Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tayeL6TE4roYQsITb4II9s3zDJw.roa
File: tayeL6TE4roYQsITb4II9s3zDJw.roa (raw, json)
Hash identifier: E7UUbgRZRb1sGBcwmr/QJxEDeSQ6vfxjCP2bWhQH/1s=
Subject key identifier: B5:AC:9E:2F:A4:C4:E2:BA:18:42:C2:13:6F:82:08:F6:CD:F3:0C:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B46CD5FC23E28800A96960F35EECC16E4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tayeL6TE4roYQsITb4II9s3zDJw.roa
Signing time: Thu 19 Oct 2023 07:19:06 +0000
ROA not before: Thu 19 Oct 2023 07:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:cd:5f:c2:3e:28:80:0a:96:96:0f:35:ee:cc:16:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 07:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5ac9e2fa4c4e2ba1842c2136f8208f6cdf30c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:2b:5f:38:e7:da:11:e3:79:b1:71:81:a1:
0d:a0:71:bf:62:0e:08:27:35:59:e3:46:90:bc:1d:
70:c8:6c:1e:7d:3d:ef:6e:00:29:d0:dd:a5:30:23:
db:3c:7f:d4:1e:af:ad:09:20:a2:54:32:aa:86:a7:
04:d2:2a:53:77:91:37:ca:b3:86:b8:3e:46:88:84:
1e:51:e9:78:17:9f:ea:8e:29:94:60:e9:0c:21:63:
4c:6f:a9:a6:1c:ff:6a:e4:87:8f:c0:45:6e:de:b3:
ea:47:68:22:7d:bf:43:f9:3b:e4:4f:f1:68:4a:8d:
ff:aa:74:af:1a:05:08:9f:a7:27:89:ce:b5:b6:23:
b7:e1:6b:4d:98:f7:82:d4:01:d0:6d:fa:1a:38:f7:
d4:bc:17:9c:82:aa:f3:c1:3f:27:6e:12:b7:67:99:
9d:6f:c9:3d:71:00:4d:6e:81:86:e8:97:cc:bb:cb:
6d:7e:eb:07:64:ac:fe:fc:17:95:5a:27:06:98:3e:
57:83:c3:dc:2e:41:9e:19:fc:5f:09:55:c6:e8:d6:
f3:a1:90:25:31:b1:d7:35:a6:f3:5a:14:a2:0a:68:
c2:a4:7f:b0:bd:b5:db:f3:6d:46:4b:01:de:f8:1b:
55:a9:ac:3f:73:15:a7:02:02:7e:4d:8a:b5:53:9a:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AC:9E:2F:A4:C4:E2:BA:18:42:C2:13:6F:82:08:F6:CD:F3:0C:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/tayeL6TE4roYQsITb4II9s3zDJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:75:6b:23:f4:90:be:a5:af:76:5a:73:a6:38:4b:b2:1a:f2:
77:14:4f:f0:2e:4d:02:c9:f3:ba:fa:c3:da:d8:d8:eb:c8:46:
91:fe:7b:bc:f5:aa:f4:f2:13:bb:c7:ed:3a:48:21:5c:cc:a0:
fb:dd:f6:94:f8:32:17:cf:2d:bb:2e:3e:5f:fe:d4:32:30:c0:
d8:8e:8f:af:67:b2:22:1c:14:d9:0d:2b:15:79:58:43:08:b7:
1b:aa:f7:30:92:09:00:4f:ba:93:64:d7:81:0f:f7:ed:70:e7:
7b:0e:28:c3:11:cc:e9:a4:0a:02:52:21:ef:30:c2:cf:3e:35:
50:78:80:46:c2:fb:66:a1:9f:67:73:14:72:fc:ac:75:1a:fd:
c6:b7:81:b6:dd:01:02:a9:ac:c8:f2:32:3c:6d:4c:e7:08:ab:
68:aa:75:6f:e8:53:5c:e8:bd:f1:62:43:04:25:58:fe:b2:24:
26:0f:38:f6:c4:1a:f9:61:fd:ba:db:fb:19:45:ab:bc:47:e3:
28:fb:13:0f:2c:6d:72:3a:b1:7a:21:fd:54:b7:30:95:da:71:
19:4c:48:c1:d0:24:bb:00:a9:a1:ac:79:6e:ef:2e:f3:d2:8d:
b6:1c:fc:3d:e1:44:ec:09:bd:a3:c6:6d:8d:86:b4:d8:e4:c3:
bd:84:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:06 2025 by rpki-client