Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a4CWkug8j6v6WBDJ13AdouLYdso.roa
File: a4CWkug8j6v6WBDJ13AdouLYdso.roa (raw, json)
Hash identifier: kZuu11KLOTJr85MlxQiff3DmJdf5/VSDItYmhOjoYp0=
Subject key identifier: 6B:80:96:92:E8:3C:8F:AB:FA:58:10:C9:D7:70:1D:A2:E2:D8:76:CA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C54B34E8E5E1ACABA8580A9A9BED6503D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a4CWkug8j6v6WBDJ13AdouLYdso.roa
Signing time: Sun 10 Dec 2023 17:08:06 +0000
ROA not before: Sun 10 Dec 2023 17:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:54af:bf23/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:b3:4e:8e:5e:1a:ca:ba:85:80:a9:a9:be:d6:50:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 17:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b809692e83c8fabfa5810c9d7701da2e2d876ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:ea:1b:b9:2e:45:cb:26:8d:c9:25:99:71:
91:90:b8:bb:0d:1d:47:c9:6c:a7:36:4b:48:43:bb:
92:0f:d4:a2:0f:1e:12:2f:f5:68:1b:8c:fb:6e:d9:
6a:ed:55:05:71:e0:61:04:3a:c8:41:01:94:1d:35:
bf:b0:a9:8c:5b:e0:bd:d5:5e:49:a2:b0:8c:03:13:
7b:5e:ca:40:76:6f:ad:f5:89:a1:52:3c:e4:ef:d7:
8e:37:c9:ca:17:28:40:9d:71:0a:06:40:11:82:13:
ff:60:a7:e0:e3:e3:0d:36:53:40:9e:27:5a:f2:7d:
e7:d5:3c:62:df:7c:56:01:09:98:2b:f5:bc:a0:20:
c2:c5:62:e7:98:fc:3c:83:85:07:1a:a2:de:5c:2c:
d0:87:68:52:62:3a:a8:42:80:d4:db:88:da:32:a6:
65:f5:49:a3:ee:c4:00:06:e2:5a:2f:76:ca:44:e0:
19:c0:11:77:b5:f9:f6:09:92:af:d9:47:57:c9:fb:
83:e9:9e:36:1b:79:1b:7f:82:28:50:51:fd:73:93:
3f:97:64:b4:f0:c9:d6:77:38:c6:7d:c6:46:46:8d:
d8:69:39:e9:31:88:d1:95:43:2d:3d:59:cb:f4:c6:
de:d6:0f:82:bf:7d:6a:0c:de:fd:32:38:b5:18:a0:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:80:96:92:E8:3C:8F:AB:FA:58:10:C9:D7:70:1D:A2:E2:D8:76:CA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a4CWkug8j6v6WBDJ13AdouLYdso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d1:db:7a:aa:75:fc:18:67:33:98:d9:45:27:d3:88:ef:ad:95:
f1:14:ed:eb:6c:8d:61:c4:39:23:06:68:2a:55:ec:58:a1:76:
96:73:6f:21:3b:5b:f3:05:ef:c7:79:37:88:fa:de:8a:5e:82:
8f:cd:ad:da:f8:47:e7:f0:41:a5:77:93:fc:ff:35:ff:cb:88:
15:ad:79:a9:12:77:0b:fb:5a:75:12:82:68:9b:79:67:60:c9:
10:d5:9e:df:f1:75:f5:b4:78:6c:16:3c:b2:f4:42:2d:42:1b:
87:33:a5:e6:3c:12:02:fb:53:5b:9d:35:e8:e3:4a:3d:56:16:
a7:d5:8d:27:29:ea:da:18:ef:7c:ff:28:32:da:02:86:65:24:
f5:8f:f4:7b:c2:bb:9d:54:ef:54:03:1c:bd:27:20:1c:27:72:
af:0a:54:d7:b6:51:d8:86:ce:35:00:95:72:86:6c:8e:c1:8e:
12:48:5d:07:f9:dc:85:7d:1c:d3:ac:e6:3c:74:c4:31:06:1e:
d0:eb:f3:c7:d9:e5:2c:87:39:ec:93:7f:31:2b:51:f1:27:9d:
78:f6:23:d1:5a:48:a3:42:c5:a7:ee:b9:a2:d0:3b:ac:7e:52:
a8:43:d9:c2:54:26:60:72:1e:06:d5:74:29:d3:68:9b:3d:13:
03:9f:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:39:22 2025 by rpki-client