Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sfys8pf7DIogfvypwmlOp_xg6s4.roa
File: sfys8pf7DIogfvypwmlOp_xg6s4.roa (raw, json)
Hash identifier: /Sy4kWHCASHYo2zYGGbomkWkkmUKtq5LSJAJyiP4AN8=
Subject key identifier: B1:FC:AC:F2:97:FB:0C:8A:20:7E:FC:A9:C2:69:4E:A7:FC:60:EA:CE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB661107202B88A8924E7385B2D821E82
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sfys8pf7DIogfvypwmlOp_xg6s4.roa
Signing time: Thu 21 Sep 2023 06:15:28 +0000
ROA not before: Thu 21 Sep 2023 06:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:61:10:72:02:b8:8a:89:24:e7:38:5b:2d:82:1e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 06:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1fcacf297fb0c8a207efca9c2694ea7fc60eace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:26:9b:43:26:a5:29:72:21:d8:25:a5:3e:
bb:8b:b7:da:ca:15:cc:c0:3d:74:bd:52:91:63:65:
ca:46:fb:56:c9:5c:51:36:85:e2:c5:86:74:48:24:
00:ff:44:e6:23:d2:be:22:10:f5:f9:c0:ca:e4:8f:
4f:92:36:0e:7d:8a:d5:1b:2f:8c:9b:fb:f3:c2:e6:
27:12:41:5b:38:31:48:83:85:a5:98:61:c0:3f:9f:
94:07:98:6f:e9:06:47:18:81:1d:d3:75:de:fe:d5:
1a:f0:46:26:de:90:63:7f:58:db:42:2a:09:8b:6a:
64:19:7a:ed:02:7e:9f:6f:66:3e:4f:b5:3c:c0:9a:
1d:7a:37:88:3e:2a:9e:7c:9c:b1:fb:2b:13:67:69:
af:1f:46:96:26:f7:f4:26:cf:5b:a8:3e:2c:d6:dc:
59:76:b1:ef:4f:48:9c:f3:1b:85:5a:13:f6:8b:57:
00:c0:45:0a:af:bf:26:df:43:17:df:3a:ef:10:e3:
81:c4:0b:be:51:a6:b9:69:07:c0:cd:13:bd:b0:41:
a4:6a:07:9c:85:fe:48:6d:bb:42:7e:00:ca:f2:4e:
6c:53:32:c4:8e:e7:2f:27:86:9f:fd:fb:1e:4c:78:
ef:c8:30:77:8a:e7:ca:9b:c8:47:9a:cf:af:23:6e:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FC:AC:F2:97:FB:0C:8A:20:7E:FC:A9:C2:69:4E:A7:FC:60:EA:CE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sfys8pf7DIogfvypwmlOp_xg6s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:c2:d2:0e:9a:a0:8b:cb:99:b9:32:c2:41:c3:2f:e8:2b:4b:
4b:3c:d6:23:a1:72:09:08:ac:fe:48:71:85:5a:7c:c4:06:4b:
b2:4b:2a:b2:db:9a:a8:dc:e6:77:0a:38:c8:fc:6c:b3:c6:8b:
23:6a:8f:e7:a3:75:be:a8:f2:d8:17:2c:4c:12:b0:61:10:5b:
dc:1b:e7:86:ba:56:fe:4e:27:8f:f6:30:5c:22:c6:4a:1e:c5:
49:9e:6c:3c:ea:1e:1d:b4:3f:b4:56:09:93:3a:58:24:ab:02:
34:0f:00:99:58:a3:30:9f:95:bb:bd:dd:e2:98:21:47:a2:90:
6e:b2:88:88:cd:74:f8:a7:88:5e:c3:d5:d0:44:4c:fd:f7:9c:
8c:d2:cb:2d:45:27:f5:1f:1c:06:90:f5:65:73:3b:be:dc:b0:
1e:82:91:49:42:01:32:1e:11:00:28:e4:0a:08:fa:07:78:48:
40:0e:34:c0:7c:b2:5c:76:bd:29:a1:af:8e:22:d4:de:f0:3e:
8d:9b:ce:38:b3:84:fa:40:39:1a:7c:97:9a:d2:f1:4e:5d:36:
23:f7:cc:e2:7a:86:1f:53:e8:e9:e8:29:1e:d8:8c:4c:e7:51:
df:be:47:ec:10:ec:58:77:04:3a:58:20:3c:16:ad:42:f8:59:
6d:3a:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:48 2025 by rpki-client