Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bd2Gn5iY2HZ8xSterGajO5nIOc8.roa
File: bd2Gn5iY2HZ8xSterGajO5nIOc8.roa (raw, json)
Hash identifier: tgZORYUMq1dro+nafdW7DM+qJq/kG5fz9rJwmS3sG6c=
Subject key identifier: 6D:DD:86:9F:98:98:D8:76:7C:C5:2B:5E:AC:66:A3:3B:99:C8:39:CF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD2436800B9A97748C6749F4D76F2048B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bd2Gn5iY2HZ8xSterGajO5nIOc8.roa
Signing time: Tue 26 Sep 2023 16:12:27 +0000
ROA not before: Tue 26 Sep 2023 16:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:43:68:00:b9:a9:77:48:c6:74:9f:4d:76:f2:04:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 16:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ddd869f9898d8767cc52b5eac66a33b99c839cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:65:d0:e0:73:ba:64:69:38:5c:5f:97:6a:
f2:ef:2f:fb:94:cd:63:17:39:37:27:0a:8f:f2:4d:
e9:23:ec:65:89:f8:dc:88:e9:90:ff:56:ae:65:53:
42:b9:a6:6c:fa:1c:92:45:f1:cc:0e:33:05:59:e0:
75:af:e2:96:de:10:e0:42:b9:b8:47:c3:ae:51:f2:
a8:76:01:4a:71:ef:e3:83:8d:49:ec:d9:f2:6f:96:
a2:88:9d:4e:9b:27:7d:3d:13:9b:94:2d:07:9a:ad:
96:73:05:7f:62:e0:3f:eb:d1:dc:38:4b:fe:a2:d6:
2f:bf:03:d5:f4:6c:f7:7b:c0:d0:1a:72:f6:18:45:
ed:f2:51:6d:82:bd:fc:95:6d:d2:75:77:07:24:dd:
5c:9c:fc:75:8b:09:8c:fe:59:50:cc:ac:a2:b4:5a:
6a:be:83:4a:fc:0c:27:25:8f:66:21:98:b9:03:8e:
a7:b4:17:d8:97:6a:3b:32:35:27:72:2b:85:f3:7f:
85:4a:9f:6d:66:34:14:a4:34:95:29:c3:1d:8c:fa:
55:a6:5f:75:10:cc:cf:3c:38:f6:74:4d:f6:7b:01:
cc:eb:28:72:a6:9e:66:cb:c5:69:7c:cc:9d:76:ba:
16:65:91:96:82:9f:50:ba:f6:88:6e:ef:db:73:e2:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DD:86:9F:98:98:D8:76:7C:C5:2B:5E:AC:66:A3:3B:99:C8:39:CF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bd2Gn5iY2HZ8xSterGajO5nIOc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:4d:6a:5d:cb:a7:dd:ee:98:1a:33:3c:6d:d3:ff:41:ea:3f:
ed:30:95:3d:d1:91:e6:ec:0c:4f:5b:98:bb:40:8f:7f:c9:59:
e8:a2:e8:75:19:29:2b:1c:9d:ba:5f:61:e2:23:f7:e2:94:5d:
a0:37:63:49:7d:0a:16:f6:24:25:76:1c:ac:95:58:ef:a0:ac:
70:cb:d3:01:b3:5d:3d:85:0a:7a:45:dd:67:89:a0:96:ab:83:
f3:12:66:2b:08:2d:4f:6d:1f:37:00:a8:90:ea:c2:a6:72:1a:
c2:a8:25:a8:eb:e4:2e:2b:3a:36:4a:23:2a:3d:d0:b3:b8:c7:
7f:e0:d9:5a:05:f2:b1:ab:a6:2a:d6:8e:7f:23:24:e2:c3:34:
ef:23:9e:12:72:c1:88:08:72:ad:5b:b0:fc:8e:ec:95:02:0e:
51:11:23:a5:8b:8a:d6:1f:9f:11:50:a9:a5:c0:b4:43:80:df:
94:e6:7a:1f:3b:8f:e6:ed:14:28:f6:54:18:d2:b5:3e:31:02:
59:56:b7:74:54:62:95:83:3a:ac:6c:32:b9:d4:86:09:cf:2b:
d7:5b:92:e7:7e:a9:8d:7c:59:de:71:20:5c:e5:ee:89:67:c6:
63:7b:41:a8:ef:e1:a8:e2:7a:ed:3a:4e:c8:46:76:ae:93:55:
fb:c0:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:49:52 2025 by rpki-client