Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2rWdCVfMHoTJUIVq-KasFG6qyDo.roa
File: 2rWdCVfMHoTJUIVq-KasFG6qyDo.roa (raw, json)
Hash identifier: fMf/7rghpEjVBNTQ+leSFLTnSiqdMTWcU7rpyIlq+os=
Subject key identifier: DA:B5:9D:09:57:CC:1E:84:C9:50:85:6A:F8:A6:AC:14:6E:AA:C8:3A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6D65EFA337C64242C5E4977D621F4799
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2rWdCVfMHoTJUIVq-KasFG6qyDo.roa
Signing time: Fri 15 Dec 2023 12:14:06 +0000
ROA not before: Fri 15 Dec 2023 12:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:65:ef:a3:37:c6:42:42:c5:e4:97:7d:62:1f:47:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 12:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dab59d0957cc1e84c950856af8a6ac146eaac83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d6:d8:e8:b4:be:b6:48:67:8c:84:e2:8b:7a:
6f:1c:bc:c3:ba:0b:ab:88:40:24:0e:6a:f7:ae:dd:
d4:86:30:40:d3:93:ed:b9:d1:c6:5b:f4:a5:1b:77:
a9:e6:cc:86:70:0c:26:5e:b1:84:52:f9:db:e2:dc:
f6:55:22:fc:34:eb:d3:4c:34:38:96:37:0d:fa:b1:
f1:06:c4:a1:86:c6:1b:8d:a3:b5:39:80:5f:af:71:
23:8c:aa:ed:f6:3f:ae:5a:2f:db:20:97:07:a2:9d:
ec:17:5a:08:94:1f:68:27:2c:ae:f2:92:9a:60:95:
b7:c7:a4:79:43:cb:20:4a:90:55:69:eb:1d:25:d0:
aa:85:34:b1:29:4f:3c:de:f6:3f:93:51:af:24:5b:
c3:a8:51:1e:ae:ce:fe:d9:6e:82:e3:7a:41:c4:16:
53:d5:bc:71:dd:39:9d:2a:d0:a2:3c:22:4e:82:84:
c1:8d:9f:22:77:d7:b1:a2:70:cc:c2:63:8e:5c:cd:
fd:7f:44:49:2e:a5:eb:d0:fc:15:a7:bd:ba:e8:a6:
31:b6:b5:c1:de:a5:1d:85:3a:5e:32:9a:c9:e3:a1:
99:3b:c7:41:ef:ec:b5:20:7c:ef:95:6f:59:0c:43:
a2:39:ac:8c:24:f0:5e:b6:be:07:ff:f9:f8:7b:26:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B5:9D:09:57:CC:1E:84:C9:50:85:6A:F8:A6:AC:14:6E:AA:C8:3A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/2rWdCVfMHoTJUIVq-KasFG6qyDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:aa:cc:df:a0:35:ee:98:26:0e:82:b2:36:b7:a2:bc:ed:23:
08:a1:46:54:6e:b1:89:78:95:01:a0:ee:eb:56:80:f6:c3:84:
18:ae:87:6c:f4:24:d3:f5:0b:b9:84:e5:06:bb:90:c0:cf:2d:
a6:0a:c9:39:2b:ec:d7:f8:76:1e:5b:ad:3b:f1:bc:36:5d:0a:
f1:83:b7:91:10:7b:99:b8:b3:8d:57:41:a0:66:b0:82:00:d3:
ff:32:fc:91:4b:28:13:0f:02:bc:e9:1f:3d:89:3d:10:62:7f:
ae:e4:24:dd:b3:60:22:1d:2c:54:50:df:b2:31:e8:a7:55:33:
73:0c:f8:20:1f:a3:1a:cd:9b:24:0f:06:2e:7c:71:cd:e3:b5:
b1:a0:a0:49:a2:04:83:96:1a:79:9a:f7:0d:7a:16:e4:7c:c5:
f4:ac:a2:13:92:07:cf:56:61:39:7f:4e:34:f2:00:0b:f9:d2:
a0:71:61:c2:d5:2e:7f:38:e4:61:36:6d:f1:ba:90:53:1a:ad:
e7:f2:c5:26:37:01:10:75:96:2c:52:5c:7f:ec:70:3a:ab:0d:
54:c7:cf:4d:0c:5d:8a:55:da:5a:bb:65:2c:bd:d2:28:3b:81:
fe:14:26:b6:a5:2a:a3:7c:9d:47:fd:73:7b:07:de:88:3c:88:
7d:2c:77:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:41:00 2025 by rpki-client