Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rTWs8KNF6LA4XulL_I0ryGKDzkQ.roa
File: rTWs8KNF6LA4XulL_I0ryGKDzkQ.roa (raw, json)
Hash identifier: lCvYFplY/5035Somj9OcHaDZH1B5XwxkQEdP2D5XyhY=
Subject key identifier: AD:35:AC:F0:A3:45:E8:B0:38:5E:E9:4B:FC:8D:2B:C8:62:83:CE:44
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4D67952A269C27464DEEEDCDB748F7A7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rTWs8KNF6LA4XulL_I0ryGKDzkQ.roa
Signing time: Fri 20 Oct 2023 14:05:15 +0000
ROA not before: Fri 20 Oct 2023 14:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:4d66:cd4a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:67:95:2a:26:9c:27:46:4d:ee:ed:cd:b7:48:f7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 14:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad35acf0a345e8b0385ee94bfc8d2bc86283ce44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:fe:7b:66:25:1c:08:07:60:1d:8e:c7:0f:
57:69:a0:e3:0a:98:57:dc:89:49:a1:95:56:72:91:
98:ee:31:91:9b:5d:45:1c:91:9c:0e:5f:ba:24:40:
77:ec:61:b8:17:81:f9:e6:96:fe:77:3c:3c:5d:b0:
01:6b:1c:9e:de:eb:c4:c5:22:db:4e:af:36:a7:65:
7a:06:f3:cd:a1:77:ea:0b:2a:94:cd:32:d7:93:14:
aa:40:5b:01:10:f2:0a:23:c1:76:98:2d:a9:0e:6f:
27:84:f8:66:23:bd:3a:f9:5a:ff:27:36:2d:f7:44:
83:47:5d:bf:32:74:03:d7:51:8e:9c:4d:23:5a:77:
4e:b2:76:ce:c6:72:2c:18:b3:86:5c:17:16:b9:11:
31:f2:61:68:9a:0d:82:30:a6:18:03:bd:98:8f:ba:
ed:57:09:db:cd:f3:6e:d6:64:db:50:de:6c:ce:85:
d7:00:1d:98:b9:59:5a:d4:62:d6:5b:c8:6d:30:5f:
f5:14:a7:88:61:d3:55:2e:e1:bc:71:ba:cd:4b:03:
4a:8c:3f:5c:bd:cb:00:2b:91:07:9c:09:c9:7e:18:
7e:a1:57:46:a8:56:ba:ca:e4:20:d6:71:c3:95:fb:
17:55:ed:20:f5:51:ff:89:a2:aa:55:66:19:ec:05:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:35:AC:F0:A3:45:E8:B0:38:5E:E9:4B:FC:8D:2B:C8:62:83:CE:44
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rTWs8KNF6LA4XulL_I0ryGKDzkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:ff:56:59:06:20:da:bb:c9:ae:66:f7:93:73:7d:de:b5:c4:
d5:88:ae:da:9e:b8:3a:a0:8c:37:05:3a:5a:33:db:1f:b7:34:
58:1e:ab:fc:60:91:6a:80:32:10:e4:f9:3f:31:22:36:11:99:
a1:dc:a2:95:53:32:18:26:69:f7:13:40:e0:88:ac:62:d4:c9:
cf:b3:4b:a1:ff:33:0b:05:8a:fd:fc:12:ba:c9:1d:d7:b2:38:
1e:44:29:2b:17:89:a9:da:3e:46:8a:6f:c2:65:d0:cb:7a:b6:
fc:22:3c:fd:0b:56:21:ba:fb:7d:20:02:b8:4e:93:cb:2b:00:
87:2c:a7:79:b6:73:bb:3d:c8:e3:64:d9:df:0b:b4:85:7a:cc:
ef:0b:4b:f2:1a:c5:41:df:ad:17:cb:7e:0e:ce:a0:a6:22:da:
d3:9a:44:17:7f:ab:51:5c:eb:92:f7:17:03:0a:f3:32:70:4f:
30:85:5a:ee:ba:e3:c3:02:ff:f2:e2:2d:a5:eb:f0:f4:e6:32:
1a:03:df:6b:84:2b:0d:9c:48:90:d6:3d:c5:e4:b7:09:36:db:
bb:1a:4f:97:5b:25:67:a1:82:fe:cc:bb:b0:fd:47:8a:bb:9d:
bc:69:88:f5:9f:4d:df:d6:5b:6b:25:e2:7b:58:61:ff:3d:a1:
ac:19:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:10:02 2025 by rpki-client