Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dH4Ki3R72m1cze4NPk3dwPXbpF8.roa
File: dH4Ki3R72m1cze4NPk3dwPXbpF8.roa (raw, json)
Hash identifier: 0dqcd4tnxSJRhZUfE+RZS5H1btjtXHddlpssfeyYhbI=
Subject key identifier: 74:7E:0A:8B:74:7B:DA:6D:5C:CD:EE:0D:3E:4D:DD:C0:F5:DB:A4:5F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B06320751651F2A12BB8111A6EFFE3303
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dH4Ki3R72m1cze4NPk3dwPXbpF8.roa
Signing time: Fri 06 Oct 2023 18:13:43 +0000
ROA not before: Fri 06 Oct 2023 18:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:06:32:07:51:65:1f:2a:12:bb:81:11:a6:ef:fe:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 18:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=747e0a8b747bda6d5ccdee0d3e4dddc0f5dba45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:c5:f6:49:36:e3:a9:8f:ea:59:0f:0d:0b:
41:12:18:0e:1e:69:90:10:53:70:08:2a:53:58:48:
74:ff:1b:6f:1e:8a:c6:df:3c:f7:17:57:75:ec:c4:
18:e4:72:41:61:49:7e:7e:a6:26:82:e5:03:45:a2:
2e:47:16:4f:96:37:eb:c2:01:0d:66:83:d2:c6:b8:
e1:28:2c:fc:91:9e:8b:b5:ac:89:21:e8:83:ff:20:
80:aa:88:b9:1c:78:f1:32:29:8e:4a:74:ac:70:26:
c1:a4:bb:9f:a3:a1:cb:39:29:a6:9c:3a:e7:bc:99:
5d:07:af:0b:9e:86:e3:88:c3:a7:24:7c:3c:47:23:
6d:43:3c:24:e5:87:0c:e7:a9:dd:7d:1a:88:81:90:
14:e6:c4:58:bd:ba:b9:54:cb:35:e2:f5:64:e8:d7:
4a:32:b5:87:98:70:66:52:ba:b8:46:1d:d2:6a:04:
2f:dc:d4:15:0c:f2:cb:ea:d3:8b:05:63:29:e9:ec:
62:5f:df:da:5f:2f:03:b7:10:78:57:25:a6:c7:04:
62:2e:9d:8d:06:07:3c:a2:67:7d:51:a5:55:f1:fa:
c1:15:10:0f:f5:00:7e:7a:10:83:18:40:3e:c7:9c:
3a:07:c3:88:73:b0:e1:72:1f:c9:ff:58:94:a4:c5:
62:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7E:0A:8B:74:7B:DA:6D:5C:CD:EE:0D:3E:4D:DD:C0:F5:DB:A4:5F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/dH4Ki3R72m1cze4NPk3dwPXbpF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:a6:9e:97:27:ab:d7:c1:07:47:7e:85:51:bc:cc:fb:44:67:
81:97:99:a1:b2:a9:d1:dd:e3:39:f3:55:00:84:a5:cf:6c:bc:
5d:b1:57:f3:00:49:fc:fa:63:ca:a8:ac:f4:9f:1b:a5:70:78:
77:50:d0:d5:64:28:81:19:91:b8:8f:5d:ef:2c:15:5d:cf:02:
04:b1:67:97:4c:28:24:44:58:93:bf:6b:af:f4:dd:38:e0:ba:
0a:c4:8f:88:16:34:38:1d:f6:e0:b4:3f:4e:40:ad:74:0a:9a:
31:ef:1d:ec:3c:03:f1:47:bb:57:5c:13:42:01:d0:1e:85:48:
8f:5d:fb:96:8e:a5:fa:0b:3e:95:81:e6:00:fe:c4:e7:3b:28:
51:ad:27:01:13:49:19:85:76:76:90:1f:1d:31:05:93:ac:69:
4f:62:6e:36:32:6f:63:7e:c6:9a:89:47:54:66:86:91:f6:87:
67:0a:0a:80:b2:22:87:34:7d:2f:3e:64:61:72:ca:73:eb:db:
96:27:a7:6f:d2:8c:57:ce:29:75:90:47:9b:e6:15:f7:a4:ee:
eb:24:64:60:5d:d3:03:0d:e6:1e:d1:48:f4:09:dd:af:79:9b:
20:6f:53:59:36:e6:aa:8f:39:bc:a2:a0:4b:d1:72:d2:30:23:
2f:b9:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:30:41 2025 by rpki-client