Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SfsmjKZrnEDVgU6o-ZCds7wQsWU.roa
File: SfsmjKZrnEDVgU6o-ZCds7wQsWU.roa (raw, json)
Hash identifier: 4G4Sq1b2vcMeRxQ2i3YtoS/PBDtFkYo+QL0aN0fjiLs=
Subject key identifier: 49:FB:26:8C:A6:6B:9C:40:D5:81:4E:A8:F9:90:9D:B3:BC:10:B1:65
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2706C07C91631C57B352B3A850A9C5CF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SfsmjKZrnEDVgU6o-ZCds7wQsWU.roa
Signing time: Fri 13 Oct 2023 03:13:55 +0000
ROA not before: Fri 13 Oct 2023 03:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:06:c0:7c:91:63:1c:57:b3:52:b3:a8:50:a9:c5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 13 03:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49fb268ca66b9c40d5814ea8f9909db3bc10b165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:9c:69:fc:41:56:00:a1:42:0c:ac:87:fd:
48:cc:c8:0a:0f:6b:c1:d3:83:80:06:ad:1f:22:bd:
07:c6:cd:fb:ce:eb:b0:6d:df:2f:03:0d:f4:0d:1b:
94:66:02:68:22:4b:4e:25:55:05:28:09:d1:29:3d:
1a:5e:47:40:75:ac:ac:ba:fc:96:45:a2:65:a3:fc:
0b:4a:f3:eb:a4:b5:40:ce:5d:d8:66:26:76:19:8a:
b1:f7:dc:f1:6e:49:ba:43:f6:56:16:e8:93:2e:00:
4a:21:08:f9:59:9b:82:47:5e:a2:3d:9c:19:d6:af:
56:2d:bc:ac:6a:6c:19:c4:b2:32:ac:b9:1e:80:e4:
06:da:2c:c3:eb:1a:42:6d:98:51:5e:e2:41:9c:34:
de:61:f0:9e:1e:eb:af:9f:2c:f5:12:40:90:fa:1e:
a1:61:e0:4f:34:79:03:83:f6:4a:9a:51:9d:a5:1b:
cc:3d:7a:80:a7:62:f5:87:31:83:34:4c:9d:de:cb:
87:96:37:b4:ba:91:5d:7c:e5:4d:99:24:02:b9:eb:
97:33:59:84:c4:fa:cf:78:1f:54:64:b8:45:8b:32:
11:38:26:ae:e8:ef:b3:cb:eb:d0:e1:63:87:c0:c8:
0c:38:1d:1e:0a:09:76:df:a3:13:35:cd:40:94:4e:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FB:26:8C:A6:6B:9C:40:D5:81:4E:A8:F9:90:9D:B3:BC:10:B1:65
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SfsmjKZrnEDVgU6o-ZCds7wQsWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:0d:4f:8a:09:a0:22:a3:22:c7:50:65:3f:4f:58:7e:90:f3:
f8:f1:53:4a:b1:ad:d2:2e:50:ca:d7:cb:61:42:6d:fc:b9:8f:
9b:ce:ac:ec:57:ae:29:38:bb:d8:91:c3:26:ae:21:87:1d:e1:
ea:49:33:70:1d:bc:e1:94:a0:bd:49:b2:42:9b:23:32:0b:9f:
e5:b8:64:45:56:23:08:41:21:0d:cb:d0:4c:d7:1f:39:d1:d1:
fd:4c:dc:6d:72:bb:d0:bf:1a:11:3a:84:c2:e9:3a:86:f4:7d:
c4:e0:95:fd:1b:dc:8f:ab:79:91:ad:29:6b:e6:b0:00:d6:df:
65:d4:87:9a:62:3e:4b:43:49:c4:4a:33:f7:2b:c6:9a:c6:32:
81:7b:ab:cc:c9:6c:a9:ad:66:82:1e:da:f8:0f:2d:b5:45:df:
22:1b:00:b0:8d:7e:6e:86:80:ca:1d:d4:41:5f:c1:61:91:ac:
1c:12:13:d4:15:57:20:a7:c3:11:4a:63:ae:72:d2:9b:ce:1a:
a5:db:e5:69:77:70:86:91:12:ea:28:ef:96:ba:a8:8c:40:84:
5e:20:71:b4:e8:e8:82:84:99:20:35:f9:9c:30:99:85:91:c9:
5b:74:80:29:06:36:c2:0b:26:3c:2e:5e:83:9a:77:86:d7:51:
7b:bd:63:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:13:27 2025 by rpki-client