Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sblhvO2jL2SnwkXBguWmBradwGs.roa
File: sblhvO2jL2SnwkXBguWmBradwGs.roa (raw, json)
Hash identifier: VBMi8TPQhykMuJK8AopRKKB0uUjDj5TKIRt+vnjoTvQ=
Subject key identifier: B1:B9:61:BC:ED:A3:2F:64:A7:C2:45:C1:82:E5:A6:06:B6:9D:C0:6B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADE49E7E41AFDB6F4FBD6220BA02CE382
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sblhvO2jL2SnwkXBguWmBradwGs.roa
Signing time: Fri 29 Sep 2023 00:14:59 +0000
ROA not before: Fri 29 Sep 2023 00:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:de:49:e7:e4:1a:fd:b6:f4:fb:d6:22:0b:a0:2c:e3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 00:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1b961bceda32f64a7c245c182e5a606b69dc06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:01:ca:39:86:19:19:e7:2c:18:5a:a9:cc:
d0:31:d0:63:ab:d1:c4:8b:b4:27:be:ac:c3:36:dc:
ed:57:51:44:22:38:e5:02:51:da:93:c2:15:22:e6:
3d:eb:a0:fb:5f:dd:3a:e4:b8:21:31:5d:ea:c7:f4:
9c:dd:31:9f:e3:0d:ce:f1:1c:c5:7c:fa:eb:8d:73:
5c:a2:d9:4d:72:06:36:db:75:b8:a1:a3:d7:c6:83:
bf:d1:e2:f5:15:78:50:af:27:a5:4b:83:d8:5e:2f:
f5:1c:19:1b:55:2b:23:ed:7d:34:3c:91:81:5c:83:
85:94:4f:fe:54:b4:29:1b:ed:69:6c:68:ea:3a:f6:
96:19:68:92:66:78:b3:fb:da:45:9a:c8:fa:68:7c:
39:ad:d6:58:fe:d4:2a:09:ad:7a:88:5f:21:91:3c:
96:a7:74:ed:5b:2d:78:e6:1d:0b:22:a8:e3:8f:a0:
cf:76:22:13:8c:95:fe:38:f2:a1:d9:7c:b0:2f:3b:
db:03:31:a8:8f:b6:12:d8:df:cf:82:68:85:7e:98:
42:ee:4f:7d:56:7c:2f:ca:64:cd:c4:3e:ab:f7:3b:
a6:0b:5b:95:b2:e3:64:81:22:04:bf:f8:13:59:e8:
97:b8:af:9e:c4:ce:59:cf:f8:81:c7:bb:01:c8:4b:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:61:BC:ED:A3:2F:64:A7:C2:45:C1:82:E5:A6:06:B6:9D:C0:6B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sblhvO2jL2SnwkXBguWmBradwGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:ca:5f:a6:21:4f:97:bf:41:95:f4:fa:a9:b4:75:fc:59:18:
cc:78:23:e4:31:90:47:bc:cb:3a:18:59:8b:4d:08:ec:6a:9b:
5a:65:57:2e:06:b9:5d:af:e3:6f:e8:0e:12:7c:b2:a7:86:b4:
ff:a9:67:0b:3d:0d:c9:09:81:3b:0c:a8:82:9e:ab:12:8e:14:
8c:18:c5:16:90:e3:60:76:68:c9:c6:60:61:03:74:22:22:27:
36:dc:8b:57:e4:a4:7e:5e:67:9d:b3:e7:38:5d:41:3d:f2:f7:
95:22:85:43:81:14:15:3b:a0:f7:fa:85:58:7c:e3:a0:bd:85:
2b:1d:d0:55:cf:dc:91:52:a2:0b:5b:6f:4c:de:b6:1c:74:b2:
69:a8:68:d1:7e:0e:1d:cd:b6:9f:a8:38:2b:96:83:91:25:34:
66:56:b2:7f:b6:ed:01:22:6f:97:63:b8:6b:e3:f2:ff:51:2a:
ce:12:f6:43:f5:07:b2:6a:63:e0:6f:59:c3:5d:f6:82:3b:a8:
0c:a6:da:40:6c:2a:62:f4:51:d1:75:fe:01:bf:70:6d:be:48:
9f:be:b4:8d:68:23:8d:e2:97:26:b5:96:01:25:62:b0:c2:ab:
dc:52:60:48:8d:b2:03:84:45:24:8a:30:d6:21:d1:e8:46:be:
a9:06:6e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:20 2025 by rpki-client