Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4QRDuqTIZPl-tFeF6_c6VQCloek.roa
File: 4QRDuqTIZPl-tFeF6_c6VQCloek.roa (raw, json)
Hash identifier: 7b9EM+rdBi7KnF6vLMIiXA3ocqIVpVbjUvRGusFw88I=
Subject key identifier: E1:04:43:BA:A4:C8:64:F9:7E:B4:57:85:EB:F7:3A:55:00:A5:A1:E9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7444AAD523F0D13B45019F1353A6EF10
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4QRDuqTIZPl-tFeF6_c6VQCloek.roa
Signing time: Sat 16 Dec 2023 20:15:06 +0000
ROA not before: Sat 16 Dec 2023 20:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:74:44:aa:d5:23:f0:d1:3b:45:01:9f:13:53:a6:ef:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 20:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e10443baa4c864f97eb45785ebf73a5500a5a1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:dd:4b:9e:93:83:a8:13:a0:65:26:d9:b2:
ac:a9:49:00:c0:d6:e7:19:c0:28:8d:44:2d:ce:43:
20:b7:b6:bb:6d:a6:0c:70:01:e5:1d:f4:e3:0a:c1:
7e:08:51:31:0c:e0:04:86:5c:e8:d2:a8:94:0e:01:
ef:af:02:f3:3f:1f:34:07:04:24:83:96:12:f4:6c:
e4:e5:bf:c9:a7:94:cf:b1:f6:f2:60:50:15:4b:6c:
e9:26:79:6a:3d:05:c3:ec:cd:28:40:c4:77:1e:7f:
fb:f8:08:d2:3b:79:02:22:49:36:fe:73:59:01:a6:
3d:55:de:cd:16:d0:d8:79:16:fc:74:67:f9:1e:56:
0c:01:4c:1a:0b:df:7f:c6:d3:75:ca:f8:38:05:43:
a5:b0:f4:fb:62:e3:d6:35:0b:bb:98:7e:e0:39:70:
8b:a3:62:60:31:92:8e:86:6a:9f:22:48:ac:ba:63:
78:d7:dc:e1:12:ee:cd:51:a5:97:b8:9a:12:da:19:
6a:2f:2e:d6:3d:36:24:0f:b3:bc:6e:fc:2e:af:df:
8f:02:b4:a5:53:33:f6:8a:01:ca:80:f1:ef:d0:42:
67:a2:03:18:e6:90:d4:4c:35:fc:58:9d:16:82:6a:
8e:82:08:91:03:da:90:20:88:40:24:79:6b:8a:5e:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:04:43:BA:A4:C8:64:F9:7E:B4:57:85:EB:F7:3A:55:00:A5:A1:E9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4QRDuqTIZPl-tFeF6_c6VQCloek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:2f:a2:5d:ea:68:6d:84:37:a6:9d:c1:b3:5b:6d:62:59:e9:
9f:9c:75:9e:40:db:e7:2b:5c:07:94:4f:4b:09:2b:7f:b6:eb:
d0:09:ac:c2:c6:41:f5:0b:6a:70:87:ea:03:c8:d7:c0:c7:76:
69:9f:1e:8d:8d:63:a7:e8:e1:8c:6b:c8:d5:38:cc:ff:0b:4a:
ed:b7:c1:29:97:d9:39:20:bb:3d:34:c2:82:0f:71:c2:d5:e4:
98:38:7f:f4:63:2b:e2:88:62:3f:5d:a4:7e:35:be:39:75:c1:
77:8c:15:7e:68:50:1a:d3:8d:e1:f5:69:d8:d6:15:bc:61:75:
05:33:d2:39:be:2f:f5:43:42:18:6f:8c:00:3f:82:61:cb:99:
0c:bf:7e:f9:31:c4:69:01:80:72:76:75:6c:ed:37:a5:3f:d1:
c9:1d:0d:89:fb:a0:14:4c:ee:88:2e:33:a7:dc:48:9b:3b:36:
9c:d8:82:33:fb:2f:4e:ad:4a:15:2d:aa:c2:02:8e:01:af:35:
77:64:a2:82:a5:6d:7b:dd:90:c7:21:a4:8b:78:13:91:2e:5b:
eb:31:1d:30:f9:2f:9c:30:95:b8:2e:4c:8e:a8:a7:63:e5:56:
65:14:64:24:49:22:13:61:ea:63:01:79:0d:55:09:cf:0d:d6:
9e:aa:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:16:00 2025 by rpki-client