Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ShvRMcuMAojCNVx0FsZ9VUfwBTY.roa
File: ShvRMcuMAojCNVx0FsZ9VUfwBTY.roa (raw, json)
Hash identifier: gyWDtJE2O4KQaLMqqQywFEDx9bw7Wv2sBraHyDHsUiE=
Subject key identifier: 4A:1B:D1:31:CB:8C:02:88:C2:35:5C:74:16:C6:7D:55:47:F0:05:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5527885AC400B9AC8AADFA5FBDEBAA4F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ShvRMcuMAojCNVx0FsZ9VUfwBTY.roa
Signing time: Sun 22 Oct 2023 02:12:15 +0000
ROA not before: Sun 22 Oct 2023 02:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:55:27:88:5a:c4:00:b9:ac:8a:ad:fa:5f:bd:eb:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 02:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a1bd131cb8c0288c2355c7416c67d5547f00536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:d1:7d:88:98:da:b8:19:23:8c:e8:58:5f:
af:a6:55:47:b1:7e:38:5b:ab:bd:04:d9:1c:0c:79:
a6:cf:3e:ea:4b:46:4a:ad:ed:04:9b:09:08:37:17:
9e:fa:76:ed:73:a4:64:a5:3e:11:99:07:f6:1b:99:
c1:4f:dc:89:8e:77:71:18:81:75:ff:06:ca:f7:54:
f3:88:17:e0:eb:2d:c6:cc:df:04:c9:20:1e:9b:06:
6d:92:8e:a1:60:b0:14:20:db:f4:54:24:7d:ab:62:
72:e8:97:25:26:5b:35:1a:5a:9c:ed:70:eb:de:f7:
89:1c:17:f3:7d:aa:ce:9b:bc:da:ad:9b:9a:3e:dd:
bb:fd:4e:22:78:74:d8:3e:25:7e:5e:a3:b6:60:d4:
bd:a0:78:50:a3:5d:8c:b4:c2:07:85:a6:d0:93:f8:
22:72:a5:7d:e1:4e:87:b8:b6:3f:ee:31:cc:50:e2:
c5:6c:e9:60:38:0e:1e:29:7c:f4:36:43:72:48:0c:
41:28:23:c4:50:29:34:9f:d0:a8:63:6d:5b:f5:b1:
8f:59:00:6d:57:cd:0b:de:d9:38:4f:6d:8a:a5:b7:
03:92:41:09:e4:c9:f7:e3:2f:32:6b:c1:81:17:48:
8b:c6:31:9e:38:f5:f0:11:eb:6f:ed:b0:57:ea:97:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:D1:31:CB:8C:02:88:C2:35:5C:74:16:C6:7D:55:47:F0:05:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ShvRMcuMAojCNVx0FsZ9VUfwBTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:2a:c7:fd:09:a7:63:e1:94:9e:3b:fc:dc:b5:14:dd:d9:59:
09:e1:80:be:79:78:c1:b5:ce:84:87:fb:e5:78:34:e8:48:a2:
f7:31:9b:4e:0c:d0:b2:9b:f7:c5:41:e9:a3:7f:0d:4c:7a:eb:
71:a7:20:f2:e6:04:81:84:54:c9:da:8f:88:59:e3:4c:26:a8:
0d:a3:0f:b0:4d:7a:cd:54:35:3d:0b:d4:2b:dc:d7:29:94:e0:
bd:9b:c6:6b:ff:3c:d9:70:42:52:6f:95:29:7e:85:d0:27:af:
7e:2b:3f:aa:ac:a7:e9:cc:66:1c:c3:a4:75:dd:69:8f:12:d7:
e4:59:39:57:a3:45:0d:d6:7a:53:25:e5:9d:a6:5b:eb:9b:d1:
48:12:fa:fd:b3:2b:35:4f:bd:6e:e3:04:a3:a6:93:5e:37:34:
b4:fc:c3:32:99:e6:ef:a9:85:f4:eb:fc:0e:a4:13:91:c7:05:
e5:89:53:bf:5b:3e:3c:ca:c6:87:93:d5:58:1c:16:67:44:80:
b5:81:dc:ef:72:51:3e:1b:13:98:ad:7c:16:8f:01:49:f9:ec:
90:2b:cc:4c:bf:60:7a:ad:5c:67:bd:5b:27:d4:31:1b:86:c8:
c4:9e:42:74:99:3c:ee:d4:df:9a:80:60:70:0c:77:52:d9:8e:
86:98:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:22:22 2025 by rpki-client