Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2GtuKAFQfu6zhR5eX_xNOpJRT8w.roa
File: 2GtuKAFQfu6zhR5eX_xNOpJRT8w.roa (raw, json)
Hash identifier: rmG1aEzEtHVBEzC4I3EAHA9PubQU4gCI/4/dViTsSSU=
Subject key identifier: D8:6B:6E:28:01:50:7E:EE:B3:85:1E:5E:5F:FC:4D:3A:92:51:4F:CC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B57B9CCBF8A4D367DEA2D4D349A6C2158
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2GtuKAFQfu6zhR5eX_xNOpJRT8w.roa
Signing time: Sun 22 Oct 2023 14:11:16 +0000
ROA not before: Sun 22 Oct 2023 14:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:57:b9:cc:bf:8a:4d:36:7d:ea:2d:4d:34:9a:6c:21:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 14:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d86b6e2801507eeeb3851e5e5ffc4d3a92514fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:62:60:09:fd:35:db:bc:d5:cd:c3:d2:fe:
a2:56:24:1c:ae:87:3b:29:5c:28:72:6d:12:3e:79:
c8:8a:76:cb:df:19:fe:c4:0e:2c:59:57:bb:87:89:
22:92:5a:14:fa:3c:d6:5c:98:1f:2c:7b:9a:50:04:
96:29:4c:d7:15:55:66:d9:95:ce:60:f4:2d:16:57:
5d:74:a6:24:77:97:d6:51:ed:f9:61:60:c3:b4:0d:
18:13:84:e1:cc:ab:9c:dc:63:59:65:a7:70:b1:b3:
30:23:37:d0:23:ca:8a:7b:70:c5:53:4d:3d:02:40:
ec:a7:92:5c:30:e4:c1:21:ae:fd:8d:ad:6a:ac:9b:
41:06:d9:30:10:9a:02:f2:49:16:d8:87:23:5f:6e:
15:40:d2:71:d4:47:ff:9b:84:46:e4:b0:73:07:27:
e1:0d:a0:27:0f:ea:c2:ce:3e:f9:54:45:31:67:b9:
95:2c:79:13:1d:c5:5f:49:a6:44:d2:c5:86:3b:1d:
a1:85:4f:b0:92:21:9f:99:06:77:32:fc:3b:15:68:
e8:50:83:05:44:2c:fc:33:de:4e:e2:cc:c6:b9:f9:
e4:9a:5c:9c:27:3c:00:91:71:d6:eb:fe:ce:88:a3:
ae:0f:3a:16:b9:d6:e0:47:50:d1:55:c1:5c:f1:48:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:6E:28:01:50:7E:EE:B3:85:1E:5E:5F:FC:4D:3A:92:51:4F:CC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2GtuKAFQfu6zhR5eX_xNOpJRT8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:d2:ec:56:1f:4c:3c:03:c9:98:9c:fe:e9:ad:28:45:a4:5b:
0d:7e:70:b4:38:d7:51:05:30:0f:ea:20:b7:02:3a:42:cb:b0:
b5:da:f8:83:fa:04:01:bb:04:be:ea:7f:01:bc:4e:ed:10:f2:
ed:8c:d1:ba:9a:8b:10:87:4f:3e:4f:b6:59:bf:ea:8b:bb:a2:
00:76:d8:04:bf:7a:80:c9:bc:67:c3:10:32:d2:34:09:21:aa:
b3:c7:c2:25:8f:13:1c:97:a2:60:3a:5c:d0:c5:91:78:f9:18:
b0:ff:5b:22:f4:45:33:4a:f3:f5:2f:7d:82:e0:37:13:38:a4:
96:04:8d:a7:b2:83:61:91:69:8c:b9:1f:0f:5c:3f:72:16:45:
41:51:7b:e1:83:24:99:b1:35:c3:08:48:c1:88:b9:4c:a3:5b:
58:10:7c:e5:18:c4:3c:cc:f7:50:7e:af:dd:b8:ce:57:12:24:
a6:e2:30:86:8a:98:52:73:cf:42:18:ed:0e:ca:bd:e3:48:79:
41:35:b0:57:ad:55:a0:48:f7:46:70:c6:2d:fa:11:77:7b:9e:
b3:d6:16:2c:e1:ed:a3:a4:a6:8e:a5:d6:b3:9a:29:4e:50:90:
67:05:ec:51:dc:cb:be:ca:13:07:51:6f:fe:51:a1:30:54:e8:
a6:ec:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:13:06 2025 by rpki-client