Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pKsaTLLdIEGeCUffhbc3XvIq_iU.roa
File: pKsaTLLdIEGeCUffhbc3XvIq_iU.roa (raw, json)
Hash identifier: 4kRdk2fDBxewzNy5caPvEI71pMQFBjrHYgp8OrTY+Lo=
Subject key identifier: A4:AB:1A:4C:B2:DD:20:41:9E:09:47:DF:85:B7:37:5E:F2:2A:FE:25
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C8426853C146D9AB0241FDD9A72A004A0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pKsaTLLdIEGeCUffhbc3XvIq_iU.roa
Signing time: Tue 19 Dec 2023 22:16:06 +0000
ROA not before: Tue 19 Dec 2023 22:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:84:26:85:3c:14:6d:9a:b0:24:1f:dd:9a:72:a0:04:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 22:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4ab1a4cb2dd20419e0947df85b7375ef22afe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cc:bc:dc:ce:52:42:43:aa:c5:f8:6f:7e:03:
22:21:fa:57:73:ba:31:34:3d:0b:b1:33:ba:3d:ce:
1d:23:99:e0:98:71:a9:cc:e9:fb:6b:5d:4f:3a:5d:
21:dd:64:7a:8a:c2:4c:89:97:34:98:36:f1:f1:40:
71:4e:75:7d:2e:bc:93:43:0a:41:5c:3f:fb:d2:65:
ca:bf:59:5d:59:be:17:7c:6b:77:34:8d:fe:c2:8a:
88:8f:d9:71:58:05:53:bb:79:6f:6d:2c:07:9c:1a:
69:66:79:fb:96:73:2e:98:36:75:6e:7d:91:48:60:
a1:d4:50:30:78:14:d8:9c:f5:2c:b1:49:9e:0a:15:
23:88:c2:42:94:5a:46:e6:3e:28:67:7b:1c:13:8e:
5f:47:08:be:88:4b:44:d0:b7:53:fd:90:c0:4f:a3:
b4:0c:49:99:31:24:6b:7e:2b:17:92:ee:85:e4:60:
c0:06:95:a7:1a:b6:d7:42:e1:1f:7b:b9:1f:42:d6:
48:07:cd:7e:48:75:0a:78:8b:f7:7c:f6:b4:45:fe:
d0:6e:24:8d:4b:ef:8d:f8:34:bd:5b:2c:e0:de:24:
91:bb:86:2b:a9:30:37:d8:87:bb:12:4f:a8:4c:0f:
d3:86:9d:e0:91:df:00:ce:d7:0f:b4:e1:86:57:7d:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AB:1A:4C:B2:DD:20:41:9E:09:47:DF:85:B7:37:5E:F2:2A:FE:25
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pKsaTLLdIEGeCUffhbc3XvIq_iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:c8:00:76:97:95:32:6c:3f:93:4f:ff:41:80:07:d2:b1:cc:
3d:b1:78:56:af:db:d4:a1:ee:dd:0b:aa:24:98:7b:c5:bf:7e:
5f:4d:c8:c8:a9:1b:2f:77:52:9f:db:87:05:d1:fd:d0:47:37:
cb:e5:23:e7:09:59:4c:a6:0e:86:6c:03:d1:22:34:ba:de:98:
c7:2a:67:92:15:db:94:e8:ea:85:68:ce:1d:36:cc:d6:b0:2d:
8a:14:64:f9:40:a3:05:06:bf:f8:4a:bc:65:8c:b5:c3:12:46:
12:27:78:19:1f:3b:f6:cf:c3:6d:f3:16:81:a8:5e:c8:b7:8b:
8d:47:8c:8b:0d:7e:8c:fb:40:19:ef:00:0e:29:bc:3e:ba:5f:
37:2b:9f:e3:67:7d:cf:2f:be:b1:36:0a:f3:3f:04:d2:cb:23:
0f:0c:a4:e5:e5:d6:86:b6:4e:f0:9a:fe:56:03:8f:4b:c1:ec:
62:93:ac:6b:3d:f6:88:ea:17:c4:7a:d2:e2:0f:dc:32:1b:29:
ef:f3:50:ab:68:9b:64:c0:9a:40:80:bc:69:ed:31:93:55:b3:
7e:a4:e7:28:0b:e1:5f:b7:20:d5:da:a5:e4:1d:f9:c8:e6:fb:
87:cf:a7:1e:11:e5:53:f6:6b:18:40:77:4e:69:79:85:e2:e7:
b2:3e:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:17 2025 by rpki-client