Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-e_L0MsQlxiFSmNSOTs3VCdtXPQ.roa
File: 1-e_L0MsQlxiFSmNSOTs3VCdtXPQ.roa (raw, json)
Hash identifier: A4BdT13QJN43HkgUZBoIffGo6gVXcEfJCnWiqeIgBdI=
Subject key identifier: F9:EF:CB:D0:CB:10:97:18:85:4A:63:52:39:3B:37:54:27:6D:5C:F4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B80B583F3A6D04A951C9FBF6B78F66098
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-e_L0MsQlxiFSmNSOTs3VCdtXPQ.roa
Signing time: Mon 30 Oct 2023 13:11:01 +0000
ROA not before: Mon 30 Oct 2023 13:11:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:80af:759d/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:b5:83:f3:a6:d0:4a:95:1c:9f:bf:6b:78:f6:60:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 13:11:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9efcbd0cb109718854a6352393b3754276d5cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:51:97:25:24:d9:a9:21:29:03:80:d0:2d:
29:5e:9a:f9:94:d0:59:71:2a:e0:f2:22:fd:09:5e:
26:b1:fa:79:e7:2f:05:ee:d9:c3:5b:c2:84:11:80:
6f:53:75:80:5a:19:2c:52:8e:a5:d4:cf:87:9d:13:
74:b3:83:e2:51:f0:85:f8:b8:b6:d2:f1:8b:cb:b6:
80:82:df:ec:2a:ea:71:34:12:47:05:98:78:09:97:
d9:e3:35:34:6e:da:8e:11:74:5b:22:38:d4:ca:d0:
e1:e2:88:91:c3:31:0c:e9:64:e6:67:2b:29:13:07:
16:67:49:9c:ee:24:54:59:20:d7:d5:30:00:ac:ab:
9e:d3:eb:73:68:66:66:51:13:d0:21:80:5e:25:d7:
28:97:e3:32:4d:2d:6f:22:eb:9d:d0:9f:f2:77:37:
f9:08:10:61:a5:6b:e4:ca:f5:64:e0:fc:22:47:b8:
e3:9c:4d:cc:1f:c3:2f:9e:c5:34:c9:12:17:91:2d:
a5:d3:09:7b:1d:bd:e4:13:0c:98:1d:cc:4b:de:9d:
0e:0a:71:10:47:30:9d:7c:e1:0f:57:57:bc:ad:49:
b6:f7:37:be:b8:1d:2a:b1:16:cf:65:e0:d9:7c:16:
94:75:5b:53:4c:2e:c7:f5:3d:c3:df:a2:4e:37:2a:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EF:CB:D0:CB:10:97:18:85:4A:63:52:39:3B:37:54:27:6D:5C:F4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-e_L0MsQlxiFSmNSOTs3VCdtXPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:04:8a:4f:ab:44:85:17:67:d4:f3:cb:60:30:fa:5a:37:0d:
9e:4c:fa:51:56:e9:8f:6b:ad:cf:0d:4f:70:9a:b9:3a:bc:aa:
24:55:9f:90:6f:84:72:a9:e3:bb:1e:f5:f4:ce:73:e4:2e:5c:
27:b4:12:23:04:4b:4d:b3:bd:01:b7:aa:1f:6a:08:12:f4:bf:
71:ae:a8:07:e0:cc:0d:c7:69:bc:86:d7:d4:7e:67:53:de:ed:
b0:9e:19:c6:88:87:17:d8:a7:9e:f9:b7:49:f0:f6:44:2b:d3:
2a:22:5e:7e:a8:28:dc:cc:fc:41:b4:e0:db:b0:cf:0e:b0:8f:
42:a5:04:7b:23:32:4a:52:6d:32:fc:76:d3:3e:b4:ac:7b:07:
b3:63:9d:1b:97:25:06:77:de:5d:0a:ee:d1:79:c6:eb:32:4d:
f9:f9:85:53:c1:bd:20:34:0a:1d:58:df:15:8a:6d:63:52:31:
a9:5f:be:e0:cc:a7:ad:a4:12:7f:86:6e:81:71:46:8f:21:52:
6d:b4:8d:01:74:fe:e1:75:1c:b9:41:34:12:1c:4e:13:fb:d2:
58:66:5d:39:e7:81:2c:7f:ac:aa:fc:f1:8d:af:50:6a:0d:ca:
74:ea:10:07:09:8d:9d:15:e9:9e:7b:c4:e4:ef:cf:c3:f2:d7:
5a:98:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:44:23 2025 by rpki-client