Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sJgawdX6qmWRnN5U0WaGm_gTDvk.roa
File: sJgawdX6qmWRnN5U0WaGm_gTDvk.roa (raw, json)
Hash identifier: qT4TV9OK6UeLn1oU3Pv6DNdsPsWVOH8rg+GJPtTgXNU=
Subject key identifier: B0:98:1A:C1:D5:FA:AA:65:91:9C:DE:54:D1:66:86:9B:F8:13:0E:F9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3B679B84A8A7C4C2F99333258EAD02F5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sJgawdX6qmWRnN5U0WaGm_gTDvk.roa
Signing time: Tue 05 Dec 2023 19:14:54 +0000
ROA not before: Tue 05 Dec 2023 19:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3b:67:9b:84:a8:a7:c4:c2:f9:93:33:25:8e:ad:02:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 19:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0981ac1d5faaa65919cde54d166869bf8130ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:b7:f8:0d:71:8f:71:13:bb:b0:79:17:01:
cf:06:07:73:0e:ef:33:2f:7e:84:9e:d6:06:98:57:
c3:04:1d:40:b7:cc:97:79:9c:b1:e3:11:23:fd:7a:
47:c3:e8:88:b4:df:50:a6:45:d5:8b:cb:17:99:0e:
6d:3e:b0:3f:15:8c:a6:ba:1b:77:30:fb:e1:29:7c:
6e:cd:ca:65:58:31:7d:97:0e:cf:f4:d0:b3:58:5c:
1b:04:8d:18:c7:7b:08:a3:2a:34:fe:63:90:ca:0d:
b8:0f:c2:43:41:3f:e8:69:d7:cc:f0:47:60:61:0b:
89:86:a8:58:eb:af:a8:30:29:5e:fb:bb:0c:9a:7a:
8c:38:a0:e2:dd:84:be:5e:66:1c:1f:bf:a2:f5:3d:
11:e8:44:89:d0:99:26:c0:bf:99:06:d7:0d:2f:e9:
1f:81:45:c5:17:9a:88:c2:f5:9f:07:00:b9:ca:a3:
da:df:4c:0e:41:2c:83:ac:c4:b0:75:b0:de:7f:58:
6a:7e:1f:27:c0:53:c8:da:42:05:66:04:81:11:7a:
22:f8:d0:56:52:a8:0b:b7:af:1a:98:dc:5a:a9:3b:
a4:2e:69:08:0f:af:a7:03:77:76:85:f0:f4:b1:20:
a3:30:08:9b:2a:64:29:2b:d8:bb:f5:f7:08:01:35:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:98:1A:C1:D5:FA:AA:65:91:9C:DE:54:D1:66:86:9B:F8:13:0E:F9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sJgawdX6qmWRnN5U0WaGm_gTDvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:bc:d8:8d:30:29:1c:bf:3f:cd:18:d4:cb:8e:68:a3:c0:a8:
16:f7:1e:13:b9:17:77:dc:9e:e0:82:89:26:86:e1:4f:8d:1f:
06:48:49:32:33:a5:9c:19:0c:c3:5f:11:d1:9b:02:f9:7f:92:
4c:1a:5e:60:65:2a:bb:d1:c1:68:1b:57:f0:9e:92:79:70:3d:
84:03:1c:3f:a0:15:40:e4:96:03:d8:0d:00:49:ca:08:1a:f3:
f3:ac:9a:db:0a:fa:6f:67:d3:56:ce:14:8d:d4:45:c0:d0:07:
82:df:ad:a7:d3:b4:c2:c0:e0:70:30:8f:ba:51:a3:4f:84:66:
a3:7d:ea:df:f6:a5:28:f6:5c:0b:1e:85:51:48:16:b7:8e:23:
58:22:aa:2d:ed:79:d0:dc:d5:5a:89:2a:45:eb:2d:9c:c5:98:
1b:dc:05:ef:fd:f1:5b:8b:4b:bf:42:38:48:1f:e2:bd:95:5d:
ce:4a:07:88:46:07:0d:60:bf:5a:b5:f7:aa:fc:8c:bd:a9:67:
f8:fe:07:72:5a:4d:b0:bf:19:f2:a5:ad:c9:80:12:cf:c8:0c:
95:a1:75:f7:29:5d:f4:cb:5b:a2:3b:50:71:d7:a7:58:b8:32:
7b:6d:f0:5d:fc:71:67:71:6b:df:ce:9f:c0:8d:a1:cd:e3:ee:
2f:36:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:05 2025 by rpki-client