Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/r5s2pp6rGyWSLyCH9aCwa9HAFiQ.roa
File: r5s2pp6rGyWSLyCH9aCwa9HAFiQ.roa (raw, json)
Hash identifier: s7ogi8/U60SU1FkkMJbyZWDDt0pe742pdA6Adf1LsFU=
Subject key identifier: AF:9B:36:A6:9E:AB:1B:25:92:2F:20:87:F5:A0:B0:6B:D1:C0:16:24
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B815B74DCEBBA7D78451BFA1A797BF364
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/r5s2pp6rGyWSLyCH9aCwa9HAFiQ.roa
Signing time: Mon 30 Oct 2023 16:12:16 +0000
ROA not before: Mon 30 Oct 2023 16:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:5b:74:dc:eb:ba:7d:78:45:1b:fa:1a:79:7b:f3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 16:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af9b36a69eab1b25922f2087f5a0b06bd1c01624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4b:40:1c:12:d2:b1:75:74:03:02:34:00:41:
a5:4e:32:c5:1c:b0:69:18:48:3d:a7:43:80:7c:c1:
d8:18:4b:e6:1d:a6:7d:52:13:f4:e8:78:bc:44:cf:
29:5c:e3:50:39:79:7a:54:a7:cb:7b:aa:59:d4:ba:
a3:55:63:84:4e:c7:44:88:30:25:59:73:af:ac:71:
2e:de:03:4e:1e:cc:03:98:87:7e:6c:75:05:85:a2:
51:4e:91:22:81:9c:0f:da:dc:4a:43:9f:07:2d:2c:
5a:b3:b9:c2:4b:06:0e:e8:d3:47:c0:98:d2:d8:ac:
ef:23:68:8b:e3:4c:79:88:2b:f5:b4:f8:06:08:8b:
64:25:f0:0b:b4:f0:f3:df:8a:cc:72:7a:6d:97:0f:
f7:72:ef:7d:a6:3c:3c:f5:da:95:ad:0a:41:83:d0:
4f:e0:82:fc:6a:6d:e6:45:ad:e2:83:c7:c8:c5:5a:
8c:67:7b:ac:4f:3d:ed:20:20:41:c6:8d:6c:31:9b:
62:10:a1:5c:79:09:8f:3d:b8:8d:18:a9:54:8c:b3:
67:e2:b5:a7:89:d5:ce:91:68:09:6a:24:82:5e:8f:
41:f4:60:fa:1d:ac:84:7a:a3:4e:54:96:d9:cb:01:
67:44:f5:b1:1d:3c:ec:5b:03:7a:ca:89:ac:3a:ac:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9B:36:A6:9E:AB:1B:25:92:2F:20:87:F5:A0:B0:6B:D1:C0:16:24
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/r5s2pp6rGyWSLyCH9aCwa9HAFiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:ed:7d:51:30:26:52:f6:68:b9:c7:e8:cc:e4:bd:8e:54:db:
aa:f6:cf:6b:4a:7a:de:dc:ad:f5:78:57:f0:31:68:0b:1c:66:
83:57:2c:ef:e0:b5:ea:22:11:b9:98:83:a2:66:2a:ac:98:2d:
9e:c1:81:91:a6:38:c4:6a:bb:e2:20:00:bf:3b:d9:6c:9c:28:
38:37:20:78:82:09:55:12:19:fa:ed:a4:46:69:3d:46:a9:16:
ea:05:8c:af:d3:61:f4:50:4e:b8:1f:46:84:06:84:cf:99:89:
0c:df:ef:e8:ec:24:1e:a7:55:85:07:38:ee:a7:71:8e:30:e3:
f1:17:31:f8:ef:fd:3e:22:ed:f5:1e:a6:2e:1c:08:7f:27:ee:
47:8b:e5:82:a1:59:af:ed:74:7c:ca:f7:f1:c5:f3:69:6f:06:
34:37:dc:77:73:1f:c7:fd:5e:64:54:5c:38:35:d1:b4:1c:05:
11:75:39:d5:bc:71:f1:95:a4:24:fb:a0:b2:ee:56:b3:40:73:
c3:a1:da:0a:7f:b0:ff:f7:1e:cd:8f:ce:8c:fd:77:01:1b:9d:
f5:c9:d1:45:76:fb:71:33:1f:50:79:c6:fc:12:14:9b:04:31:
7a:3e:da:d0:8b:4a:b1:9e:75:f1:dc:b1:62:b0:6d:74:45:e0:
ae:28:f8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:51:53 2025 by rpki-client