Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b4SAkNfyFb23hj0iCwq-xF9SOjc.roa
File: b4SAkNfyFb23hj0iCwq-xF9SOjc.roa (raw, json)
Hash identifier: acthbjZ+GJM2DQ8xzCrz1ULUu4FIl85xTS1gLp/n32I=
Subject key identifier: 6F:84:80:90:D7:F2:15:BD:B7:86:3D:22:0B:0A:BE:C4:5F:52:3A:37
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE0DA56C09BCD6C04E9A9393136F5A5B5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b4SAkNfyFb23hj0iCwq-xF9SOjc.roa
Signing time: Fri 29 Sep 2023 12:11:59 +0000
ROA not before: Fri 29 Sep 2023 12:11:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:da:56:c0:9b:cd:6c:04:e9:a9:39:31:36:f5:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 12:11:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f848090d7f215bdb7863d220b0abec45f523a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:38:65:d1:95:0a:7b:d2:41:7f:b3:73:a9:
89:d0:9e:a9:95:4e:3e:29:5b:2a:0c:7d:4a:57:b1:
ac:b5:c5:ff:5c:e5:ea:2c:d2:3e:7e:ff:fe:08:e6:
79:77:c0:37:9a:fb:05:bf:85:91:eb:3e:ef:ef:74:
2b:e9:ae:0b:84:d7:e6:e2:8f:1b:5b:45:7c:36:4c:
1d:14:60:92:31:29:8a:e2:c5:3c:2f:c4:ab:73:0e:
ce:c5:a1:8a:6b:3c:43:08:7e:d7:08:12:5e:6d:e6:
7a:96:a0:07:6c:e6:18:f7:1a:ee:4d:bd:3f:7d:53:
54:bc:0f:cc:15:e6:f4:25:f5:d5:91:43:02:01:7b:
2e:0b:e1:fc:e7:38:f4:5b:de:09:f7:43:65:60:5b:
a9:3d:6d:80:f4:da:95:d7:12:df:eb:b9:f0:5e:98:
72:5e:79:99:11:75:4f:0d:6f:79:1b:a5:10:0c:5b:
7a:ff:ad:aa:7b:2e:f5:2b:64:b9:d0:07:3a:2d:80:
d1:03:44:7e:9c:fa:be:56:19:98:e8:6c:21:d6:a5:
14:8a:a8:b4:08:9b:f2:6e:1b:bd:68:79:d0:69:8e:
0b:07:3d:92:08:34:aa:c2:e7:5c:d6:35:1d:db:e5:
d2:66:48:1a:49:f4:94:36:2d:cc:2f:63:78:d1:90:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:84:80:90:D7:F2:15:BD:B7:86:3D:22:0B:0A:BE:C4:5F:52:3A:37
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/b4SAkNfyFb23hj0iCwq-xF9SOjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:99:65:8c:12:d4:24:57:b4:99:6b:b6:35:cb:8c:69:63:95:
17:60:c4:7c:90:19:8e:5e:bf:0d:db:e6:c5:44:1c:a6:b3:66:
c3:9d:1f:d4:b4:2c:3f:7d:22:4f:08:04:a8:40:20:b9:a7:d9:
db:da:d6:1a:81:a7:bb:8e:b9:71:ae:da:5f:d3:5c:4b:a3:3e:
48:68:f9:a2:a9:a4:8f:29:d4:89:a8:0f:ae:ec:89:ff:b4:35:
04:28:0f:fb:f6:19:b0:a1:ce:af:3a:f1:74:53:26:4c:3a:e8:
52:fc:72:41:19:d2:c5:b9:81:58:a0:a2:44:7c:d6:99:65:e7:
2f:f6:fc:71:79:19:df:87:42:bb:59:60:4f:ca:46:d0:7c:0a:
54:5d:08:48:e1:51:e8:8c:e0:af:77:34:7e:c5:5b:ea:ca:b3:
0a:08:f0:2f:46:43:bb:67:5d:2a:74:41:92:2b:b3:16:e6:34:
0a:83:06:b5:5f:c7:89:26:e2:2e:79:0b:9f:f2:44:60:56:b9:
c9:be:2c:c9:3c:fd:04:95:ee:32:f4:b0:42:e3:64:15:92:d9:
3d:ad:4e:33:05:8d:58:bf:ac:b2:86:0d:56:17:da:b8:58:33:
fe:84:92:35:ef:84:d6:75:c2:19:f2:9e:dd:2d:9d:55:9e:80:
61:41:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:59:34 2025 by rpki-client