Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rkj8HEaremW_1h2SyMYs_lu7k9I.roa
File: Rkj8HEaremW_1h2SyMYs_lu7k9I.roa (raw, json)
Hash identifier: PEeVnnaTX8WavNLZz1xZQmDORjKWhRHPyOdE3LDYg3U=
Subject key identifier: 46:48:FC:1C:46:AB:7A:65:BF:D6:1D:92:C8:C6:2C:FE:5B:BB:93:D2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6E7A6DA622384515CB4BBAC74CAAF40D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rkj8HEaremW_1h2SyMYs_lu7k9I.roa
Signing time: Fri 15 Dec 2023 17:16:06 +0000
ROA not before: Fri 15 Dec 2023 17:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:7a:6d:a6:22:38:45:15:cb:4b:ba:c7:4c:aa:f4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 15 17:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4648fc1c46ab7a65bfd61d92c8c62cfe5bbb93d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:52:cf:f7:1d:af:75:59:7e:9b:e6:b3:ad:72:
cf:26:d8:d8:9a:d3:a2:76:f6:ea:b9:01:8e:f8:9b:
85:4b:54:76:ff:5c:76:b4:d1:89:26:c1:5c:92:a5:
52:54:4d:c7:52:a6:f9:31:76:27:89:f8:53:12:0f:
f8:bb:1d:1e:10:44:5a:90:c4:26:84:16:93:71:2f:
8e:09:2e:4e:d6:5d:e4:f7:fa:7d:ce:75:d4:4e:00:
f6:0d:b6:85:5e:77:95:d2:e8:e5:ab:bc:15:0c:76:
07:d9:e1:14:00:2d:16:e5:65:36:0d:d8:fa:11:cd:
47:71:26:38:86:c2:2d:27:ee:a3:a5:4a:d0:76:73:
22:ba:35:57:9b:78:e4:3d:22:27:2a:16:f1:89:00:
bd:d8:9d:be:e5:70:da:72:5a:3e:52:22:9a:c1:8f:
38:bb:3b:f4:43:69:ac:4f:3c:ca:5c:63:5c:48:1c:
65:30:f5:83:0a:b3:b7:83:2e:29:7e:22:f3:a5:27:
06:2e:dd:8c:ad:08:43:db:d7:15:4f:18:aa:6d:bc:
80:13:ba:75:b9:6b:0f:52:b7:7f:79:05:cc:20:3e:
f0:b5:d3:10:f2:f8:4a:89:92:97:aa:d8:be:dc:ab:
25:f6:15:63:e6:bc:5a:02:18:8a:bc:ce:1d:a3:ca:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:48:FC:1C:46:AB:7A:65:BF:D6:1D:92:C8:C6:2C:FE:5B:BB:93:D2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Rkj8HEaremW_1h2SyMYs_lu7k9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:af:69:8c:c7:28:31:b6:0c:b9:21:f2:dd:9d:77:0f:38:b7:
aa:1d:12:23:72:06:71:87:de:94:c7:67:3d:79:09:01:56:9f:
53:a1:bb:38:cb:3b:09:84:5b:ea:f6:0a:15:53:82:20:4c:4f:
b5:e4:d4:e6:6a:76:d9:c3:63:a6:94:1a:86:90:17:17:c5:b8:
78:e7:62:c6:26:59:7b:c8:b8:82:ce:b1:1e:41:6e:4d:f5:77:
f7:45:21:0d:d1:31:1a:5e:c6:7a:bd:43:a4:0d:0c:7c:93:91:
fd:25:1a:ca:d2:9f:de:83:7e:a5:62:d4:ba:9f:87:25:ab:ca:
c6:c0:33:e3:8a:f3:2f:de:35:52:eb:57:03:bb:53:37:9b:19:
fa:fe:2a:0f:90:c9:7a:5c:67:94:a2:97:14:52:32:dd:15:5b:
0d:2d:00:27:64:60:e0:8a:8d:15:9c:3d:d7:dd:e3:9e:10:ec:
64:7c:c8:3b:e2:b3:d4:39:2c:78:03:8d:6d:dc:69:9a:b7:87:
65:04:d2:bc:85:dd:06:b2:3b:47:f2:91:87:a0:9f:b9:ad:7d:
6c:14:1f:8c:06:a9:47:01:21:cb:c9:bf:db:83:de:e1:17:9c:
08:bc:0a:1f:f9:1f:e9:44:a1:3f:63:d0:78:31:02:79:c8:4f:
9e:bb:17:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:39:48 2025 by rpki-client