Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4cJIOQfNPkMmeO4k-d3UNpCMAE4.roa
File: 4cJIOQfNPkMmeO4k-d3UNpCMAE4.roa (raw, json)
Hash identifier: 13/aJCDfWFQc1jqLxABmPgQ7Mz+q7sjo7K6K6i07ZGw=
Subject key identifier: E1:C2:48:39:07:CD:3E:43:26:78:EE:24:F9:DD:D4:36:90:8C:00:4E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACF462CC1ADC62273ED8F896832349752
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4cJIOQfNPkMmeO4k-d3UNpCMAE4.roa
Signing time: Tue 26 Sep 2023 02:16:37 +0000
ROA not before: Tue 26 Sep 2023 02:16:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cf:46:2c:c1:ad:c6:22:73:ed:8f:89:68:32:34:97:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 02:16:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1c2483907cd3e432678ee24f9ddd436908c004e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:f1:73:67:4d:53:1d:9e:b0:49:96:93:a0:
da:ca:1e:a0:9f:d1:55:8e:75:83:8f:9e:50:38:c8:
5b:4e:ab:0d:e4:ff:1b:86:1f:a5:cd:83:89:b9:26:
58:af:a7:6a:51:4a:eb:93:62:09:45:68:36:8a:06:
a1:dc:ce:51:72:db:f8:95:ac:65:a3:ce:1d:33:b6:
76:19:64:01:fb:13:99:b7:6a:91:d8:b9:ee:0c:a0:
b3:43:74:36:11:83:10:e6:48:16:54:cc:a9:6e:cc:
d7:bd:df:b8:cc:1b:bc:ec:07:b8:3f:15:95:b9:93:
e8:fa:45:13:77:ca:c2:f6:34:23:c5:e0:f3:a1:35:
68:b6:d7:b6:6b:83:c7:9a:f2:6d:21:a4:a3:8f:87:
af:7a:fe:5e:fe:89:c0:90:14:00:ce:94:25:a5:4d:
95:a5:e1:47:ea:51:e4:65:76:dd:da:46:fe:f4:8a:
26:a2:6f:e8:64:c3:94:ce:2e:8e:f7:90:90:ae:a5:
a4:35:86:45:03:bd:6e:c9:86:36:b6:cb:98:6e:ad:
40:47:2e:31:0e:85:6c:d1:0e:1b:61:df:70:05:18:
0e:2b:05:6f:f0:1e:ee:35:51:e3:f0:3a:a2:1b:d4:
35:25:64:c4:c4:05:d7:30:f0:1c:7d:2c:49:4b:45:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C2:48:39:07:CD:3E:43:26:78:EE:24:F9:DD:D4:36:90:8C:00:4E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4cJIOQfNPkMmeO4k-d3UNpCMAE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:62:24:ea:2a:6a:1e:00:a6:1d:c2:db:97:6c:3b:7c:b0:07:
26:95:e6:d0:0d:76:71:71:ed:c7:61:c0:95:f7:62:ce:58:25:
72:e1:93:8e:e8:a8:a3:d4:60:9b:12:d2:de:de:ca:08:42:b3:
4f:90:ce:4c:1a:26:b3:91:3d:4b:ec:35:50:bf:70:e6:3d:42:
ea:bf:dc:ce:69:f6:de:c8:3a:88:dd:1e:7e:da:ba:ca:f2:c9:
c9:03:35:a5:64:d3:61:12:91:c2:98:c3:c1:55:20:53:07:7b:
24:00:71:dc:39:45:cb:b1:f5:26:3f:6a:9b:46:ca:b3:63:a9:
85:6a:4c:16:25:41:21:c2:92:31:b7:4f:51:ed:a3:84:a1:75:
f3:1c:71:44:12:bd:a8:8d:2f:9c:e0:84:cf:c3:31:e6:05:13:
a0:88:25:4f:af:b7:87:a8:f4:51:c0:0e:15:66:b0:ba:a8:88:
f1:7c:50:6a:db:af:75:22:6c:d9:f4:35:e9:3e:95:8a:6b:9e:
a1:85:89:98:91:63:06:0a:fe:96:2d:b6:a4:c1:4a:da:b8:0b:
e6:1a:cf:ac:9d:e6:78:4f:02:41:f0:16:9d:74:30:b7:50:64:
ac:00:f4:de:d4:ae:ef:db:2f:d9:69:50:c5:dd:e7:ce:ea:22:
a7:3b:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:23:40 2025 by rpki-client