Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/92x6UbyfutEx-2KXxIqrQSIu_Ps.roa
File: 92x6UbyfutEx-2KXxIqrQSIu_Ps.roa (raw, json)
Hash identifier: GHCTJV7bl7h+E5fw5v8gHvbuSsaCpfgsdbi9v0SUYNo=
Subject key identifier: F7:6C:7A:51:BC:9F:BA:D1:31:FB:62:97:C4:8A:AB:41:22:2E:FC:FB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B11FF4535D4FCD5A0ED94D73881BE2182
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/92x6UbyfutEx-2KXxIqrQSIu_Ps.roa
Signing time: Mon 09 Oct 2023 01:13:43 +0000
ROA not before: Mon 09 Oct 2023 01:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:11:ff:45:35:d4:fc:d5:a0:ed:94:d7:38:81:be:21:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 9 01:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f76c7a51bc9fbad131fb6297c48aab41222efcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:30:ee:9d:fc:fe:9a:10:c1:eb:65:88:94:
c1:d2:2a:25:a1:7d:75:30:75:a5:92:a3:2c:d4:02:
ee:61:0b:34:1c:07:f7:52:75:e2:be:ed:e0:47:cd:
f3:92:f7:ed:60:39:ac:71:91:cb:c3:b7:8a:b2:22:
68:49:3c:f7:9c:e6:93:bf:16:9e:2a:eb:62:ae:8b:
fa:8a:9b:b2:b1:91:5d:6a:1f:73:26:0a:8a:d7:56:
4e:1d:64:26:84:a0:3d:93:34:11:96:92:7b:de:93:
c6:8c:f0:f9:d4:ef:f8:67:74:20:1f:18:cd:f4:61:
44:c6:31:d0:c8:4b:fd:09:bd:41:ac:3d:c9:8c:9e:
6e:3f:77:30:3f:97:ca:a1:8b:85:d4:ae:64:ea:44:
30:39:49:9b:98:81:9b:82:3f:93:da:a9:64:32:52:
25:5f:d9:69:98:73:fb:dc:8c:b7:1a:65:76:04:00:
b5:35:77:34:aa:a4:02:a3:15:6c:35:f1:e7:02:31:
a4:db:51:2b:03:aa:fa:80:94:ee:2d:1b:3a:d0:e4:
cb:f2:fc:9f:ce:70:ba:a4:00:15:18:5f:8e:e3:c2:
e3:b5:ef:5a:15:2f:3a:d8:f8:ac:9b:48:29:85:86:
06:16:06:06:35:1b:e8:73:c4:03:09:a7:04:29:3e:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:7A:51:BC:9F:BA:D1:31:FB:62:97:C4:8A:AB:41:22:2E:FC:FB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/92x6UbyfutEx-2KXxIqrQSIu_Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:c9:25:26:49:e4:ae:ac:ce:31:8b:e6:ee:69:ef:2f:95:f4:
b1:2a:ca:e4:8d:78:f5:de:6a:80:05:86:77:d2:5f:ec:13:8d:
7a:03:d9:ca:e2:fc:fe:d9:30:72:6b:13:f5:5d:dd:0c:97:9c:
55:1f:e9:7a:2f:24:16:6a:68:b3:f8:01:be:b8:39:54:33:99:
96:1b:58:78:2c:25:19:c1:36:24:b3:cb:1b:5e:00:ff:fa:95:
72:d7:91:7e:a3:ef:ac:1b:b7:fb:03:53:65:26:8e:d1:b4:24:
c9:81:fa:f9:1f:78:63:bc:1f:30:aa:1e:48:09:67:b3:96:ef:
8b:c1:51:46:92:49:29:10:06:cf:9e:d0:b2:ba:55:fa:30:1e:
0f:05:54:22:fb:38:83:39:27:a0:16:cb:f9:2a:db:0f:87:97:
d2:7a:4c:df:98:14:89:44:99:61:3f:25:05:a5:93:ec:5f:b7:
c7:e8:bc:2d:c1:65:23:3d:80:2f:5d:22:fd:c5:d5:de:c3:6c:
5c:e5:18:ea:ad:bf:68:4e:90:10:9a:f2:c4:48:10:31:b8:cd:
de:b6:23:06:8f:77:6a:7b:e1:8e:29:23:7d:0f:50:99:62:8b:
9f:ba:3e:85:f3:ac:65:5c:fb:d1:50:d2:bd:15:b9:ea:69:24:
54:36:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:22:06 2025 by rpki-client