Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sWPjXWkliFE9JmQvTmJwn56g09Y.roa
File: sWPjXWkliFE9JmQvTmJwn56g09Y.roa (raw, json)
Hash identifier: PKKFWILjNct2BsXFcvz/MuxDZrySee+zF1aJ61USGgs=
Subject key identifier: B1:63:E3:5D:69:25:88:51:3D:26:64:2F:4E:62:70:9F:9E:A0:D3:D6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC9775B6A9FFE6387737302F62966B305
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sWPjXWkliFE9JmQvTmJwn56g09Y.roa
Signing time: Sun 24 Sep 2023 23:12:37 +0000
ROA not before: Sun 24 Sep 2023 23:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c9:77:5b:6a:9f:fe:63:87:73:73:02:f6:29:66:b3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 23:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b163e35d692588513d26642f4e62709f9ea0d3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:41:2e:ce:24:4c:6f:0c:46:55:5d:c0:78:
50:5b:5d:f2:de:08:6c:e6:4d:9b:c2:57:76:19:07:
bd:a6:55:22:eb:50:63:17:bb:09:3b:27:3c:1d:c8:
35:56:b3:ea:61:9b:81:03:1c:0b:95:2e:0f:79:17:
01:cf:09:97:9c:93:3a:d5:3c:31:d7:2e:60:f8:1f:
e9:a8:df:bc:29:a6:52:88:2b:e8:d7:54:c8:ad:3d:
0b:7d:bb:9a:b2:c8:99:13:6a:79:11:6e:6f:27:6e:
f1:fe:b0:35:0e:3f:09:92:fe:c2:f0:a0:5a:31:61:
7f:88:8e:0e:6d:0a:30:23:06:10:db:0e:ad:4d:27:
df:a0:a8:58:57:d1:36:b7:a8:7a:05:d6:8d:49:46:
2b:90:a8:ec:ec:f4:29:aa:bf:77:86:f8:a8:69:cd:
52:d3:c4:eb:53:8d:5e:d3:61:d5:6b:67:07:b1:11:
3e:9c:a6:6c:fd:6b:81:9d:34:94:56:00:15:02:06:
fd:a1:2c:83:b9:90:d3:ca:29:df:f5:b7:5d:d6:4c:
39:fa:3f:2d:64:a3:2e:41:f6:bf:ee:a3:85:24:7c:
d2:96:11:2d:f1:57:50:b3:f6:7b:36:28:ae:5c:84:
7b:5c:f4:f1:01:24:a9:6d:43:5f:99:3d:6e:ab:da:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:E3:5D:69:25:88:51:3D:26:64:2F:4E:62:70:9F:9E:A0:D3:D6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sWPjXWkliFE9JmQvTmJwn56g09Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:43:25:c7:d7:30:61:35:07:f0:5b:38:e2:50:e4:25:e2:0a:
fc:43:37:35:1b:03:e7:e1:15:2b:5e:65:58:58:8b:40:0e:44:
54:1c:7c:d5:b5:bf:04:bc:66:9e:7e:fc:57:58:85:7f:23:3d:
a1:84:f9:bf:00:7a:a3:ee:5b:e1:95:27:3f:a1:2a:92:27:10:
5e:94:81:e5:1b:fd:18:f8:5d:ce:d7:c4:87:40:d9:49:1b:bb:
74:7c:ee:96:c0:17:6f:14:5b:07:6c:6d:e9:ca:71:5d:9d:58:
13:6e:05:15:53:12:74:5d:57:e0:67:63:e2:60:7d:34:81:da:
bd:a6:c0:fe:2c:f1:fd:8c:71:e7:99:bc:22:7b:9d:28:40:f3:
1c:b2:bb:93:11:0c:0a:0e:63:0d:cf:d0:94:ce:80:6c:b1:e3:
29:99:69:91:3e:75:f7:69:05:86:f2:d5:48:c1:79:5b:b2:74:
e8:f4:c0:80:25:e1:0e:cf:9c:19:c8:86:29:55:91:3c:eb:95:
a7:e2:a3:70:6f:1f:cc:24:ac:c7:43:7c:39:14:cc:a6:89:ef:
53:56:d0:b7:96:3a:96:aa:1d:ef:1e:df:a5:ee:b8:8c:74:c9:
ef:99:9b:ca:c2:e6:48:e2:7b:e1:f1:39:c5:8a:33:68:fa:92:
60:19:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:18:13 2025 by rpki-client