Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8_1rzGYRjBybmkqXLhZQYmXLhx0.roa
File: 8_1rzGYRjBybmkqXLhZQYmXLhx0.roa (raw, json)
Hash identifier: Zim+wBiwjTXOadf2Yfp1WfHN960oXtm8IWwbL+gchWQ=
Subject key identifier: F3:FD:6B:CC:66:11:8C:1C:9B:9A:4A:97:2E:16:50:62:65:CB:87:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3CAAC4F5CD955D99DB276933C66D32CF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8_1rzGYRjBybmkqXLhZQYmXLhx0.roa
Signing time: Tue 17 Oct 2023 08:05:06 +0000
ROA not before: Tue 17 Oct 2023 08:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:3caa:9873/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:aa:c4:f5:cd:95:5d:99:db:27:69:33:c6:6d:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 08:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3fd6bcc66118c1c9b9a4a972e16506265cb871d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:52:61:06:db:e3:21:0f:f2:58:4c:c8:29:
c0:a3:67:d7:9a:63:99:3c:c0:38:a7:9d:cf:f1:85:
12:7f:e9:f7:2c:c7:23:c4:ca:17:4b:2b:49:5a:e1:
cf:d6:b2:b4:94:8d:70:69:17:f2:30:4d:6e:15:97:
d7:da:41:20:5b:74:9f:59:57:84:3e:7e:e2:81:df:
37:b8:b5:a2:1a:e4:ec:68:41:d3:cd:eb:c1:83:60:
74:47:11:38:ed:60:57:25:b7:df:fb:60:24:de:ec:
2b:c8:02:c4:e9:da:f5:eb:7d:c0:ba:b0:58:97:c2:
5a:66:a6:bd:fc:ab:b6:21:c2:43:0e:df:17:87:f5:
07:b4:23:2b:d2:7e:9e:6e:59:18:82:f1:41:a4:3b:
dd:bd:c6:f6:35:f3:71:18:99:b1:15:ca:63:22:4e:
8d:9b:cb:87:df:54:de:a9:35:d0:70:22:48:17:b7:
2e:60:77:5e:94:fe:68:1c:ee:90:52:de:f0:c0:ff:
90:11:e6:98:33:0a:b5:d2:a2:a4:72:e4:db:a8:f4:
a5:87:bb:b1:b7:24:3c:20:0b:84:55:14:e3:8e:30:
ba:b5:c2:0c:25:aa:a6:b2:90:0a:9e:c8:c9:8e:2b:
5e:dd:6a:f4:b8:7f:33:18:9d:b3:72:d4:4f:76:c5:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:6B:CC:66:11:8C:1C:9B:9A:4A:97:2E:16:50:62:65:CB:87:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8_1rzGYRjBybmkqXLhZQYmXLhx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:53:9c:3f:49:f1:7b:8c:96:93:38:da:c5:43:2c:e5:70:9e:
01:57:1a:7e:b6:bb:52:2b:bd:c4:0e:9e:d9:45:53:b1:33:e9:
a2:11:9a:2f:06:7d:03:40:87:9d:0c:0b:51:9b:e1:7f:a4:20:
1f:da:4f:6e:89:7e:30:09:0c:bd:82:7b:46:ad:d3:5b:08:9f:
56:7b:a0:8d:f4:d7:af:1b:3c:bd:ce:ad:46:96:7c:88:ed:c9:
47:3e:94:ad:f5:24:38:ca:94:13:d9:f3:3a:a8:c7:9c:21:68:
21:6c:c4:66:f7:97:4a:7c:ee:5c:cc:fd:e7:e5:4b:7f:17:ad:
84:e4:08:1b:36:5a:97:c8:86:21:2b:5c:d9:50:87:80:76:f7:
11:90:55:62:48:eb:b6:20:23:98:68:2f:94:a7:33:25:b3:9a:
e7:88:81:e7:62:34:09:79:cf:ab:93:51:9e:30:ac:03:1a:90:
85:03:bc:be:0f:ba:5e:4e:58:1b:9d:d0:d8:d2:e6:ba:ae:a9:
ef:6f:f6:68:73:78:29:80:24:40:e3:bd:44:bc:bd:17:51:55:
01:06:66:7d:3e:96:db:e6:f9:32:36:b6:30:08:1a:6c:c6:aa:
3e:58:2f:fc:2e:b0:8e:27:dd:40:39:53:71:82:20:75:b0:4a:
7c:e1:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:38:59 2025 by rpki-client