Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RnFccy7xRGyVVjvj2ruDRkQkqP4.roa
File: RnFccy7xRGyVVjvj2ruDRkQkqP4.roa (raw, json)
Hash identifier: FXE2Dkzbli+6M4HEJSoQKvDvVRdm3qixjFwOD+Uv97I=
Subject key identifier: 46:71:5C:73:2E:F1:44:6C:95:56:3B:E3:DA:BB:83:46:44:24:A8:FE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC3745B63B1337790D5638C11070095CA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RnFccy7xRGyVVjvj2ruDRkQkqP4.roa
Signing time: Sat 23 Sep 2023 19:11:37 +0000
ROA not before: Sat 23 Sep 2023 19:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:74:5b:63:b1:33:77:90:d5:63:8c:11:07:00:95:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 19:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46715c732ef1446c95563be3dabb83464424a8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:c0:e7:9b:fa:7d:35:20:16:3f:59:1d:4e:
e7:2d:1b:3a:7b:62:ce:c3:72:5f:d2:6b:a7:00:9a:
13:af:d7:50:84:16:66:cd:1f:dc:d8:c7:70:80:c7:
8e:cc:9a:a4:04:bf:bc:65:de:be:d4:62:9b:df:fe:
ad:41:e8:51:fa:2b:5c:17:3e:47:b2:54:53:f3:24:
6f:1c:02:8b:4e:42:09:e1:3f:b4:c0:48:71:be:d4:
8c:6e:22:83:5f:45:01:2a:bc:c5:41:68:84:cc:cb:
e1:31:af:64:7f:78:d0:07:ab:08:b6:4e:d4:2e:b5:
2f:0f:7b:2b:62:0a:ed:41:12:f8:d1:c0:c6:bb:b9:
b4:1f:5b:2d:10:82:b4:36:f5:ae:7e:a1:f5:3e:36:
8f:e7:59:3d:2c:bc:09:ca:5f:b7:31:20:7d:14:14:
1a:9f:b6:df:99:8f:80:76:e4:8e:ed:e4:85:77:b6:
16:3b:6b:a8:ef:63:ba:8a:48:49:61:7d:cf:20:a8:
c1:65:72:c3:07:33:9a:15:9e:eb:e0:44:6d:6f:46:
cb:42:7c:c6:65:49:d7:af:f7:4b:3d:d6:4c:b2:71:
cf:08:cd:6d:c7:a8:6b:2e:5a:b3:e0:57:6c:ec:7c:
0b:4d:85:5c:61:66:49:f9:69:62:5c:d3:c1:84:58:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:71:5C:73:2E:F1:44:6C:95:56:3B:E3:DA:BB:83:46:44:24:A8:FE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RnFccy7xRGyVVjvj2ruDRkQkqP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:b9:95:3f:3f:9e:e2:24:6b:6a:c4:ee:b0:67:04:ac:e9:eb:
34:99:af:5e:95:25:15:5a:a8:7a:ab:80:f4:e7:ce:7b:dc:8b:
2b:e7:05:21:16:56:d6:ba:df:d4:93:cd:1b:e3:51:30:d8:94:
3f:88:17:48:03:aa:5e:ff:60:d7:08:d0:ed:e2:af:73:83:bb:
e1:8b:a8:19:ce:39:00:b8:2c:5d:07:1a:ea:46:0c:da:75:db:
3f:a1:a5:39:96:95:28:0a:db:b5:d4:d0:d1:ad:30:7f:58:1b:
8a:c5:63:2a:a5:82:80:bd:89:5c:6f:33:78:9f:24:c8:39:5f:
21:14:fc:91:24:57:02:3b:e4:fa:60:41:5c:19:aa:96:36:e5:
04:c9:b6:ed:0c:3e:41:f8:95:b0:9e:f2:8f:2d:a4:27:10:a5:
9c:cf:46:5e:64:7a:2c:b5:5e:dc:bd:5a:f8:91:65:be:f4:48:
c6:20:62:67:38:6f:a6:51:3a:86:df:7a:ee:48:4e:e5:87:83:
ac:3b:fb:c7:13:57:ed:a5:19:70:96:34:d9:56:bd:10:45:d3:
b3:df:2b:8e:2b:17:fc:43:ac:26:ee:71:7f:74:75:8a:00:e4:
b0:6f:75:b8:5c:d2:c1:51:81:cd:4a:a7:40:0c:7b:fe:f3:51:
7e:f0:88:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:04 2025 by rpki-client