Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/74lTiJ41hOqf5DzR0jTbLUv3_VA.roa
File: 74lTiJ41hOqf5DzR0jTbLUv3_VA.roa (raw, json)
Hash identifier: I06zvzf9HpdW+7LIquYkg3H2oXORnr5mIgJYA872h6M=
Subject key identifier: EF:89:53:88:9E:35:84:EA:9F:E4:3C:D1:D2:34:DB:2D:4B:F7:FD:50
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AAF7980B5045E75E4398E20721DD8C0FA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/74lTiJ41hOqf5DzR0jTbLUv3_VA.roa
Signing time: Tue 19 Sep 2023 22:04:50 +0000
ROA not before: Tue 19 Sep 2023 22:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:af79:11d1/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:af:79:80:b5:04:5e:75:e4:39:8e:20:72:1d:d8:c0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 19 22:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef8953889e3584ea9fe43cd1d234db2d4bf7fd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:b4:bb:3e:bc:a4:a7:78:f6:ce:42:23:5a:
a6:3e:8c:45:4b:5a:53:60:af:7d:60:bb:95:4d:e2:
15:08:1d:e7:81:e1:0d:f4:87:9e:da:d1:5d:1e:c2:
34:cf:ab:36:dd:45:9d:53:8d:c5:c9:6f:cc:a7:09:
18:f9:1d:38:62:86:bb:81:00:6e:db:a9:1d:d9:45:
67:37:65:ee:30:25:e1:d0:ca:81:72:88:a1:bf:6d:
64:fe:a1:59:27:be:f3:63:3f:a2:ba:e8:54:1b:33:
ac:c7:4b:06:ed:91:9a:ea:6b:6b:79:26:fc:7a:c4:
ee:ec:1b:cc:d8:dd:71:a9:ba:63:01:9f:24:44:ba:
ff:d4:d2:7c:af:a2:47:a5:40:f6:7d:6e:c1:7d:b9:
cf:01:49:48:85:e1:1e:c9:dd:bc:10:5b:e9:8d:c6:
92:4e:fe:71:11:23:97:6f:ab:ff:71:a5:f9:50:2c:
b3:ba:25:3c:22:a4:b7:37:ec:9f:4d:ab:45:25:d5:
8f:d1:e8:cf:5d:c6:6d:a8:04:03:e2:d3:2a:dc:aa:
66:f8:80:ca:3e:3a:01:ac:04:6e:62:21:84:9c:d9:
71:ae:76:9b:4e:34:68:de:34:c8:5d:78:98:f8:98:
09:36:cb:9c:ab:47:63:64:89:00:2a:be:07:bb:00:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:53:88:9E:35:84:EA:9F:E4:3C:D1:D2:34:DB:2D:4B:F7:FD:50
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/74lTiJ41hOqf5DzR0jTbLUv3_VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:01:70:77:39:02:e3:1c:33:b2:18:52:c2:02:c3:ff:42:44:
c3:7a:26:e6:02:4f:40:2b:f1:34:9a:d2:66:02:66:43:fe:ef:
c0:4a:35:0c:fe:f8:cc:f2:d2:1a:ca:14:4f:9e:f5:84:79:10:
0d:36:eb:67:bd:a2:fc:02:53:4e:15:97:32:91:b8:67:d5:6c:
d1:e9:94:0f:c4:b4:8c:15:40:05:8a:05:48:12:cd:ce:df:6c:
ac:b3:f9:ec:6f:9f:a2:4d:1f:f6:05:09:7b:c9:b8:a7:ab:f1:
5d:65:ea:78:30:1b:4d:9f:48:82:6b:c8:06:30:ac:e3:2f:d7:
bf:3b:56:7a:b4:92:81:79:c8:cb:98:7d:07:ad:70:60:4f:60:
30:17:e1:ae:87:1c:69:17:40:f4:21:46:12:bf:de:61:9b:85:
b9:ea:fe:91:94:1e:2c:a8:7b:06:c9:83:ac:82:6c:59:f1:ae:
f0:f8:a3:77:bf:6b:06:06:c6:68:82:44:a9:60:30:8d:56:f7:
1a:17:13:be:4c:a6:a5:57:b2:a9:49:cd:1a:7f:17:74:dd:f7:
2f:06:a9:2d:bc:da:bf:04:d1:9a:71:7d:a2:f3:28:7b:f1:7d:
0a:de:4d:93:eb:71:75:08:a4:4f:5f:bd:b3:5f:25:7e:f4:27:
82:bf:0e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:26:00 2025 by rpki-client