Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-91LD8fYItDg3hh6O7GdVhmU420.roa
File: 1-91LD8fYItDg3hh6O7GdVhmU420.roa (raw, json)
Hash identifier: THGAqfq8nNulZy89FyCrqKYCl/rVEinLMRsdQ4UB1ig=
Subject key identifier: FB:DD:4B:0F:C7:D8:22:D0:E0:DE:18:7A:3B:B1:9D:56:19:94:E3:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B73DB554F56D6025F7353E75ECF7D8851
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-91LD8fYItDg3hh6O7GdVhmU420.roa
Signing time: Sat 28 Oct 2023 01:17:15 +0000
ROA not before: Sat 28 Oct 2023 01:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:73:db:55:4f:56:d6:02:5f:73:53:e7:5e:cf:7d:88:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 01:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbdd4b0fc7d822d0e0de187a3bb19d561994e36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:86:a8:57:bf:d2:5a:7f:64:b2:1a:ea:a0:39:
c2:2e:b7:ac:f5:2e:0e:4b:93:f1:69:95:df:0b:b1:
d0:4d:ce:bf:78:be:4a:4b:35:b6:56:b1:8e:86:db:
71:de:3e:50:08:e9:6f:dc:6b:1c:e0:4b:27:12:14:
2f:c7:db:bb:18:d2:10:fd:eb:09:09:51:c5:90:04:
d4:32:29:68:92:1b:32:5f:bd:8c:13:d9:53:1c:fe:
78:ef:a2:c4:6e:fd:c8:0d:d7:cb:c0:fd:eb:e8:f9:
43:fc:0d:65:72:6d:e9:90:b0:dc:8b:01:0a:4e:c2:
29:99:33:54:46:20:9c:e7:28:b7:b8:82:6b:58:3a:
7d:8f:10:f0:f8:c2:12:13:aa:be:2c:e0:4c:a6:06:
b7:51:fd:3d:90:c4:fe:80:15:7b:65:59:44:51:12:
98:29:df:31:00:4f:f2:cc:7a:67:eb:50:d7:ad:21:
ad:29:d5:84:1c:06:e8:b7:d3:dd:02:7c:9d:b6:5d:
6e:3c:64:0a:d2:a7:35:f0:3e:c1:36:b1:b3:57:14:
76:33:91:76:ce:9d:b9:1c:2a:fa:85:e2:02:36:aa:
52:d1:f7:bd:f2:d4:ca:e2:a7:13:4d:62:92:83:01:
ac:0d:84:d2:3d:af:b5:f0:a4:df:6f:85:4c:68:64:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DD:4B:0F:C7:D8:22:D0:E0:DE:18:7A:3B:B1:9D:56:19:94:E3:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-91LD8fYItDg3hh6O7GdVhmU420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:f7:2d:f1:02:1c:52:89:57:38:77:7e:a5:19:22:00:87:ef:
45:e2:f6:d1:9d:58:22:eb:e8:5d:d0:ca:08:3b:ef:cb:91:47:
da:21:a8:ba:ef:d6:41:41:3d:a6:42:51:19:87:fe:f0:b6:1d:
0e:dd:aa:86:f2:ed:f7:3e:7d:e1:a2:cc:ae:51:d7:b4:60:5b:
da:36:b0:61:18:e9:9c:1d:87:e9:58:2f:bc:ff:fa:60:50:9c:
6b:6c:9b:c1:a5:dc:bf:b8:54:6b:74:a8:18:49:30:7c:40:c9:
53:97:c5:bc:98:72:7f:49:62:04:3a:cc:45:ae:7f:95:33:e4:
5d:00:11:62:ad:84:ac:6e:24:0d:06:85:0f:d8:0f:c9:f0:d7:
09:62:dd:42:da:10:0e:3b:1a:f0:e3:0f:65:87:ab:0a:99:c8:
a1:c8:87:1c:29:da:f6:de:53:a2:7a:bb:3b:f4:03:92:c4:f8:
54:8f:1f:80:d5:e9:29:4d:e2:e6:bb:54:c1:37:08:9b:03:d0:
a8:72:48:7d:91:3f:79:1e:7c:08:84:b6:c7:0b:fb:14:e9:4e:
9b:c7:a8:d4:0f:f9:85:7e:98:95:a2:44:69:31:25:76:90:95:
c3:da:2b:ad:d1:e7:ad:73:1f:58:7f:44:57:6a:76:54:7f:08:
27:d8:9e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:53:19 2025 by rpki-client