Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a7sLfM1pywLKB23e48qhOn5AAsU.roa
File: a7sLfM1pywLKB23e48qhOn5AAsU.roa (raw, json)
Hash identifier: /wi6l3TfklMrmCHNM8teNWfWlQacAYh4KmKNsy83BWA=
Subject key identifier: 6B:BB:0B:7C:CD:69:CB:02:CA:07:6D:DE:E3:CA:A1:3A:7E:40:02:C5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD20F3752ECFC13273AE27688A9389C03
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a7sLfM1pywLKB23e48qhOn5AAsU.roa
Signing time: Tue 26 Sep 2023 15:15:27 +0000
ROA not before: Tue 26 Sep 2023 15:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:0f:37:52:ec:fc:13:27:3a:e2:76:88:a9:38:9c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 15:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bbb0b7ccd69cb02ca076ddee3caa13a7e4002c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:71:92:3c:ce:f2:05:3c:0d:66:1e:a0:fd:
80:7f:04:58:f6:1f:d6:a3:43:fa:36:92:9e:2e:b9:
10:14:8c:5d:90:58:65:65:3b:ef:59:9f:08:4f:bb:
0c:ed:65:8a:31:e7:17:fc:38:f3:01:93:8f:23:63:
de:c3:e2:bd:d4:64:74:34:4a:68:7a:b0:ba:6e:c9:
ae:b8:63:bc:64:a2:56:09:4a:bd:1c:4b:d9:be:64:
01:69:7b:d1:cf:2f:a1:19:cc:06:32:6b:f2:2e:c6:
9e:bd:6d:d1:e7:2c:70:13:12:28:96:bc:00:a4:34:
55:cb:6f:e7:64:bb:99:29:1d:d0:b3:24:3d:b0:20:
a6:6f:2f:f9:2e:9c:b4:05:21:b1:17:20:ec:6c:54:
bd:f9:9c:83:de:0a:5a:c8:b4:fc:72:0b:b6:5e:13:
d1:31:d6:04:25:38:39:67:53:21:07:bf:18:79:c2:
63:fb:b6:b6:d3:f7:57:39:36:3e:a2:e8:13:24:06:
3b:9d:2e:d4:2e:26:e5:ea:08:81:da:da:cb:87:03:
45:47:4d:e6:9a:48:f1:7a:61:3d:15:6f:db:2f:a6:
b9:51:f1:db:a4:af:d6:79:68:fb:5e:a0:6b:93:19:
25:81:6e:cb:92:3a:f4:fc:03:8a:c6:96:53:9f:d4:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BB:0B:7C:CD:69:CB:02:CA:07:6D:DE:E3:CA:A1:3A:7E:40:02:C5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/a7sLfM1pywLKB23e48qhOn5AAsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:70:64:49:58:df:8e:0d:50:bc:f1:eb:14:52:1a:3e:79:6e:
27:b4:4e:f8:bc:4e:72:6e:3c:75:e2:8e:65:7c:a9:17:f6:b1:
84:cd:53:47:ba:44:e7:f1:17:0f:8b:be:d9:a0:f4:49:fb:69:
50:59:a5:5c:c9:5a:98:f1:76:cc:6b:83:da:cc:06:79:74:15:
67:9b:83:2e:ee:b6:8a:db:51:ae:1e:54:09:d2:2f:32:f3:71:
ec:06:88:35:0d:15:cd:36:92:e2:06:10:75:36:cd:d5:52:13:
48:f6:90:9f:1f:90:27:ef:71:91:f4:7f:1c:ce:fd:14:d2:5a:
6b:87:e7:e8:c1:57:f4:56:7a:56:60:ff:96:a8:af:2d:24:4b:
13:6b:af:44:08:d7:75:b9:88:76:8d:df:87:81:8c:ed:5a:4b:
29:fe:02:89:ca:0d:67:63:d3:38:03:92:f1:22:6e:64:a2:d0:
7e:0c:46:da:31:df:36:10:9f:3a:14:0f:1d:ef:f4:df:af:a1:
cc:3d:65:a8:a6:82:d7:07:cf:05:14:6b:e5:a5:7b:29:06:60:
af:93:a4:4b:33:bb:76:b1:f7:e0:c5:66:8c:1e:ea:0c:f9:c4:
ea:0f:e7:a5:31:84:88:af:7e:de:3d:e0:6b:38:dd:f8:df:f0:
7d:a5:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:37:59 2025 by rpki-client