Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1BlasN2SVUjP1uHAsQ0gXiVyFIs.roa
File: 1BlasN2SVUjP1uHAsQ0gXiVyFIs.roa (raw, json)
Hash identifier: InWGRtl+MmMoWpoUj+1BVPtSrqHu8rkjmvlW+RWU4hw=
Subject key identifier: D4:19:5A:B0:DD:92:55:48:CF:D6:E1:C0:B1:0D:20:5E:25:72:14:8B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA0035B351022F2B1F60CDEDD932D007B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1BlasN2SVUjP1uHAsQ0gXiVyFIs.roa
Signing time: Sun 05 Nov 2023 15:04:16 +0000
ROA not before: Sun 05 Nov 2023 15:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:a003:52b0/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:03:5b:35:10:22:f2:b1:f6:0c:de:dd:93:2d:00:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 5 15:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4195ab0dd925548cfd6e1c0b10d205e2572148b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:b8:2d:c5:d4:77:87:d0:75:e8:b7:bb:8f:
37:ed:ff:9d:ca:12:d4:91:3e:2d:e1:ce:42:3c:38:
24:41:c0:fa:1c:d3:b2:19:99:fa:e8:10:97:43:32:
5a:d2:d4:6b:d4:05:a6:ea:08:a0:0b:f7:16:ef:7f:
47:da:61:5f:55:0f:b4:d1:7e:64:4c:6a:40:98:1c:
62:c8:c9:bb:fb:ab:de:98:22:48:19:9a:72:67:7b:
1c:4b:73:5f:88:98:20:98:48:f6:1e:de:15:ea:83:
5d:e6:90:eb:f5:e4:6b:c1:63:b7:08:72:0a:3a:09:
fe:fe:b5:43:c1:d5:95:4e:50:76:06:71:35:a1:67:
c8:aa:63:5c:de:43:cc:69:04:9c:50:7c:dd:9b:78:
83:e9:91:f8:c0:20:ab:50:4e:6a:21:6e:c4:cf:83:
2e:f6:e2:79:d3:9f:53:2c:30:c7:63:12:d0:07:9b:
b4:7f:99:5c:c4:59:aa:28:3f:ec:a9:f5:37:72:0c:
4e:8b:0b:2f:ec:97:21:0b:b9:3a:58:20:bc:24:5c:
1d:af:38:c1:09:03:5e:48:e3:a2:87:23:e3:d0:1a:
c0:03:a3:5f:92:f4:0c:3f:54:8b:cb:e7:cf:9b:cf:
4a:1d:13:47:7c:14:40:3e:13:df:79:2a:4d:82:ff:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:19:5A:B0:DD:92:55:48:CF:D6:E1:C0:B1:0D:20:5E:25:72:14:8B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1BlasN2SVUjP1uHAsQ0gXiVyFIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:01:85:75:c9:6c:ef:0a:e7:fa:24:86:04:d6:0e:50:56:ad:
33:bc:bb:f0:5a:66:23:ee:f7:4c:f8:ec:96:cb:84:2d:01:45:
d3:ea:4e:5c:8e:68:a5:32:3f:49:b5:c8:e3:52:dd:5b:7c:f3:
87:69:87:ad:41:a7:4a:98:72:c9:c7:c5:3e:c2:fc:8b:c9:96:
d5:b3:b6:d4:ce:d1:3b:ec:45:0b:dd:d1:1c:58:1a:3d:d6:fa:
da:03:78:0b:95:26:fd:f3:10:32:ea:78:7c:9c:45:98:37:57:
6b:0d:f5:ee:95:18:32:0f:2e:f9:4a:77:76:16:56:e3:1c:79:
0a:56:7b:01:ec:c2:cd:a5:6f:06:88:a5:d5:b7:2a:23:b2:b2:
8f:53:a0:cc:c9:98:b1:85:af:85:16:a3:09:55:a7:bb:5e:6b:
21:a7:05:b3:f4:75:d1:50:cf:12:00:ad:7f:8e:0f:7c:63:67:
62:0b:9d:81:bd:50:a6:32:a8:11:ce:5d:76:79:45:dd:fd:15:
85:f0:9b:8d:4f:2a:c9:fb:b1:b8:88:cc:7b:2a:ea:0c:6e:98:
19:5a:a4:b4:7c:99:6f:0d:43:bf:6d:b1:39:1c:00:fd:30:f8:
b4:f9:ec:6f:09:de:d9:53:e2:10:0c:cb:00:03:e5:f8:04:17:
aa:fa:ca:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:33:40 2025 by rpki-client