Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sj8qOj3HlK99sJI4-g438hf9wyo.roa
File: sj8qOj3HlK99sJI4-g438hf9wyo.roa (raw, json)
Hash identifier: T4kBqoDeY0H4zAcazczh77w7HdG+QGxJuKkjatX1Jtg=
Subject key identifier: B2:3F:2A:3A:3D:C7:94:AF:7D:B0:92:38:FA:0E:37:F2:17:FD:C3:2A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC8CB3CCF34ECEDF932935FB9BF5D0FD8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sj8qOj3HlK99sJI4-g438hf9wyo.roa
Signing time: Sun 24 Sep 2023 20:04:37 +0000
ROA not before: Sun 24 Sep 2023 20:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:c8ca:f6a4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c8:cb:3c:cf:34:ec:ed:f9:32:93:5f:b9:bf:5d:0f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 20:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b23f2a3a3dc794af7db09238fa0e37f217fdc32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:88:8f:10:66:30:11:00:17:33:ec:60:9a:
4c:01:8a:0b:ca:f9:ca:65:ae:0f:13:39:29:cd:a5:
15:92:e6:d6:b1:30:4a:95:7f:03:71:5f:94:c1:81:
b6:05:6c:0f:5d:11:49:1d:fb:b9:ed:94:52:2f:7c:
dc:56:3a:05:a1:48:5e:d3:f7:e1:52:97:64:1a:36:
80:6b:48:18:e1:b9:5e:05:51:9d:04:13:02:59:aa:
71:e3:84:cc:bc:17:1c:25:ae:74:b0:b8:8e:3a:8e:
01:cd:95:ad:f5:e1:b4:ab:d5:cb:d9:2a:ea:8f:e8:
64:66:41:f2:b4:9d:38:dc:e1:53:3e:78:a9:a0:20:
1f:3b:c4:4d:26:e3:3f:a4:45:29:8a:eb:ff:43:b5:
e1:e2:49:fa:a6:ac:bc:06:03:9b:45:1a:7e:a4:f6:
ba:df:b4:a5:ba:8b:26:3e:b7:72:3c:bb:af:71:ef:
4c:e4:d7:4e:c2:cc:ab:15:e3:0e:f1:c9:a7:8b:80:
b3:4d:58:0f:74:b2:30:fa:ee:dc:ed:8e:99:6a:c5:
4f:22:6b:f8:39:0a:30:81:80:b6:bd:b6:9e:b3:a1:
93:37:47:72:07:a4:e0:4a:0e:6b:88:de:b6:17:0b:
09:d4:45:4a:2e:c9:6d:8c:dd:ae:7e:c6:75:cf:e2:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3F:2A:3A:3D:C7:94:AF:7D:B0:92:38:FA:0E:37:F2:17:FD:C3:2A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/sj8qOj3HlK99sJI4-g438hf9wyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:3c:80:bc:41:c7:88:26:a5:ff:9d:b9:e2:28:00:70:fc:29:
cf:85:93:77:45:6c:7a:01:dc:c7:07:bd:39:c2:75:fc:5a:72:
5e:ac:85:4a:37:32:a9:7f:ec:40:c9:26:2a:ed:86:c8:98:20:
77:fa:dd:32:f7:64:18:bd:68:15:57:2a:41:49:9c:61:33:1b:
f4:46:1e:b4:01:00:17:53:20:16:9a:67:82:51:a9:7c:aa:16:
83:f6:1c:06:3a:e2:83:68:b3:bd:ea:0c:b3:d7:5a:0b:e7:a1:
d7:f1:8d:6e:ca:88:31:5f:d2:f8:39:a2:84:a8:13:a5:13:d2:
19:58:d6:df:49:3f:05:90:2d:22:ea:fc:7c:85:e4:c6:f9:d4:
3c:44:44:a6:fd:5a:e7:3e:fb:f4:77:08:b1:ee:66:31:e2:9f:
5c:69:16:ed:73:57:0f:72:2f:bb:0f:1f:b3:cb:aa:7b:4b:f7:
46:3d:f8:f7:36:6b:a4:0b:81:9c:0e:ab:92:7a:cd:26:89:a6:
cf:f4:5e:a3:fc:4c:c3:28:c8:c7:b2:56:98:cc:8e:06:a7:e0:
6c:ea:fd:68:63:cb:bd:b5:00:f8:87:1c:6b:c2:ee:43:e7:1f:
fd:b7:29:ef:3c:fd:f4:fe:f5:67:9e:54:e9:de:84:d8:09:5f:
09:19:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:03:31 2025 by rpki-client