Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8Cx4xEShC1efxOK0_3AmsIm5b_g.roa
File: 8Cx4xEShC1efxOK0_3AmsIm5b_g.roa (raw, json)
Hash identifier: VM1u+85y+fPrUl9RQZX5gjI7enj2x26t9bF4ydVoFhU=
Subject key identifier: F0:2C:78:C4:44:A1:0B:57:9F:C4:E2:B4:FF:70:26:B0:89:B9:6F:F8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADEECDE6FD91D302B0FFFC2E2B597E983
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8Cx4xEShC1efxOK0_3AmsIm5b_g.roa
Signing time: Fri 29 Sep 2023 03:12:59 +0000
ROA not before: Fri 29 Sep 2023 03:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:de:ec:de:6f:d9:1d:30:2b:0f:ff:c2:e2:b5:97:e9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 03:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f02c78c444a10b579fc4e2b4ff7026b089b96ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d4:c6:dd:9c:f7:8b:8e:b3:fb:86:fc:29:b2:
f4:86:bb:26:20:dd:33:e4:6a:79:61:21:27:4e:ac:
20:24:48:86:ac:fb:81:31:ed:ca:05:84:b7:a1:60:
1a:7d:9c:8d:89:17:3c:5d:88:63:4c:93:b7:65:11:
90:10:a5:6d:83:fe:06:17:ae:e2:a0:28:21:3b:e6:
47:42:eb:2c:96:ca:8a:e4:c0:90:ef:91:6f:79:53:
e9:80:d9:a9:f9:17:b7:be:da:65:b3:85:46:6d:76:
45:02:dc:e0:54:f4:03:6b:0c:87:66:a3:8a:9a:69:
48:db:28:26:36:c9:c1:b2:00:79:68:ad:9d:a6:d6:
ae:5c:be:7f:66:86:09:f8:7e:22:e2:3e:7c:7f:e2:
e0:90:b4:99:7c:99:7a:7c:e1:98:4e:2b:68:78:20:
56:d3:74:70:3e:69:d6:3b:39:4b:c5:f4:ce:a4:1e:
23:80:36:b7:36:c6:28:fc:91:a5:65:49:20:c1:4c:
8f:4f:96:97:ff:d6:1b:5b:62:2a:cd:27:c0:29:b1:
00:a2:d4:63:ba:53:64:9e:e6:bf:7e:c5:18:e2:ba:
1b:3d:6c:7b:13:8d:85:1b:30:c3:3b:a3:b0:35:1a:
73:ad:d6:77:bd:4e:00:b1:49:fa:35:b8:1d:16:6e:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:78:C4:44:A1:0B:57:9F:C4:E2:B4:FF:70:26:B0:89:B9:6F:F8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8Cx4xEShC1efxOK0_3AmsIm5b_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:79:01:c5:ae:fe:36:cb:95:00:d6:10:07:ec:c5:8e:03:8f:
f9:94:2c:0c:80:99:d2:68:ee:db:65:d3:ca:b1:8b:f2:d7:f1:
52:77:0b:c5:d9:bb:42:13:f5:ea:2b:1e:ec:f0:fb:07:c9:ba:
d6:c7:ce:99:2f:a6:76:67:d5:4c:20:65:e9:ef:82:1f:48:f2:
5c:27:b5:c9:c8:a1:fb:b8:79:af:84:c5:92:77:7b:32:a4:e2:
9f:87:9f:71:b4:a4:6e:19:ec:40:a6:7e:21:76:c5:cd:d4:92:
41:04:19:95:03:b0:4e:29:12:5d:6b:fa:e9:58:a9:b0:37:74:
5f:65:9e:f5:ca:bd:55:0a:82:e3:1c:6b:b0:4f:a6:50:a8:96:
e8:d4:72:81:89:19:d2:f3:27:64:7c:55:b3:ee:84:3b:18:a9:
9b:b0:19:0b:a7:06:54:6d:54:29:f4:c7:b7:ec:32:ae:0b:c6:
6a:06:69:bc:51:d1:c2:7f:c4:b9:cf:d5:51:19:7c:ee:5d:54:
e4:d5:7b:77:ee:9e:74:3f:48:ec:85:52:d5:8d:17:04:8b:f7:
61:47:16:9a:71:0a:ac:12:35:58:cb:27:16:1e:81:33:e9:10:
b3:18:25:9f:77:e6:53:e2:17:98:bd:d3:c0:55:5d:ea:e5:1d:
5a:b9:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:45:31 2025 by rpki-client