Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P42ITLMFcmHf_hZSu_vVABhY9w4.roa
File: P42ITLMFcmHf_hZSu_vVABhY9w4.roa (raw, json)
Hash identifier: E7WOrRHNwKkMhWqosFDfWF7fXGIrQ8WMFcWwDVOmOTc=
Subject key identifier: 3F:8D:88:4C:B3:05:72:61:DF:FE:16:52:BB:FB:D5:00:18:58:F7:0E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF878D7D6883736187DEA8E75DD9ED13E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P42ITLMFcmHf_hZSu_vVABhY9w4.roa
Signing time: Wed 04 Oct 2023 02:16:23 +0000
ROA not before: Wed 04 Oct 2023 02:16:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:78:d7:d6:88:37:36:18:7d:ea:8e:75:dd:9e:d1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 02:16:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f8d884cb3057261dffe1652bbfbd5001858f70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ec:c6:0c:1e:9a:4e:40:ac:3d:68:86:99:2c:
f2:e1:28:55:d1:a3:bd:f0:73:20:af:36:94:08:82:
16:bf:03:87:7f:3e:d5:35:e4:85:f7:4a:32:cb:99:
a0:82:71:a4:b4:ed:9d:25:0a:1e:af:2a:fc:b8:55:
90:bc:47:e4:1b:8a:f1:3b:10:ab:73:bf:03:74:be:
96:df:04:40:08:5c:22:4f:b1:e2:43:9e:e3:32:03:
af:7f:51:b6:29:a7:b4:ad:aa:e8:41:79:da:c4:5b:
b7:8e:a2:69:42:11:b6:e6:7a:6d:5b:03:20:0f:be:
67:d1:cc:d7:b2:e3:2e:72:25:5b:97:72:e0:3e:d7:
df:cf:6f:0d:82:21:5b:42:8e:5e:bd:8f:af:7e:30:
6b:61:97:53:bd:16:de:a9:a8:35:d1:f3:36:4e:28:
c5:7f:3c:4e:a4:a2:62:e8:6d:99:e3:fe:a9:f6:5a:
fe:21:5e:10:21:a8:74:b7:6b:fb:53:97:2c:dd:33:
4a:d6:05:cc:85:28:2a:19:25:38:48:17:7b:f4:50:
36:35:2b:ef:9f:17:56:cc:b8:46:a8:20:48:99:56:
65:ad:6f:65:84:15:d3:f0:a4:90:cc:e8:3d:51:d4:
80:b3:20:cb:b7:92:a0:05:45:ee:67:52:7d:3d:da:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:88:4C:B3:05:72:61:DF:FE:16:52:BB:FB:D5:00:18:58:F7:0E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/P42ITLMFcmHf_hZSu_vVABhY9w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:39:ba:4e:9a:ba:6e:aa:d9:22:df:4a:0c:3d:26:bf:72:a6:
bf:59:22:a0:e9:ab:de:6a:63:ab:5a:00:21:0a:af:5f:0f:07:
28:f3:6c:54:4d:14:9b:75:70:d7:4f:28:fc:e5:f5:98:45:f4:
69:95:34:b5:3a:ab:41:24:33:10:ff:35:28:fc:9a:b8:5c:9a:
11:d4:a2:50:39:de:54:8a:dd:21:cd:86:88:7f:10:f0:89:5d:
5d:08:7c:f0:07:af:e1:5a:d9:13:cc:07:ad:53:1b:53:0c:5a:
40:c2:36:c3:3b:3c:f7:25:46:2e:06:f9:e8:50:ad:4d:e0:5d:
80:bf:64:a0:cf:f0:4d:1d:10:7f:ad:f4:82:cd:c7:27:32:59:
f5:d6:08:bf:75:40:75:ed:ea:97:c1:ee:5b:19:67:76:5d:00:
6f:b4:c5:ab:f3:a7:19:72:3e:f0:fc:79:12:62:4f:60:fa:d0:
0e:76:29:38:2f:1f:32:88:47:e2:5b:46:f2:72:ed:b0:9c:fe:
c3:44:e3:99:0f:40:79:30:8c:19:12:08:a5:f5:b9:a6:02:b6:
ea:77:e2:f6:96:c8:c6:0b:0f:9b:b3:50:28:2d:b7:33:7c:4d:
44:7e:6c:67:52:c2:54:36:39:28:29:ca:7a:e4:93:f5:c8:34:
9b:d0:04:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:20:59 2025 by rpki-client