Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s332MuQiuilqv-SAEZo2DgfuxqU.roa
File: s332MuQiuilqv-SAEZo2DgfuxqU.roa (raw, json)
Hash identifier: NrAUtcOYjgV8pwRFvDVvoDUYpOJ/TX1xSWMQXcLlHjI=
Subject key identifier: B3:7D:F6:32:E4:22:BA:29:6A:BF:E4:80:11:9A:36:0E:07:EE:C6:A5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF9F80ED21836BAD4DB5A550159DA7FED
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s332MuQiuilqv-SAEZo2DgfuxqU.roa
Signing time: Wed 04 Oct 2023 09:14:58 +0000
ROA not before: Wed 04 Oct 2023 09:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f9:f8:0e:d2:18:36:ba:d4:db:5a:55:01:59:da:7f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 09:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b37df632e422ba296abfe480119a360e07eec6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:e5:d7:f7:a7:ab:b5:63:4d:21:7a:da:43:
56:b6:78:85:6c:4b:0b:4f:31:91:f6:76:c4:f0:5e:
b7:3d:3b:ab:5f:e5:89:ce:89:d9:1c:1b:ac:fe:82:
22:8a:94:b1:a8:b5:21:b3:18:15:eb:76:64:66:3a:
4e:6c:dd:cb:5b:77:f7:68:12:4d:1a:34:56:af:41:
05:ce:37:fa:a9:17:0b:16:0d:a0:03:87:98:5c:c6:
fc:d3:bb:11:50:b1:a3:c7:de:d0:21:9a:00:0c:49:
77:ab:27:2b:c2:14:ee:75:d1:c0:2e:df:1f:ae:b0:
ea:24:71:7b:d8:00:ca:08:8e:09:a9:61:c4:db:a7:
da:2e:e4:2c:1c:a8:71:73:34:6b:37:3c:30:5b:86:
1a:eb:31:7d:ca:b7:c6:4b:e1:0a:9e:ae:c7:ee:f7:
28:db:7c:68:94:e8:0a:81:c2:fa:20:f6:f8:2f:d9:
2b:81:61:9c:3d:a3:fa:94:36:75:8f:76:f8:f0:e0:
da:95:22:0b:9e:37:05:3c:0b:15:77:7e:55:e7:14:
97:6e:49:2c:a0:39:4c:1d:d9:fa:07:79:88:08:21:
1b:57:08:39:4c:be:f0:98:22:55:ea:12:71:0c:95:
1d:06:3e:40:ba:43:8e:48:0b:f4:a5:fe:db:19:b9:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7D:F6:32:E4:22:BA:29:6A:BF:E4:80:11:9A:36:0E:07:EE:C6:A5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/s332MuQiuilqv-SAEZo2DgfuxqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:c9:6f:16:44:6e:76:3b:cf:0e:43:36:65:84:31:9e:ff:c6:
f1:5f:53:b1:9d:9f:4f:75:fd:6d:5c:31:f0:5e:b7:0b:af:e8:
9f:9a:40:ee:3c:5d:1d:f2:ec:f7:cf:3d:53:7a:5c:5b:42:19:
d7:fe:c6:6a:24:8a:86:be:cf:29:cc:01:e8:49:ac:24:bb:6f:
1d:cc:e1:aa:2a:07:4e:df:c5:b3:77:74:42:73:3e:ea:ba:67:
53:ea:51:c0:1d:2f:bc:70:29:6a:1a:7c:89:04:0a:e1:1f:f3:
a6:eb:7f:b9:55:3b:50:25:27:48:73:e5:88:03:ad:a4:cd:ef:
8b:e2:21:07:6b:cb:52:00:ee:f5:83:ae:88:dd:95:7c:f3:c6:
a9:4a:65:2f:91:fe:4b:01:b6:8d:85:e5:04:92:92:eb:fb:dc:
68:e5:5e:0a:e4:4c:2b:0a:77:9b:db:3c:29:f8:3d:c3:de:41:
ea:c9:98:71:ff:b4:90:dc:3c:40:c6:c3:74:2e:5e:46:43:9e:
58:97:7e:0e:98:16:3d:34:9d:29:27:46:65:62:d5:27:e8:7c:
9d:e5:ef:d1:09:8a:c7:a6:da:ab:cb:f7:5b:2d:4f:3f:4c:df:
ed:45:6b:0e:71:93:8a:2b:fa:62:4d:f9:db:d8:63:a8:22:0a:
e1:45:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:40 2025 by rpki-client