Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S8RDiNiEQpGo4zt99ZC4kLUR1U0.roa
File: S8RDiNiEQpGo4zt99ZC4kLUR1U0.roa (raw, json)
Hash identifier: 9RNCqbVaVcw/uibA25ahHNbUH7feCvsjlz0BZK7Q+gw=
Subject key identifier: 4B:C4:43:88:D8:84:42:91:A8:E3:3B:7D:F5:90:B8:90:B5:11:D5:4D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF79075F28FADC453EAE12DD2D7766206
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S8RDiNiEQpGo4zt99ZC4kLUR1U0.roa
Signing time: Wed 22 Nov 2023 15:05:21 +0000
ROA not before: Wed 22 Nov 2023 15:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:f78f:be69/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:90:75:f2:8f:ad:c4:53:ea:e1:2d:d2:d7:76:62:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 22 15:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bc44388d8844291a8e33b7df590b890b511d54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:17:f3:62:d8:e3:3f:e5:5e:14:28:a6:c4:
75:38:d7:d2:fe:f9:ed:21:7a:44:26:ec:53:79:b2:
5b:02:35:c5:b0:98:dc:29:6c:90:4d:4a:e0:bc:6c:
87:c4:b8:14:6e:f2:03:dd:a2:96:0b:2d:0e:2a:9a:
f8:4f:3f:cd:d8:dd:d5:62:f9:73:cd:9c:7f:54:07:
b1:aa:9c:d4:63:68:87:f7:7e:82:25:09:13:2b:da:
b5:d7:bd:8a:b3:ed:84:47:f0:49:5f:13:2b:39:26:
e3:9a:e8:53:0c:85:9f:81:c2:55:d2:d4:eb:65:c1:
f2:42:4d:d3:8c:ee:81:e4:63:8f:f1:09:52:2b:54:
1f:65:0d:69:56:cf:38:43:80:5f:1a:0f:09:bf:d5:
13:ce:2d:1d:6e:db:db:ed:2e:bf:e4:f7:4d:a5:16:
08:3d:37:b7:e1:eb:89:c1:a8:8d:a8:73:35:3a:61:
21:28:cb:f4:0c:7c:05:d5:81:a4:0e:bc:58:99:ac:
ee:44:14:d1:c6:56:26:cb:29:ba:60:77:f4:e1:d7:
79:51:62:2e:70:26:ce:5e:ef:91:ae:02:81:69:05:
31:29:ff:12:4d:8c:7f:13:56:1f:d8:f6:e3:ab:af:
3a:9a:0e:85:d1:8d:0f:2b:10:af:d8:77:27:dc:0c:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C4:43:88:D8:84:42:91:A8:E3:3B:7D:F5:90:B8:90:B5:11:D5:4D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/S8RDiNiEQpGo4zt99ZC4kLUR1U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:99:8a:35:8f:ac:02:8a:35:53:2d:7b:6b:76:ac:23:25:ef:
65:6d:a8:4c:b5:e3:79:2b:59:75:9e:a4:6c:d6:51:d7:31:d8:
eb:c3:09:9f:36:6c:5b:c8:df:b0:5d:32:81:4a:36:68:36:df:
d2:8a:ed:e9:ab:a6:55:12:fe:11:2b:b7:04:a5:9c:d5:d2:82:
b9:a5:21:fa:b9:b4:16:22:8b:56:c7:f3:ab:bf:fd:60:5d:77:
1d:b1:85:92:92:43:9f:64:dd:f9:d4:46:dc:43:45:1e:16:f8:
b0:81:d0:a5:a2:5b:5e:62:3b:89:19:a4:9b:19:cc:9a:40:8c:
63:3c:5b:31:96:49:87:ee:e1:b4:b8:3a:15:3b:36:77:2e:b8:
14:ad:c5:0f:1d:7c:63:7a:28:db:ad:15:54:33:7a:01:73:12:
3f:4d:0d:21:0d:66:68:4a:b0:39:49:50:3e:e9:e7:9e:94:f9:
f8:7c:fd:ed:90:e9:4e:30:ec:13:8d:f4:a0:4f:ba:ed:84:17:
c8:1a:f8:48:0d:94:d8:60:b9:fa:fc:4c:4e:21:27:26:50:6c:
0c:84:e3:f0:81:c4:07:31:4a:cb:8a:79:85:17:31:7d:b8:36:
e4:05:39:30:ca:9d:a4:d1:27:a3:9b:ce:11:63:d7:1f:7b:89:
7d:76:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:23:18 2025 by rpki-client