Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aSUctJwyfFHo0NnkyETgKoCN4dM.roa
File: aSUctJwyfFHo0NnkyETgKoCN4dM.roa (raw, json)
Hash identifier: qmqjXbUXkOhjFkUlb9Dl5J3BEwyF/NMkeaZmX3Hm6z4=
Subject key identifier: 69:25:1C:B4:9C:32:7C:51:E8:D0:D9:E4:C8:44:E0:2A:80:8D:E1:D3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFF5067FDF90C65B79E0EEE2C038AA5A2
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aSUctJwyfFHo0NnkyETgKoCN4dM.roa
Signing time: Fri 24 Nov 2023 03:12:21 +0000
ROA not before: Fri 24 Nov 2023 03:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:50:67:fd:f9:0c:65:b7:9e:0e:ee:2c:03:8a:a5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 03:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69251cb49c327c51e8d0d9e4c844e02a808de1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:53:7a:92:c0:78:11:a3:28:d6:a3:64:73:
28:f8:c5:d9:da:f7:72:aa:fb:52:a4:15:41:68:ca:
27:f0:b4:d2:86:2f:d6:d8:2a:02:20:8d:9c:9c:d6:
2e:8d:f8:f5:2f:de:a7:6f:ee:50:ec:d7:19:c2:65:
c8:1f:bc:b8:c5:28:ad:f0:9b:50:bd:6d:d5:55:61:
6f:44:6e:86:f0:1d:5e:4a:ab:16:3d:9d:cd:4f:ee:
75:ab:87:31:b5:f9:83:fa:80:55:1a:96:66:df:d9:
e9:bc:18:f8:15:8f:f8:35:34:91:3b:aa:76:a1:86:
16:d3:df:55:3b:cc:a6:b4:0b:22:07:a7:d0:48:6c:
f1:cb:f0:2b:9a:d9:7b:d7:d3:69:39:85:23:1a:c9:
3f:eb:45:3a:e5:a1:a3:95:db:5d:1e:bb:bd:a4:66:
d7:c0:20:a6:e5:c2:82:c5:66:1a:6f:4f:0e:ac:af:
51:46:0a:e5:87:c6:46:e2:0a:cc:48:ba:e7:9a:cc:
17:5b:b6:d9:dd:9f:b0:d6:73:6e:17:9d:cc:94:52:
39:69:92:a4:f5:0b:57:7c:b1:88:e6:5b:4a:fc:e7:
2a:26:ed:36:54:8c:01:36:72:b0:08:9b:9c:67:65:
29:b8:e6:de:e0:f2:98:b0:a8:3b:0c:b8:02:c9:fb:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:25:1C:B4:9C:32:7C:51:E8:D0:D9:E4:C8:44:E0:2A:80:8D:E1:D3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/aSUctJwyfFHo0NnkyETgKoCN4dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:11:2e:27:df:9a:a1:13:94:73:04:62:4a:d3:c7:5f:f2:99:
01:16:d3:d2:17:cf:c8:fa:bf:c7:5c:11:56:f1:e0:93:c0:1c:
b3:3b:b9:5b:bd:8f:bb:c2:b4:39:ec:4b:92:90:76:8e:f1:36:
fb:74:fa:1b:07:7e:56:29:6c:91:0e:9d:93:bd:ee:91:2d:97:
75:01:92:e1:69:9a:4d:95:55:2e:25:4a:6a:1f:78:b9:c8:1b:
dc:12:fe:f9:fd:33:03:ae:c9:b0:9c:03:00:ba:f2:96:bd:cc:
46:c0:cb:c0:6a:1a:ac:37:7b:f2:5f:f4:6d:66:d1:aa:84:20:
ff:78:7f:bc:36:a4:b7:a8:69:a8:5e:ce:a4:21:5d:d5:9f:b7:
30:93:01:93:b8:b3:fa:09:d1:c3:8a:f3:97:39:cf:f5:c4:2b:
90:a0:13:9d:36:c6:6f:f2:25:55:26:93:73:3b:fe:12:1f:60:
76:a0:c1:a0:88:db:7b:87:28:6f:3a:18:53:49:02:bb:c0:47:
58:59:7e:7f:56:40:c0:84:22:84:4e:55:52:a1:3c:12:92:ec:
d1:3f:e0:3a:c8:21:da:90:e4:35:4e:2e:42:96:71:c4:f7:c0:
75:6f:91:80:c8:da:57:07:ad:9a:0c:90:53:27:ff:4b:7c:78:
c7:fd:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:17:43 2025 by rpki-client