Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/11tjeBXyn0KklJq13YPFK9T6gbk.roa
File: 11tjeBXyn0KklJq13YPFK9T6gbk.roa (raw, json)
Hash identifier: 1O0wgyGMb4EjegzeRHeRVKYWa8o/Y4cSJu7wFp55B58=
Subject key identifier: D7:5B:63:78:15:F2:9F:42:A4:94:9A:B5:DD:83:C5:2B:D4:FA:81:B9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE039343750C46C53331331687DF59496
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/11tjeBXyn0KklJq13YPFK9T6gbk.roa
Signing time: Fri 29 Sep 2023 09:15:59 +0000
ROA not before: Fri 29 Sep 2023 09:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:39:34:37:50:c4:6c:53:33:13:31:68:7d:f5:94:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 09:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d75b637815f29f42a4949ab5dd83c52bd4fa81b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:56:77:9b:23:20:17:4c:1e:a1:c6:b9:fc:
84:ce:f5:34:b7:0d:b0:6a:ec:7f:23:96:24:e2:6a:
87:bc:9f:cb:01:42:b8:84:d7:d8:43:a1:1d:ec:47:
11:31:bd:ae:0a:b1:c6:45:e9:a0:a5:02:e1:c4:0c:
38:9d:28:3e:c0:af:82:12:ab:2c:f4:0c:bf:c7:64:
8d:3f:2c:f7:15:4e:fa:72:1f:98:d1:72:3b:bf:66:
2e:19:a3:3b:61:5d:e9:8d:f7:fe:c9:e1:9c:ef:35:
b2:2d:54:30:cd:5a:bf:87:b0:48:60:19:13:4b:38:
59:6b:a6:e5:36:96:f6:8e:c3:f7:b8:8c:1b:f5:72:
fa:a4:bb:2b:7e:88:c4:1b:46:01:f7:88:38:c1:20:
0e:03:06:df:3b:ec:65:69:43:ef:dd:1b:8e:d8:b2:
db:d6:ac:9b:97:c7:42:a7:b0:f0:b6:5d:eb:63:18:
ba:4e:d0:34:bc:f0:dc:88:e8:d7:67:a6:72:11:55:
f7:4a:e5:7e:59:d4:d8:0a:7e:3b:62:a1:54:e7:a4:
29:ef:e9:af:5f:46:66:fc:65:c2:e6:a5:23:3f:fa:
31:ef:0d:3a:04:de:95:88:26:e1:a7:6e:29:50:6e:
6b:dc:eb:0c:bf:68:33:9d:ff:da:c8:47:b3:5a:4d:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:63:78:15:F2:9F:42:A4:94:9A:B5:DD:83:C5:2B:D4:FA:81:B9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/11tjeBXyn0KklJq13YPFK9T6gbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:25:37:77:d8:13:37:1e:67:3e:83:c6:ea:8a:93:f2:3e:99:
21:78:88:94:5b:13:34:28:d1:42:50:1c:19:2e:40:e3:f1:b9:
1b:8a:b4:b7:71:64:77:a7:f3:4b:7f:33:ae:b4:8d:de:7e:19:
a2:88:9a:5c:2c:51:dc:d4:c4:0e:03:7b:86:70:3a:e7:d0:41:
f8:c4:5e:8b:f1:63:28:09:e2:21:1f:b6:36:47:0e:82:13:14:
81:5a:2e:95:c3:fd:39:a7:0c:55:18:c9:43:a7:1f:97:5b:23:
66:f8:3a:67:66:9d:63:40:31:d1:08:6c:cc:d0:f3:82:86:67:
bb:39:c3:50:1f:46:88:39:80:10:74:7a:a4:2d:de:e1:bb:18:
3d:be:37:6c:4c:10:b9:3e:87:00:bf:38:5d:23:f0:98:aa:88:
dc:5a:96:3e:78:54:9a:ad:6f:77:f1:b9:19:8f:3f:6c:be:dd:
a9:2d:90:a0:e5:37:1b:1a:c0:ff:f4:cd:84:6d:8b:ca:55:5f:
e1:ef:73:9f:9a:88:75:38:6c:9b:c9:ab:68:6a:7a:25:71:bd:
0b:fc:39:0c:c0:7b:dc:22:ef:20:01:42:a3:60:c3:55:4e:0c:
2a:4a:4e:3b:88:cc:54:88:1b:71:3a:14:06:a0:7e:34:21:85:
94:23:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:00:03 2025 by rpki-client