Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7UvFg1eW6AaYIw7r98hTFZFhpeM.roa
File: 7UvFg1eW6AaYIw7r98hTFZFhpeM.roa (raw, json)
Hash identifier: 8UiJ6YFTiRciG9x28kJw+7INwU4rm9viXrUiPQQKsDg=
Subject key identifier: ED:4B:C5:83:57:96:E8:06:98:23:0E:EB:F7:C8:53:15:91:61:A5:E3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3FEEA6424F4D802A2CA32902D9392728
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7UvFg1eW6AaYIw7r98hTFZFhpeM.roa
Signing time: Tue 17 Oct 2023 23:18:06 +0000
ROA not before: Tue 17 Oct 2023 23:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3f:ee:a6:42:4f:4d:80:2a:2c:a3:29:02:d9:39:27:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 23:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed4bc5835796e80698230eebf7c853159161a5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:ba:4d:dc:0b:22:5f:b8:6a:fc:e1:9f:10:
46:75:bf:68:2d:9a:78:73:74:3b:18:95:a8:a9:8b:
1e:83:4e:f4:5e:ad:85:ab:9f:36:28:25:04:8e:f3:
29:5c:0e:83:48:63:29:9a:4e:cf:7d:52:fb:43:b1:
3c:29:65:2b:fe:5f:88:7c:b0:3a:4e:3b:62:ef:75:
8c:b1:f6:96:fc:95:bf:bf:cb:73:b5:6c:6d:aa:0f:
50:e6:85:ba:34:42:12:af:90:54:e5:5d:e8:74:23:
32:2a:6c:38:3c:1c:eb:a4:0b:ec:f9:e7:2e:39:2c:
9d:b1:31:98:e3:95:62:61:86:a0:0c:38:18:99:f2:
68:1d:4c:37:1b:51:ed:49:d1:24:8e:87:33:d6:76:
ce:9f:1b:7d:da:47:86:bc:d0:18:94:66:24:c2:a5:
bb:74:7e:2e:41:d0:11:be:ce:06:db:b9:06:ff:8d:
b3:51:49:50:ba:42:0d:1c:7f:0e:f0:59:85:6a:d7:
dc:12:46:6e:31:5a:d3:d1:52:41:52:68:6a:91:02:
75:36:80:e4:45:e9:0a:a5:d3:4d:b8:2d:94:08:01:
c4:65:1a:43:d7:32:73:42:a0:d8:a0:b1:7d:92:b3:
2c:55:6a:16:15:c8:25:e9:ad:e0:48:7d:94:01:80:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:C5:83:57:96:E8:06:98:23:0E:EB:F7:C8:53:15:91:61:A5:E3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7UvFg1eW6AaYIw7r98hTFZFhpeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:79:aa:52:a8:54:14:54:ff:76:3e:f9:cf:91:05:8c:89:01:
71:aa:87:66:ef:ec:98:f7:48:84:c7:73:17:7c:4f:09:a1:a9:
51:27:15:cc:5c:16:a7:f4:9c:4a:63:b8:5b:96:95:65:79:c2:
c6:5e:e5:ca:cd:cc:6c:23:9e:8e:22:a9:c5:c9:7d:d1:e4:38:
23:e9:ec:87:bb:4e:f3:02:53:8f:52:ff:b4:0b:05:57:96:a7:
18:c3:7e:1b:4f:09:ed:16:4f:9f:ab:68:ac:2a:81:24:e3:7b:
2e:53:f4:05:cd:c8:1f:d9:87:e5:29:9c:4d:aa:52:7d:01:b9:
5e:ad:86:b1:44:d0:61:51:9d:4e:9e:8a:73:ea:a6:b9:ba:3e:
de:5d:86:a6:db:41:8e:f9:e1:5f:20:59:43:6c:50:19:0e:ef:
22:86:75:11:49:b6:ad:11:70:b2:74:42:86:6c:7d:c6:87:9a:
5c:39:f1:3a:62:50:58:34:a2:51:3e:e9:9b:e9:fc:0c:b3:ee:
36:a0:9c:27:63:0c:63:50:6a:b4:a3:b9:05:58:01:38:dd:16:
f3:28:7c:49:2e:f8:cf:ad:cb:b4:99:04:58:53:9f:99:60:06:
5d:81:04:31:56:d7:bb:48:b9:79:80:4c:30:4a:0f:05:21:ca:
7e:8f:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:52:51 2025 by rpki-client