Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rBN3WeUgHMBAz_2IE1u42qY79VM.roa
File: rBN3WeUgHMBAz_2IE1u42qY79VM.roa (raw, json)
Hash identifier: hy4JB2luF8Wh9QbTSqCb4EDSogIR+b/4DHRsNjvieVo=
Subject key identifier: AC:13:77:59:E5:20:1C:C0:40:CF:FD:88:13:5B:B8:DA:A6:3B:F5:53
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD0213651479429DCA29B0B2C489BD3F1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rBN3WeUgHMBAz_2IE1u42qY79VM.roa
Signing time: Tue 26 Sep 2023 06:15:52 +0000
ROA not before: Tue 26 Sep 2023 06:15:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:21:36:51:47:94:29:dc:a2:9b:0b:2c:48:9b:d3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 06:15:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac137759e5201cc040cffd88135bb8daa63bf553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:0b:fe:0f:62:d4:15:f8:93:e5:ce:e3:f7:
f5:fd:88:75:7b:b1:7d:36:b1:c2:37:5d:09:8f:ca:
47:5a:fb:0a:d4:e1:38:d3:b9:85:f2:42:c0:ab:0f:
a6:df:fe:c3:e6:4b:75:37:e8:26:14:58:f4:7a:31:
ec:af:3c:ef:d9:ac:e8:2d:e0:f7:04:6e:ec:63:71:
4d:f6:20:c3:af:85:cf:1e:32:94:ce:8f:2b:c2:3b:
3a:80:4a:74:de:87:f9:65:9e:85:3f:db:c9:af:9f:
58:5f:72:b7:75:fd:e8:9b:5b:ff:8b:bd:7a:bd:f7:
06:b6:fe:2b:8d:11:05:22:96:8c:73:7c:15:7d:33:
00:7d:b1:48:8a:b7:a9:dc:c0:13:73:bb:c0:19:66:
07:a6:71:dd:c8:fd:db:7c:51:2d:f3:22:9b:70:7d:
41:5c:b5:7e:20:31:37:9b:8f:f1:22:9f:72:ad:66:
5c:38:36:82:6e:a0:28:a4:1a:20:cd:6e:37:1a:b5:
cd:db:3f:d5:bd:ca:f1:52:f7:e1:49:8a:db:a8:de:
7f:52:ed:3c:65:cc:e0:7f:3e:c1:32:1f:93:0b:a3:
61:90:7a:10:c3:52:41:ed:fb:24:37:f3:82:6d:0a:
56:22:d1:cd:1e:76:8b:a1:16:a6:23:bb:fc:cd:9f:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:13:77:59:E5:20:1C:C0:40:CF:FD:88:13:5B:B8:DA:A6:3B:F5:53
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rBN3WeUgHMBAz_2IE1u42qY79VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:a7:4a:14:e1:1f:8b:f2:5b:c6:a6:42:d7:f1:6a:11:5f:d8:
9a:a8:19:3a:78:87:a4:37:3a:47:03:cb:46:5b:96:f8:c3:01:
0a:ca:d1:0f:5e:a0:67:e5:f0:04:f9:b7:bb:6a:1c:b3:20:d9:
27:ce:0b:6b:52:21:c2:ee:07:ff:75:92:83:45:36:8a:fb:47:
c2:df:30:ea:4a:52:11:9c:b0:5d:84:35:83:5e:ab:31:63:10:
75:01:da:23:7c:63:ec:36:31:7c:9c:12:df:e3:57:9e:5e:b5:
40:71:99:7b:6d:6b:4e:90:5e:66:81:ed:a2:ca:f4:89:01:88:
75:4f:58:84:5a:37:d7:74:d8:62:e8:c5:65:ab:8d:08:5c:b2:
f9:06:34:89:f6:f0:19:11:e8:2d:70:fe:a2:0d:3d:2b:0e:f9:
bb:a9:20:78:51:11:86:cb:79:71:82:1d:3a:55:d5:fc:23:d0:
05:ee:f6:d0:64:ae:8f:da:44:f6:2b:4b:43:ce:6d:eb:25:c1:
e9:49:3b:91:33:ad:7a:3a:4b:59:46:90:e4:b7:04:b4:59:9d:
91:8d:ef:fe:9c:dd:bb:a6:37:62:b5:c8:a9:be:b5:a5:23:70:
85:9e:db:76:2a:43:87:a4:5d:29:9e:04:b7:2a:ca:5d:62:96:
74:46:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:27 2025 by rpki-client