Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sEh06DeXZTxFIbBoTOCt6vnFYpI.roa
File: sEh06DeXZTxFIbBoTOCt6vnFYpI.roa (raw, json)
Hash identifier: Jd4SgWy/ep3/3UjpeJD4Y+WljX6cX/xTk0TkVcz+n3c=
Subject key identifier: B0:48:74:E8:37:97:65:3C:45:21:B0:68:4C:E0:AD:EA:F9:C5:62:92
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEF6B47AFB77A36E42BB8DEA69101FF7B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sEh06DeXZTxFIbBoTOCt6vnFYpI.roa
Signing time: Mon 02 Oct 2023 08:04:59 +0000
ROA not before: Mon 02 Oct 2023 08:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:ef6a:b698/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:6b:47:af:b7:7a:36:e4:2b:b8:de:a6:91:01:ff:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 08:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b04874e83797653c4521b0684ce0adeaf9c56292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:4d:e8:56:b2:2d:18:c8:87:98:15:ad:dc:
ee:05:3a:0c:8a:b9:d2:69:a8:ff:55:72:cb:56:1f:
e2:3b:8f:fa:ae:9b:d0:57:6d:57:6d:35:81:57:a7:
77:07:c7:77:ae:c3:ce:d4:9c:c6:10:67:18:f5:00:
e4:65:ff:a2:e2:2f:b2:ee:ba:4b:84:25:a9:9a:e2:
11:d9:82:2d:bb:cb:57:b0:2c:83:99:13:50:ba:dc:
10:eb:a4:d7:8d:b3:0f:39:66:cb:a2:d1:cf:ff:0f:
17:4e:72:84:7c:f2:e5:f6:1b:3a:3d:88:4d:49:da:
11:76:57:51:31:37:5e:45:6c:bc:b4:f0:d3:c9:b6:
84:23:17:07:55:39:4e:03:ac:e1:dd:07:6a:38:55:
61:80:99:e3:15:13:8c:35:7a:6e:65:df:6d:b2:89:
4e:55:f5:30:fa:c5:de:01:16:c8:fc:31:50:31:32:
25:6d:e7:83:1d:b7:f2:e3:4b:a9:91:cc:29:7c:1e:
56:f5:eb:94:b0:b5:98:d3:de:25:23:81:23:d6:42:
66:c0:06:62:96:66:62:1d:65:0a:7f:62:f4:dc:89:
4e:e6:66:eb:51:3a:4f:e5:d4:73:11:6f:1f:3d:44:
61:02:e5:15:a0:e6:97:bb:12:3d:48:01:ec:f4:82:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:74:E8:37:97:65:3C:45:21:B0:68:4C:E0:AD:EA:F9:C5:62:92
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sEh06DeXZTxFIbBoTOCt6vnFYpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cb:0d:d3:fa:b2:60:b5:7a:9a:63:e2:74:38:58:5f:cb:73:96:
34:56:90:62:3a:f0:8a:11:a9:ac:89:77:b1:51:d7:b3:22:1e:
35:ef:f5:a8:91:3c:3f:c3:d8:69:8c:a1:cf:15:7c:30:ab:a3:
73:49:dd:28:43:de:a7:76:c9:66:d3:b3:de:78:c4:c7:52:40:
23:ba:3c:8c:57:a3:07:d7:a2:c5:0a:38:e9:39:65:f6:7d:e8:
07:f6:d5:a7:1d:a9:f8:30:87:bc:1f:1d:a1:4c:0d:d5:86:b4:
77:51:a6:10:b1:8a:71:de:ce:eb:a1:bf:6d:1f:7e:15:32:7d:
a0:16:c3:a3:fd:c4:e8:17:42:91:66:ea:9b:a7:c0:fb:7d:18:
23:38:af:f7:2a:20:39:50:a2:2e:91:d1:02:97:f5:31:1b:38:
57:6c:bb:09:d9:c5:08:77:b8:90:12:cd:50:cf:d0:93:42:c6:
5e:fd:d1:2e:04:04:14:07:e0:27:ed:3b:fd:73:75:17:ea:2b:
f9:af:3d:e9:b9:b5:4e:8b:f3:70:22:cf:e7:f3:62:87:4d:45:
42:09:18:c9:c6:42:fc:40:b3:e2:53:19:cb:91:46:5c:b4:2c:
95:74:6f:27:31:ed:c7:c5:23:26:5b:b4:b8:8e:ca:12:df:a7:
57:79:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:36 2025 by rpki-client