Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aEinpDcA2Vbnd6AsBXmRpPmz2_M.roa
File: aEinpDcA2Vbnd6AsBXmRpPmz2_M.roa (raw, json)
Hash identifier: wYhn/A/eSJM91d8aNm3Rt0elx7h9UMqlrUyAHS1OQ0I=
Subject key identifier: 68:48:A7:A4:37:00:D9:56:E7:77:A0:2C:05:79:91:A4:F9:B3:DB:F3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB31F25533CB17AD3C29663DE2E06E153
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aEinpDcA2Vbnd6AsBXmRpPmz2_M.roa
Signing time: Wed 20 Sep 2023 15:04:37 +0000
ROA not before: Wed 20 Sep 2023 15:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:b31e:e4be/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:1f:25:53:3c:b1:7a:d3:c2:96:63:de:2e:06:e1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 15:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6848a7a43700d956e777a02c057991a4f9b3dbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:90:08:24:a6:e0:f1:df:9f:bb:12:bb:76:
d1:71:0d:35:2d:16:09:73:1c:16:f9:4d:53:3a:7e:
67:86:f0:82:74:dc:51:93:cf:10:80:b7:89:50:29:
cd:ca:d6:75:cd:28:0d:6d:0d:cb:d8:cb:05:f0:3d:
18:56:99:5c:98:22:e6:9a:04:84:47:d1:a1:35:b5:
35:ec:4a:cb:00:84:53:69:49:63:35:5e:4c:4b:d4:
fd:1d:b1:aa:24:ab:4f:84:7b:81:36:10:f2:29:44:
33:b8:ff:09:91:49:c5:1d:37:ba:4a:8d:f8:3f:3d:
6f:22:d2:df:10:ce:cf:c5:f6:2c:0b:e5:fc:e6:48:
10:a4:da:8b:75:53:7d:4c:b0:c6:c6:a3:bd:06:37:
0d:25:87:30:9b:bd:63:da:fa:6c:9b:26:6e:29:da:
f2:ae:4a:a4:13:ed:92:25:78:7e:83:a8:6e:f6:f6:
20:df:d8:40:9a:08:0e:01:d9:aa:5e:86:f0:57:f6:
5f:45:7b:02:81:3f:f4:b3:17:4f:f4:49:fd:e1:b8:
c9:9d:6a:07:68:16:d3:27:be:a6:7a:2c:81:06:9b:
89:92:32:15:10:d9:4a:db:b0:43:84:48:00:cd:f8:
9b:36:0b:8e:44:02:06:4e:d4:1c:8c:6f:33:83:b3:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:48:A7:A4:37:00:D9:56:E7:77:A0:2C:05:79:91:A4:F9:B3:DB:F3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aEinpDcA2Vbnd6AsBXmRpPmz2_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:ab:b4:28:fc:c6:4c:35:fb:4a:fe:ed:7d:6d:bb:16:7b:8c:
fb:64:50:3e:4f:a2:81:29:01:a3:12:96:ca:37:7f:e1:d5:7e:
20:85:d5:87:69:08:fa:83:4f:16:ec:f1:77:37:18:e0:05:57:
d0:76:4d:57:76:ae:75:bd:35:6c:b6:2a:5c:b6:cc:92:1e:39:
73:2f:28:29:15:09:53:35:4d:b7:12:57:ae:af:0e:90:e0:05:
d6:e2:d1:3d:f0:f8:e7:69:53:c6:d0:db:c5:5d:05:27:ba:30:
07:93:a0:2f:40:5f:1a:40:1b:3c:d4:55:f9:17:11:56:5a:93:
c4:49:0a:a5:60:93:1b:56:93:5e:66:97:05:69:40:9f:f3:5a:
03:b2:c8:a9:b9:02:40:96:7d:44:a7:f1:62:e0:9f:c4:ce:92:
75:77:37:3f:f8:0f:9e:66:45:33:66:81:73:ce:20:ae:8d:59:
1f:db:fe:b4:56:fd:51:41:34:40:ba:a1:7a:67:18:0e:c0:e4:
3b:4b:45:cb:c7:9b:13:0f:0e:63:b6:3f:37:ca:cf:85:14:89:
c8:95:8c:37:2f:2a:28:f7:0b:06:c0:4a:59:66:33:0d:1e:3e:
91:8e:c1:82:2e:d5:5c:bf:75:f3:f2:18:36:f1:94:23:57:76:
d0:22:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:21:03 2025 by rpki-client