Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/81ZLsphIPJq84ilI4A7gI57YLHs.roa
File: 81ZLsphIPJq84ilI4A7gI57YLHs.roa (raw, json)
Hash identifier: X/hSvO0wxuVx+N1pJzcHT0sPAd8Iy0ssK72rQ2qAE24=
Subject key identifier: F3:56:4B:B2:98:48:3C:9A:BC:E2:29:48:E0:0E:E0:23:9E:D8:2C:7B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFF8C104C06AA1613288B6FCC4D4911E8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/81ZLsphIPJq84ilI4A7gI57YLHs.roa
Signing time: Thu 05 Oct 2023 11:14:43 +0000
ROA not before: Thu 05 Oct 2023 11:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:8c:10:4c:06:aa:16:13:28:8b:6f:cc:4d:49:11:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 11:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3564bb298483c9abce22948e00ee0239ed82c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:82:20:60:92:82:c5:96:b6:3c:db:c9:c8:
d6:45:7f:2d:9d:79:2e:58:e3:f3:98:9f:93:0e:91:
ad:cf:ff:58:53:74:b9:5e:fb:a5:a7:70:92:47:e1:
6b:8e:e7:36:61:c5:07:26:a8:60:24:42:f9:88:6f:
3e:1c:55:de:d8:a4:20:76:89:8b:1a:2d:2d:db:9b:
6f:bb:93:7b:19:83:6e:69:4c:cd:c4:ce:4e:b9:fc:
49:c2:3e:d0:69:11:f6:70:1e:bf:11:d7:eb:d3:6d:
98:a5:01:92:48:40:c3:41:d8:c2:9f:bf:26:9e:c8:
ee:70:74:1c:a0:2b:1e:4d:32:03:0f:91:f8:1f:58:
7c:07:bf:7c:03:ed:e1:7f:c5:ce:6f:7c:32:31:ab:
f4:ce:2b:68:5e:25:63:ec:28:59:13:e7:7b:a1:64:
3d:b2:4c:a4:53:3d:8c:a7:4c:cd:e5:96:7c:5b:75:
30:0a:78:52:49:a1:cd:f2:b0:f6:59:5d:55:ad:94:
84:c8:8a:c6:38:6f:80:8f:49:14:d4:27:a7:97:75:
be:59:1d:5b:c2:02:52:e7:38:83:6e:ed:83:e8:c1:
ba:63:db:dc:c9:ae:db:5e:9b:ce:22:a8:96:21:7d:
8a:a5:50:31:b2:61:55:47:27:4b:5f:af:c7:0b:6d:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:56:4B:B2:98:48:3C:9A:BC:E2:29:48:E0:0E:E0:23:9E:D8:2C:7B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/81ZLsphIPJq84ilI4A7gI57YLHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:dd:a3:96:6e:74:d7:49:99:6b:2d:5c:cb:a2:8d:ef:46:80:
d6:95:16:da:79:87:dd:27:f7:6a:20:07:07:a5:c8:87:58:c7:
68:ae:04:97:9c:8a:da:b7:5f:6c:14:fb:e4:65:81:c1:20:4f:
e4:a5:72:21:c8:8d:b6:84:9d:07:5a:67:19:bc:2d:cc:27:4b:
48:b9:bd:01:47:89:8a:39:49:2e:e5:d7:67:63:b5:37:07:a2:
d1:38:2d:e6:4f:97:3a:7e:a9:bc:09:e2:4d:c3:6e:39:a5:d0:
06:c4:b3:8e:fd:a9:31:57:18:3b:15:da:31:4d:b1:54:15:37:
37:13:2a:25:a5:3c:44:b4:e2:72:61:ba:a3:ff:48:e0:a3:a8:
65:73:05:de:40:cd:71:07:7b:e3:0e:a0:f2:e7:d5:8c:c3:87:
45:4a:4d:0b:bd:81:9e:9c:de:18:2f:48:dc:12:e1:bc:60:5f:
8b:cb:2e:40:1d:8a:0f:70:e3:59:99:f6:1b:23:e6:00:a0:66:
f9:d5:02:34:4d:22:39:72:e6:5c:e9:88:60:26:35:09:58:34:
bd:94:9f:20:19:a0:fa:45:29:aa:65:92:e0:28:d7:5c:4d:80:
d9:89:5e:c7:d6:4f:2b:70:55:75:c7:8b:20:15:af:26:46:74:
13:02:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:59:48 2025 by rpki-client