Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2KqX404y6W1AbV_6DfpJ-aOkkwU.roa
File: 2KqX404y6W1AbV_6DfpJ-aOkkwU.roa (raw, json)
Hash identifier: xLQH4KaWFvMZJ5SrOr/fA/cEjLKy0EhpDvCTKyevGyw=
Subject key identifier: D8:AA:97:E3:4E:32:E9:6D:40:6D:5F:FA:0D:FA:49:F9:A3:A4:93:05
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B51F163C95F71718006DBED75D94C9466
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2KqX404y6W1AbV_6DfpJ-aOkkwU.roa
Signing time: Sat 21 Oct 2023 11:14:15 +0000
ROA not before: Sat 21 Oct 2023 11:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:f1:63:c9:5f:71:71:80:06:db:ed:75:d9:4c:94:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 11:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8aa97e34e32e96d406d5ffa0dfa49f9a3a49305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f4:5e:09:69:a3:96:24:e3:d6:ff:93:d8:08:
7a:ae:c8:d9:ff:d5:12:f1:14:dc:b8:12:b8:51:16:
f0:43:18:70:5a:7c:49:33:42:27:a7:8f:00:6e:47:
81:a8:e8:bb:38:fb:dc:84:92:c5:67:af:7f:17:f4:
a9:fa:95:95:4f:f6:1b:95:a3:fe:c3:8b:8a:b4:7d:
bc:a3:74:dc:80:b6:34:51:51:c5:5b:2c:b7:69:4b:
ba:d3:e3:30:4e:09:bc:4a:65:26:b9:8d:20:ce:49:
b9:5a:8c:4d:17:f1:8e:3e:ca:39:7a:8f:ea:c4:17:
52:af:35:7b:62:04:36:de:66:6d:9b:04:d2:5e:ed:
4b:3d:d1:5c:02:61:f8:f4:71:4c:3a:5a:18:71:42:
aa:25:4a:6f:14:a1:56:e2:4e:c7:e2:7f:9e:4f:e2:
c8:a7:db:10:93:44:2b:d2:c1:9e:bc:64:f4:c8:c9:
ea:a8:16:b2:72:5b:bf:9e:6a:7b:0b:8e:7e:c6:84:
1d:a3:22:95:e7:23:3d:09:d5:b0:c5:d2:71:64:b6:
db:1d:eb:4b:f3:04:93:8a:1d:1b:d5:d0:32:2d:f7:
09:1b:03:70:8a:6b:58:44:a7:2d:13:ff:8c:44:2e:
4a:3d:00:3a:da:2d:b8:c1:68:e3:b3:9a:b2:3e:22:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AA:97:E3:4E:32:E9:6D:40:6D:5F:FA:0D:FA:49:F9:A3:A4:93:05
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2KqX404y6W1AbV_6DfpJ-aOkkwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:85:0e:04:d2:2c:e8:c9:ba:92:ac:ec:a3:ae:f4:84:22:f7:
4b:2a:76:ce:2a:a8:ff:d1:6a:82:ab:d2:95:82:43:9e:71:87:
6d:0b:d5:78:45:af:bf:67:2b:f4:d9:f7:04:38:af:f0:0f:27:
59:2c:07:1d:03:25:60:50:a6:73:dc:6c:00:b4:3e:a1:2c:40:
71:43:fa:a1:79:ea:23:25:d7:2c:8f:bf:04:5a:ce:50:5a:a1:
f5:f2:cb:49:88:fc:91:39:fd:f8:9d:ef:82:75:6d:39:9a:25:
c6:49:67:55:d3:2b:c4:46:ca:75:b3:ca:ed:1c:7e:a5:91:52:
8c:90:b3:87:27:ae:51:ce:fb:63:b9:6d:27:c5:45:21:cb:ed:
03:ae:a5:a3:de:c2:42:e9:e6:ba:6d:68:5d:80:63:4e:0b:7b:
b0:28:40:da:ab:dc:00:19:1e:02:5c:3d:18:1b:f2:2d:48:15:
d8:7e:95:3c:2b:bc:a2:73:fe:69:c7:44:30:a0:16:ea:db:37:
d2:70:86:7c:43:8a:b1:9e:ad:71:e0:2f:f4:3d:de:24:50:26:
04:d5:0f:1e:3d:3d:01:ef:e4:72:f4:16:d2:93:f4:f4:de:47:
be:51:b0:d8:43:2b:96:3f:89:5a:72:55:f0:a1:21:20:13:08:
c0:fc:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:47:40 2025 by rpki-client