Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sv2WimY_4SN70zaMK5xvxpm5q7g.roa
File: Sv2WimY_4SN70zaMK5xvxpm5q7g.roa (raw, json)
Hash identifier: gxITvg8ktnVmGeNAkOKyJ7Kj0UqGvmHLqTBcDYQLSK8=
Subject key identifier: 4A:FD:96:8A:66:3F:E1:23:7B:D3:36:8C:2B:9C:6F:C6:99:B9:AB:B8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB6F9A9EF41C1E5DB1825B5B325B1B16E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sv2WimY_4SN70zaMK5xvxpm5q7g.roa
Signing time: Fri 10 Nov 2023 02:04:57 +0000
ROA not before: Fri 10 Nov 2023 02:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:b6f9:99ec/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b6:f9:a9:ef:41:c1:e5:db:18:25:b5:b3:25:b1:b1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 02:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4afd968a663fe1237bd3368c2b9c6fc699b9abb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:eb:de:a3:ce:99:23:a3:49:ed:d2:cd:7f:
b7:9e:d9:9b:80:1c:e8:3b:6c:15:d3:9e:8e:f7:0f:
bc:e3:84:9a:37:87:cc:4d:ad:ab:62:5e:98:c5:b2:
4d:3a:a8:91:71:ce:ef:48:3e:60:15:5c:d8:71:fc:
1b:45:af:56:2f:03:13:f5:6c:52:89:b5:40:04:bb:
94:b7:ed:73:d2:03:d6:cf:36:61:33:01:72:d9:d7:
50:8b:25:e6:9b:c6:68:8f:ba:c2:24:8f:3d:54:d4:
14:07:a1:7a:70:0e:8d:e9:80:05:71:93:86:42:ab:
54:c8:24:05:30:d7:70:7a:c0:58:1a:de:78:3b:d7:
45:a9:45:67:6d:6d:d7:04:6e:78:32:49:eb:7b:24:
0d:56:c2:75:d8:6d:0f:d5:e3:30:56:b5:5e:4f:5c:
9b:86:84:0e:67:e8:55:fa:e2:6c:f6:4d:c6:87:5d:
b2:75:75:a2:5b:3e:90:31:cb:13:33:24:90:9b:d6:
ea:54:2a:ad:37:ee:c9:95:72:17:94:ad:ab:a1:dc:
3f:9d:73:4f:13:75:bd:da:62:86:2b:01:70:ab:cb:
cb:82:8b:c1:1e:54:84:d3:0a:10:a5:9a:c9:cf:4c:
54:fb:4f:52:0f:fc:b8:89:13:89:39:73:a3:ec:c3:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FD:96:8A:66:3F:E1:23:7B:D3:36:8C:2B:9C:6F:C6:99:B9:AB:B8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Sv2WimY_4SN70zaMK5xvxpm5q7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cb:c9:40:90:f5:30:05:e5:df:c0:f8:7b:50:74:64:37:ec:81:
38:c2:64:6d:89:d1:d2:37:6a:9d:b5:82:b6:6b:66:01:8b:97:
18:99:26:34:f8:b0:d2:59:08:89:8c:27:76:88:62:13:31:aa:
f5:33:8c:8b:5d:46:7f:cd:4c:93:05:62:88:c3:ed:96:ca:40:
3b:e6:2b:a7:f8:5f:2a:89:f3:c8:d6:dc:21:ef:f0:4e:53:9c:
d8:d0:ca:9b:6e:56:b1:ba:f6:46:fc:93:d3:21:05:aa:84:df:
16:c7:6b:2e:31:c4:e5:83:b2:01:e5:bf:24:0a:b0:b2:21:94:
66:2e:18:fd:c7:8a:0a:fe:9e:81:10:a6:e2:2f:8c:58:be:c2:
85:a6:66:69:5c:f2:12:0f:7f:5d:35:41:1d:ff:18:a6:fe:60:
4c:1e:2f:43:d6:09:20:af:07:ca:08:93:fb:6c:e8:61:ac:76:
53:ee:12:8d:22:7d:4e:d8:53:68:fd:d3:8e:ef:67:53:aa:20:
ae:ac:01:94:fd:2e:f0:ae:1f:7b:ad:1d:98:57:e2:70:41:df:
41:ca:95:87:24:ba:9b:1e:48:c6:a7:63:54:8b:ca:77:07:93:
23:35:fa:e1:56:c0:b3:9b:f1:6b:7e:e5:0f:7e:a2:c9:99:e7:
f4:25:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:36:44 2025 by rpki-client