Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IkxMx9w0q0NK0Hj74zK-HySZLr0.roa
File: IkxMx9w0q0NK0Hj74zK-HySZLr0.roa (raw, json)
Hash identifier: WZ4T2p0KZPOTUIBUG8yC2POBQEQ75FsxnbjUC8rfinQ=
Subject key identifier: 22:4C:4C:C7:DC:34:AB:43:4A:D0:78:FB:E3:32:BE:1F:24:99:2E:BD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD49FA64176426BCF663C28900CA4AECA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IkxMx9w0q0NK0Hj74zK-HySZLr0.roa
Signing time: Wed 27 Sep 2023 03:12:27 +0000
ROA not before: Wed 27 Sep 2023 03:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d4:9f:a6:41:76:42:6b:cf:66:3c:28:90:0c:a4:ae:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 03:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=224c4cc7dc34ab434ad078fbe332be1f24992ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:05:9a:bc:91:90:01:43:cf:af:a4:84:e0:
29:ba:ca:0f:b9:b2:99:02:91:24:4e:6b:11:25:d0:
93:53:1f:67:e7:b2:09:eb:2b:0c:b7:a5:77:75:8a:
26:fd:80:e0:f9:d4:40:0b:3d:a6:d6:8e:6f:2d:a9:
02:3d:bd:87:50:e9:c2:29:31:8d:a0:50:ac:10:c3:
f3:83:33:29:98:53:5f:78:31:4b:ca:66:31:b5:8c:
55:27:03:ef:6f:14:d5:d9:20:eb:d1:7e:cd:85:11:
ec:8a:96:f1:55:16:28:1c:ad:64:7d:03:72:7d:ad:
4f:e7:89:f5:8c:5d:70:3c:13:37:cf:74:10:94:c5:
c2:96:7f:5b:b9:6e:d6:e5:e4:76:46:d0:fb:e4:46:
b5:59:d3:2c:61:1f:6d:a3:7c:b0:a0:20:d6:44:51:
96:ec:ca:00:7c:71:fa:b1:73:a4:17:31:cc:6c:d9:
b1:aa:03:cc:16:83:43:9c:de:77:01:6d:82:70:d8:
81:34:ec:e8:ed:81:27:8e:0d:bf:d3:77:c8:13:51:
c8:ac:a8:9c:13:5e:b3:c1:ef:84:4d:99:2b:d0:19:
9b:f1:1f:6c:95:0e:5b:f6:e6:98:f4:79:fa:e3:2a:
33:26:9d:c1:8c:81:3e:e4:1c:44:24:d1:1b:69:26:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4C:4C:C7:DC:34:AB:43:4A:D0:78:FB:E3:32:BE:1F:24:99:2E:BD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/IkxMx9w0q0NK0Hj74zK-HySZLr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:84:27:5a:04:20:2e:a0:f7:2c:97:09:49:34:dd:6a:aa:10:
f7:a0:17:c7:47:a4:ad:81:01:d2:c0:0e:b8:25:c6:76:a9:0f:
33:16:83:ca:e9:bc:93:7f:6e:ed:a2:24:5c:a7:28:b9:b2:f5:
5c:3d:15:8f:b8:4e:87:8a:0c:31:a0:f1:2c:5a:0b:77:e0:fe:
18:59:af:fb:91:8a:8c:42:5c:3d:cc:a1:ff:d3:02:6f:f4:71:
d2:27:7c:c3:41:15:11:23:84:dd:da:8d:56:4e:ef:e7:23:99:
86:e7:bc:1d:ef:73:a1:90:65:01:51:e7:84:b5:10:78:c1:0d:
f1:7b:a8:1c:82:38:f1:4c:99:b8:bd:cf:8f:b0:94:ae:5f:8b:
7b:a5:0b:69:60:d9:26:ed:0c:73:58:87:19:8d:ed:c5:ae:83:
bf:66:54:ad:29:7f:50:f8:f7:27:cf:a5:dd:10:9b:2a:6d:de:
43:4b:17:06:9a:80:dc:9f:37:ae:64:db:fe:36:07:f7:b6:9a:
5f:47:88:3b:83:85:5b:ea:55:99:4e:2b:f3:6c:7e:13:ea:cb:
db:f6:9b:e8:aa:38:89:be:d9:e7:c9:c6:a2:32:28:bf:50:81:
12:12:13:cd:8e:3a:1e:90:5b:07:36:48:37:43:09:48:b3:45:
11:54:b6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:18:10 2025 by rpki-client