Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2IUxGZAyPIV8Y69z5YwsYWojaYs.roa
File: 2IUxGZAyPIV8Y69z5YwsYWojaYs.roa (raw, json)
Hash identifier: mu96XxdI1vjwKevFes+n67/GVXfBy5YUax8Z9A8LWLI=
Subject key identifier: D8:85:31:19:90:32:3C:85:7C:63:AF:73:E5:8C:2C:61:6A:23:69:8B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AAFE75D331FF3C57560C607C4697EDB54
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2IUxGZAyPIV8Y69z5YwsYWojaYs.roa
Signing time: Wed 20 Sep 2023 00:04:50 +0000
ROA not before: Wed 20 Sep 2023 00:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:afe6:db7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:af:e7:5d:33:1f:f3:c5:75:60:c6:07:c4:69:7e:db:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 00:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d885311990323c857c63af73e58c2c616a23698b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:6e:88:0e:65:91:e1:90:7e:c1:69:5c:43:
3f:bd:81:64:9f:86:dd:59:b6:5f:6d:c1:f6:6a:5f:
15:06:80:49:0c:74:92:fe:e0:4c:95:f4:77:51:f5:
36:6d:09:30:1a:fc:0a:5c:68:bd:52:82:53:87:86:
e2:91:84:9d:3b:48:13:be:fb:16:c2:c2:55:4f:6c:
b1:89:0a:e7:2c:08:cc:52:20:65:f4:de:41:56:2f:
77:34:a3:8e:ef:19:7e:6a:71:8f:25:e7:48:a8:c4:
d6:cb:29:7e:e2:a3:94:ec:09:bc:51:35:25:32:47:
98:48:d0:23:a1:cf:da:87:f4:20:b6:7e:76:2b:4e:
bd:ff:a7:3e:3f:f7:69:01:ba:57:67:f1:7d:ff:63:
a3:7f:5b:c0:85:8d:ef:af:ac:a6:5a:18:ab:fe:0d:
26:b5:c1:80:97:f4:9c:51:e1:d2:f8:b4:bd:9b:97:
8d:6f:1a:61:38:49:5d:92:e1:6b:9c:fd:b0:8d:6a:
f2:c4:d4:98:05:d4:26:47:c7:1e:dd:8b:c7:e8:eb:
75:1b:eb:ba:e8:b1:90:0a:b9:b0:5e:30:88:b9:f0:
28:31:f5:ab:28:c0:2d:79:87:fa:aa:ca:ff:63:96:
9d:05:b7:dd:01:95:53:60:f0:5e:58:16:6d:77:eb:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:85:31:19:90:32:3C:85:7C:63:AF:73:E5:8C:2C:61:6A:23:69:8B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2IUxGZAyPIV8Y69z5YwsYWojaYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:88:1c:a6:63:26:77:ba:2d:41:4c:bd:35:ed:00:b7:28:96:
2b:a8:6a:5d:93:91:85:f1:01:a4:ea:68:fa:04:4a:f1:9a:ea:
f3:df:b0:b5:ec:27:e3:8c:e0:6d:04:b0:ef:71:b6:79:e4:eb:
8b:6f:e0:73:10:b9:bf:dd:05:9f:54:59:53:34:8c:46:02:a4:
fd:92:1b:23:ee:96:43:89:80:1e:43:53:ff:39:49:c3:f6:7b:
22:00:7b:f3:b6:4a:6d:41:b4:48:b4:0b:fd:18:85:6b:6f:06:
d9:6c:fa:74:8b:21:e1:60:07:cc:00:4f:8e:d6:bb:2a:7b:cb:
64:df:dc:ca:7a:c5:2f:42:2a:a2:df:6b:1d:ed:75:e0:14:a2:
23:0c:fa:07:94:b0:3d:ec:23:c9:0c:d8:a2:b3:65:5f:ca:b3:
85:fc:01:12:5a:96:00:0d:92:f9:b6:fd:3b:8e:e8:72:71:4f:
2b:6b:95:68:f7:a0:71:23:54:7e:99:6a:63:e6:9b:f4:a6:9f:
28:0a:e0:db:22:b8:2a:2d:32:73:9e:0d:3c:05:0e:08:73:81:
83:c8:13:fd:6c:2f:82:8b:da:b1:51:67:40:bf:24:21:01:ce:
c6:94:92:61:8f:ed:db:72:09:9d:b3:9b:db:0a:6e:d6:0a:f0:
66:f2:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:02:36 2025 by rpki-client