Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/50P_AYNeUtNZ1HI4KA1iOskauqk.roa
File: 50P_AYNeUtNZ1HI4KA1iOskauqk.roa (raw, json)
Hash identifier: 3190O/yTdYlUTYSAqFiPog31jTJTgjCTgPtYUk02oV4=
Subject key identifier: E7:43:FF:01:83:5E:52:D3:59:D4:72:38:28:0D:62:3A:C9:1A:BA:A9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6B409ED2E28D32D02E5AC476BE7D95D1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/50P_AYNeUtNZ1HI4KA1iOskauqk.roa
Signing time: Fri 15 Dec 2023 02:14:06 +0000
ROA not before: Fri 15 Dec 2023 02:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6b:40:9e:d2:e2:8d:32:d0:2e:5a:c4:76:be:7d:95:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 02:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e743ff01835e52d359d47238280d623ac91abaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:37:32:28:7f:3f:69:db:2a:ba:da:2c:9d:3b:
60:48:99:aa:65:32:ac:02:66:7d:45:90:03:28:1c:
e4:30:c7:fa:c8:1f:85:12:23:00:f3:3c:2e:6c:db:
1f:19:33:87:8a:b0:e7:42:ca:26:bd:73:9d:c1:cb:
af:87:a6:9e:cc:fb:f7:27:7e:55:0d:00:45:98:d0:
fc:7d:61:d9:43:94:04:c1:db:2f:c7:b0:46:8f:48:
ad:c0:9c:3c:c9:83:35:df:fa:a2:c5:1b:0d:43:9d:
94:31:c0:f1:2e:97:e5:48:ca:69:86:e0:e1:26:bb:
28:7c:52:6f:07:9e:bd:23:a4:fc:cc:0a:48:9c:52:
0a:1b:6a:fa:2a:9b:90:21:fa:02:2f:5e:32:2c:8f:
0a:ec:b2:96:be:dd:59:66:8e:6e:f1:63:57:42:0b:
ac:c5:77:37:57:a9:39:2e:a3:27:08:94:0d:bb:0c:
8f:6b:b7:eb:1d:8c:3d:6b:f8:77:92:58:66:8d:cf:
8e:ea:31:ec:a5:05:53:3a:51:a5:32:61:74:39:be:
dc:a5:36:76:84:b5:87:64:aa:af:25:df:cd:27:61:
e2:04:69:92:1c:82:a3:d9:cf:a0:e3:d0:43:ac:75:
cd:88:33:48:5b:0d:f6:c6:57:64:2a:47:da:9c:8a:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:43:FF:01:83:5E:52:D3:59:D4:72:38:28:0D:62:3A:C9:1A:BA:A9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/50P_AYNeUtNZ1HI4KA1iOskauqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:48:51:4b:02:39:99:47:65:01:1f:7d:a8:33:cf:e6:8b:5f:
ae:92:be:2a:9f:95:7b:85:f6:e4:1d:4e:52:c0:6b:10:67:e5:
5b:f1:9c:04:32:1a:1d:9b:37:b4:44:1e:8d:31:e6:c1:cb:6d:
4f:17:05:ac:65:18:06:67:75:4c:75:dd:64:bb:c8:f7:1a:1f:
ee:fc:6a:bb:c8:b6:c3:c8:d2:27:92:77:3d:5c:7d:85:91:16:
16:b7:81:0c:ea:f0:cc:80:aa:9c:98:d9:5e:4e:df:76:92:2a:
d7:40:ca:b3:1b:95:a8:91:76:68:fb:2e:bd:9e:58:05:17:81:
e4:2b:ab:d5:50:a4:f6:2c:be:df:40:d8:e9:ee:0f:4c:9f:eb:
75:7f:a1:9b:26:5c:78:34:76:b5:d8:5e:69:61:5d:97:eb:b5:
bb:19:d1:0f:b3:d6:b9:b6:01:bc:c0:62:9d:a6:3e:3b:6a:66:
08:32:bd:86:9d:3f:9f:79:da:f5:89:2e:a1:1d:22:c4:0d:1d:
a6:e8:58:21:20:0c:f8:84:5e:fb:b3:e9:07:00:8f:40:e3:11:
74:16:8d:08:2e:c1:47:d9:55:8e:d6:a8:06:78:5f:11:aa:99:
43:d9:98:35:6e:dd:a8:99:65:7b:f0:be:f9:08:ec:f2:4f:07:
0a:5f:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:27:03 2025 by rpki-client