c:0d:e6:e5:95:df:bc:5e:59:
42:67:9e:fb:f6:08:bb:91:2d:b6:ea:3c:3c:f2:ea:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:89:D8:B7:A9:03:68:CA:28:2F:9B:04:27:61:45:52:FE:30:80:86
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lInYt6kDaMooL5sEJ2FFUv4wgIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:81:4d:4b:94:17:5d:2b:df:c3:1b:dd:6a:f4:4b:47:e4:c8:
1f:97:f9:be:37:12:81:ff:84:5c:3d:b8:32:fc:e6:e6:06:00:
5b:d8:74:e9:20:73:36:fa:60:0a:85:3d:2f:65:ae:96:4e:6d:
98:b9:4a:81:2c:a3:ae:09:92:b1:3e:09:fc:63:c0:03:ea:bb:
04:32:5b:16:6d:f5:d3:ba:05:36:59:8b:2b:96:dc:3f:63:75:
5c:c9:7b:42:1e:8b:73:ef:5a:94:fa:fe:3b:73:0a:72:eb:93:
e0:02:16:f9:39:37:be:8b:83:60:36:5e:16:73:22:10:a9:68:
29:b9:dd:d8:9c:91:10:8b:79:a6:c6:9e:67:8e:6b:e3:96:70:
66:9c:e7:e1:27:c6:76:03:42:e5:f2:65:ed:05:5f:a7:c9:b4:
63:d9:a0:e5:37:54:09:90:05:c8:29:6b:44:65:28:01:7f:c7:
d0:b1:ed:d9:c1:a2:27:d0:46:5b:d2:c2:db:97:81:61:94:16:
fb:9e:88:8f:84:95:38:87:88:08:99:b2:0f:f7:b2:bc:81:32:
73:35:e7:0c:e5:74:fb:8c:bc:af:28:67:c1:97:01:cd:a7:00:
ab:62:fe:f1:19:3e:da:2e:7a:bd:df:ea:e7:48:f3:c2:1c:e4:
69:05:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:06 2025 by rpki-client