Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AGP5B-aUk3b2Zb32D0hCpmm_6s0.roa
File: AGP5B-aUk3b2Zb32D0hCpmm_6s0.roa (raw, json)
Hash identifier: vqAg0nzgkTLZcjMcawo2CyMNjsBZhaSbwoc5JIMg3is=
Subject key identifier: 00:63:F9:07:E6:94:93:76:F6:65:BD:F6:0F:48:42:A6:69:BF:EA:CD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE9332D5DB1E9180DC2D5CCFDE115462A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AGP5B-aUk3b2Zb32D0hCpmm_6s0.roa
Signing time: Sun 01 Oct 2023 03:05:59 +0000
ROA not before: Sun 01 Oct 2023 03:05:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:e933:554/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e9:33:2d:5d:b1:e9:18:0d:c2:d5:cc:fd:e1:15:46:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 03:05:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0063f907e6949376f665bdf60f4842a669bfeacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e4:3d:70:09:62:86:df:f9:15:1a:b6:11:c4:
d6:ca:6f:6b:5f:5e:9e:2c:a1:95:c8:61:71:85:b3:
d5:8c:ae:15:45:d7:24:3c:42:c6:c2:4e:4b:2f:84:
40:09:ba:b2:3f:e9:32:de:58:7e:22:63:65:55:8c:
c7:84:ad:d4:fe:3c:d8:79:4c:63:8b:8c:ea:61:8c:
06:27:39:ba:c9:27:dd:be:27:47:5a:7b:29:bd:58:
1b:ab:bd:ac:9a:1e:0d:6a:26:e4:f9:49:e3:2c:8c:
29:12:b2:a6:b1:e2:2d:2e:03:40:9d:7a:ee:e8:a5:
d5:ea:f2:67:59:67:13:f5:eb:19:81:b1:1b:df:6b:
be:61:04:6d:be:cf:21:f4:db:e5:70:ad:fe:61:63:
ba:d9:05:3c:9c:8f:ae:72:12:32:26:98:35:cc:80:
d8:c2:8f:b5:f4:8b:66:79:34:f5:1e:32:1c:2a:32:
6c:41:5e:c7:3e:d4:64:6a:83:d4:2c:a6:78:11:32:
97:36:1c:0e:62:67:5f:c6:65:66:81:1e:59:a1:d3:
80:dd:3e:1a:3b:57:a6:9b:3b:d6:65:2f:ff:c5:12:
42:cf:86:3a:e9:96:77:11:40:98:f3:c4:fc:34:55:
bd:42:02:8f:2e:d4:6a:1c:2f:0b:d3:1a:5f:8c:a5:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:63:F9:07:E6:94:93:76:F6:65:BD:F6:0F:48:42:A6:69:BF:EA:CD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/AGP5B-aUk3b2Zb32D0hCpmm_6s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:aa:30:7a:6b:e3:a6:30:fb:8d:25:cb:fa:06:8c:cf:a3:84:
e6:9f:e9:13:74:c6:e9:27:d7:e7:dc:5d:da:74:16:b4:4c:63:
dc:e4:da:08:ab:be:be:73:8b:69:fb:62:44:e5:18:18:70:00:
9c:59:dc:21:09:e8:a5:dd:aa:25:be:73:14:f8:ba:1d:c2:13:
ab:ba:25:6e:6f:01:ab:e6:21:0f:10:59:60:f9:87:48:56:8a:
ed:d5:c8:c6:e9:dc:8c:1d:26:d0:f1:77:9a:1d:ca:e9:8d:f5:
1b:52:dd:d8:f5:dc:24:d5:2c:8b:eb:e7:df:bf:6f:5e:f9:cd:
b1:ad:47:f0:08:38:a8:05:3e:4a:ed:44:f2:cb:30:21:7d:c0:
3f:48:10:32:f4:86:66:dd:97:fb:7b:b5:67:90:ee:65:be:92:
72:aa:8d:39:4f:9b:a3:9f:6b:49:f5:69:7f:f4:01:0e:41:67:
fa:3f:3d:ba:36:cb:cd:1b:9c:24:b1:f0:81:c1:7d:99:46:d2:
e6:a3:9f:72:2e:ec:22:56:92:1c:e3:d0:d3:30:cf:c6:eb:e9:
a9:59:ec:3b:da:7e:ac:56:75:a9:76:08:b1:4c:29:96:58:ec:
ce:51:2e:37:b5:07:28:8e:30:e7:43:d1:ba:9b:11:61:20:08:
fe:45:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:19:23 2025 by rpki-client