Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IK34F-lyC-BDDOT89zN87rGLOvU.roa
File: IK34F-lyC-BDDOT89zN87rGLOvU.roa (raw, json)
Hash identifier: bYYPbPiIi2YIKnt2K9IVkP2G0QlaAoC9XRvp2qa4d/U=
Subject key identifier: 20:AD:F8:17:E9:72:0B:E0:43:0C:E4:FC:F7:33:7C:EE:B1:8B:3A:F5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AFBE75B19D96A9BD2215A876BA4BA48D0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IK34F-lyC-BDDOT89zN87rGLOvU.roa
Signing time: Wed 04 Oct 2023 18:15:57 +0000
ROA not before: Wed 04 Oct 2023 18:15:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:e7:5b:19:d9:6a:9b:d2:21:5a:87:6b:a4:ba:48:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 18:15:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20adf817e9720be0430ce4fcf7337ceeb18b3af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:d2:79:69:37:5e:db:77:4a:2b:a2:ac:9d:
0f:27:76:21:36:b1:df:e4:4f:27:67:8f:b9:63:bc:
2e:6b:74:a5:58:c6:60:d2:1f:9d:e7:0f:a0:69:dd:
91:52:0a:d4:76:84:fc:dc:e3:87:8a:1e:ec:db:84:
8a:f7:4c:f9:5a:fe:86:1c:b9:22:47:a3:08:76:fa:
51:a9:00:42:d8:d0:e0:b4:f7:16:54:f0:46:95:90:
3c:db:5e:54:70:ec:4e:5c:ac:1d:e2:a8:c5:d7:95:
19:b7:ac:7a:32:ec:21:44:b3:f9:78:45:1f:9b:c6:
52:40:c8:01:37:36:12:f1:a3:44:85:65:c3:0a:cc:
fe:98:47:b9:d2:31:cf:33:f3:f9:12:1a:66:e8:c0:
b1:1b:54:0e:52:1a:ac:a1:6d:7f:22:56:e0:36:68:
08:01:1e:c8:e3:79:48:75:62:66:82:2f:1d:71:af:
65:73:8b:20:66:c1:e2:03:22:d4:da:c4:cd:ec:88:
3c:3d:23:9c:39:d0:15:00:90:39:73:7d:7a:14:c4:
88:6e:fa:70:e4:f1:5d:62:b5:b3:b4:bd:cc:9a:c7:
78:b3:db:51:61:62:d4:e0:cc:59:9c:6d:01:d5:d0:
e3:29:81:28:48:56:bf:9c:e3:55:78:99:d1:c2:b5:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:F8:17:E9:72:0B:E0:43:0C:E4:FC:F7:33:7C:EE:B1:8B:3A:F5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IK34F-lyC-BDDOT89zN87rGLOvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:70:61:3b:c2:8a:c9:09:64:99:00:d9:54:c0:0b:10:e2:f8:
c6:1f:04:3a:61:71:32:c9:99:39:62:98:e9:5b:1d:43:e1:64:
f1:c4:e6:d0:2c:5b:2c:ff:db:33:d8:18:ee:96:0c:50:80:fe:
50:48:a6:1c:f9:ea:f4:e9:68:dc:72:82:43:03:40:10:29:1e:
5a:65:0b:97:5e:bb:14:01:21:7c:bc:76:29:e2:b3:b4:c3:56:
fb:25:e3:ba:5f:06:e9:52:d9:15:7e:b2:90:98:c7:e9:59:75:
59:74:76:a1:c9:7b:7c:92:c9:94:b0:ce:54:9f:e7:73:8a:8f:
0e:aa:a1:f5:9e:61:2f:31:3c:17:59:4d:53:1c:fe:06:f8:1e:
38:f1:37:fc:6c:70:45:0a:f5:26:a6:ac:15:1e:df:d6:63:4e:
f4:cf:8a:ab:b1:76:2f:50:4c:68:56:77:cc:ad:94:a4:15:f1:
f6:3e:69:2a:11:f1:9c:1c:84:c3:d6:bd:2d:7d:42:3f:b0:3a:
e3:a9:ba:51:c4:cf:e4:62:e3:6e:ed:2b:80:e5:73:72:78:8a:
41:3e:ce:d8:9a:a3:61:93:9f:eb:db:d3:64:c7:97:88:2b:17:
dc:55:ca:3f:e8:36:6e:04:27:8b:9e:89:8f:c5:44:47:54:4e:
88:b7:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:26:39 2025 by rpki-client