Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1P1MJz-vcx_65YTziA9Kl13Da8U.roa
File: 1P1MJz-vcx_65YTziA9Kl13Da8U.roa (raw, json)
Hash identifier: 8A1nVERnLsl/YQ8+9CTUlMAknAdp2GxB3mmP3uu57NA=
Subject key identifier: D4:FD:4C:27:3F:AF:73:1F:FA:E5:84:F3:88:0F:4A:97:5D:C3:6B:C5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4E1931D5F9F02F3EF0F449CF5CA9F5B5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1P1MJz-vcx_65YTziA9Kl13Da8U.roa
Signing time: Fri 20 Oct 2023 17:19:15 +0000
ROA not before: Fri 20 Oct 2023 17:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4e:19:31:d5:f9:f0:2f:3e:f0:f4:49:cf:5c:a9:f5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 17:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4fd4c273faf731ffae584f3880f4a975dc36bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:47:ea:fd:fd:73:34:a8:3d:d2:54:3d:bd:
8d:41:e4:12:de:8e:47:7e:bc:5b:ae:37:63:6d:91:
04:f6:3f:64:88:22:cd:71:b5:41:19:f1:33:d5:e6:
c8:eb:e2:c3:6f:38:f9:41:d4:96:76:35:5b:ec:a6:
c2:58:94:1e:8a:7a:3c:c2:b1:91:b7:ac:3e:aa:26:
00:6a:66:14:43:11:2d:7e:fd:10:35:41:4c:be:00:
80:86:27:38:11:73:d8:e8:78:01:b9:2e:6b:b5:3f:
8c:78:c9:46:44:c7:3b:90:d0:29:a8:2e:c6:72:dd:
3d:5d:98:b5:0a:73:b5:5b:ce:ef:85:6e:17:99:09:
c6:e7:05:96:cb:f5:2d:85:13:a2:10:31:a9:25:09:
fb:df:1e:03:7f:e1:54:cf:9d:dd:c9:98:af:b1:04:
0d:62:9d:c1:4c:cf:95:c7:b0:e3:51:9b:c8:7a:3a:
76:81:1a:3f:fe:d5:16:c2:37:6e:93:e7:a1:c1:14:
3f:60:3d:eb:60:6f:08:79:c9:98:25:b9:3f:68:75:
d6:4c:36:a9:35:95:ef:8a:48:74:21:97:2e:2f:35:
70:4f:ba:0d:06:f2:28:1d:53:b2:56:d6:4e:ac:a7:
c5:5c:52:d8:65:aa:ba:c2:ac:5c:97:dd:b6:da:26:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FD:4C:27:3F:AF:73:1F:FA:E5:84:F3:88:0F:4A:97:5D:C3:6B:C5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1P1MJz-vcx_65YTziA9Kl13Da8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:66:10:08:ed:bb:01:ad:25:38:55:84:19:e9:41:b5:74:b9:
93:f2:ba:f5:0f:dd:a4:ed:2a:ce:bf:b2:1a:21:7e:ca:b4:72:
d9:2b:5b:df:39:e6:c5:a8:b9:49:2a:d5:e6:8c:6d:16:d3:c7:
50:19:47:f4:b4:6f:16:3f:10:9a:40:7e:7c:68:21:2c:d8:f9:
a8:9b:15:d7:a7:89:cb:1d:01:06:cb:33:0d:1d:69:25:cc:74:
a9:30:d9:25:e7:10:72:eb:33:f0:35:91:33:af:38:84:f1:95:
56:ac:b3:d1:1e:4f:f7:9e:2d:b7:2b:df:6e:37:5d:59:61:79:
07:2d:fa:e7:7d:f6:81:2d:be:32:b8:ba:4a:83:88:de:18:7c:
55:84:a0:ae:2d:15:18:2d:8e:a3:47:92:8d:41:4b:26:9d:ad:
76:43:ea:51:3c:e9:50:47:8f:05:0d:48:dc:92:8e:26:3a:54:
1f:5e:e1:1a:ad:9c:7a:31:cd:25:93:e8:58:35:0f:28:de:f0:
8c:b1:bc:b3:33:64:d5:49:e9:96:39:65:71:27:30:7d:f9:1a:
6c:7d:66:27:21:75:d9:02:c7:b1:fa:c7:fd:20:de:cc:d4:f8:
0b:3f:b0:28:b9:df:69:d9:66:a7:ec:a6:e4:61:95:74:db:0c:
d6:10:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:06:59 2025 by rpki-client