Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4sZEO_6YiQEE5aUsds32c1SKiyA.roa
File: 4sZEO_6YiQEE5aUsds32c1SKiyA.roa (raw, json)
Hash identifier: DlFif/v8RZAmD1y/7rkF0w7yHaCmitRDgFXeeo36Zzc=
Subject key identifier: E2:C6:44:3B:FE:98:89:01:04:E5:A5:2C:76:CD:F6:73:54:8A:8B:20
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C57BD1DD41F85EB332CA208ADE5A034AF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4sZEO_6YiQEE5aUsds32c1SKiyA.roa
Signing time: Mon 11 Dec 2023 07:17:40 +0000
ROA not before: Mon 11 Dec 2023 07:17:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:bd:1d:d4:1f:85:eb:33:2c:a2:08:ad:e5:a0:34:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 07:17:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2c6443bfe98890104e5a52c76cdf673548a8b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:8b:ca:bb:7b:ab:e9:9c:c7:56:68:db:bd:
65:a2:ba:63:4e:ad:a1:9b:ce:2c:45:51:02:ec:8f:
5f:0a:3d:a6:12:97:43:b0:af:b0:65:92:64:12:28:
6e:39:7c:2b:f1:58:40:0c:0f:bb:1d:db:41:6a:36:
df:ef:73:ee:9f:cb:bd:b0:7a:c9:30:ef:13:84:c4:
45:60:51:0c:ae:20:4c:cd:7b:e8:64:f0:7b:57:8e:
07:89:d2:15:b2:41:66:77:b4:a0:e6:61:a9:27:ac:
95:c9:58:b2:b7:64:0e:dc:c2:79:2c:ea:89:22:07:
f2:59:8c:ec:38:40:5d:6c:dc:1d:6a:25:31:0b:8c:
b7:00:1f:95:c4:c8:38:f2:ee:d4:4a:6b:29:8c:97:
6a:1e:ef:69:d7:93:f2:4f:23:50:ed:77:76:03:5d:
e8:be:bc:9a:db:57:32:01:44:16:95:d0:33:79:c7:
32:34:e3:1a:93:92:cd:d8:38:e3:ad:aa:ce:b0:10:
9b:f9:48:96:4b:67:74:31:c4:1a:64:d9:b3:63:91:
2b:08:10:7a:53:bb:33:d8:ce:b9:24:13:b1:11:2a:
27:a8:41:e5:71:e8:95:c8:01:fa:af:e4:dc:26:95:
6e:42:f2:02:c7:67:4e:02:d3:f8:18:85:e7:63:ea:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:44:3B:FE:98:89:01:04:E5:A5:2C:76:CD:F6:73:54:8A:8B:20
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/4sZEO_6YiQEE5aUsds32c1SKiyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:04:ae:5e:5e:64:6d:a1:c4:f6:df:89:2d:ae:a8:6b:1d:53:
8a:96:70:15:f6:38:88:3e:7f:54:45:8b:6c:df:b6:b8:f2:01:
05:46:53:c1:d3:a1:95:c1:4d:d1:2d:78:c4:fd:7d:47:97:65:
d3:02:2c:4d:f2:d2:68:f9:0e:28:13:3c:79:06:3c:ef:66:ec:
e2:3c:9d:08:5a:2b:02:75:61:b3:4b:59:fc:79:fb:11:3b:3d:
93:64:04:8c:af:f9:44:2f:d4:78:15:ec:a8:37:a6:b2:75:98:
e2:a0:68:cb:d4:dc:9d:59:16:cd:65:d8:2f:97:cc:1d:bb:21:
e8:56:21:d3:0f:23:74:0d:ed:06:e0:3e:58:f7:d3:c3:bd:9d:
2e:e2:65:61:3c:08:33:ce:4c:3a:6b:5d:ae:a1:65:25:74:6c:
5b:8d:24:b2:be:f9:99:89:d8:ec:1d:09:24:88:bf:5b:45:ea:
e3:9b:bf:28:2d:65:99:83:e4:b7:00:ad:ea:b1:9f:81:e9:29:
41:23:0f:52:83:7f:89:1c:e8:bd:d7:c9:41:95:ff:b9:ad:46:
9c:c1:0f:6c:6c:02:7d:fc:12:a6:6b:d2:c0:9b:33:be:b1:61:
75:7a:04:e5:50:e2:59:cb:48:12:cd:b6:b0:47:e8:c6:02:78:
94:39:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:59:45 2025 by rpki-client