Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gRWb3ovB0bhUQtxNdMS9evcmRWw.roa
File: gRWb3ovB0bhUQtxNdMS9evcmRWw.roa (raw, json)
Hash identifier: 85R3oKQEXHJDobme8OiIAHViJg2JI66l2xPvSfbgMGc=
Subject key identifier: 81:15:9B:DE:8B:C1:D1:B8:54:42:DC:4D:74:C4:BD:7A:F7:26:45:6C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4F62C9ADFE101477C219E960FAD7B11D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gRWb3ovB0bhUQtxNdMS9evcmRWw.roa
Signing time: Fri 20 Oct 2023 23:19:15 +0000
ROA not before: Fri 20 Oct 2023 23:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4f:62:c9:ad:fe:10:14:77:c2:19:e9:60:fa:d7:b1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 23:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81159bde8bc1d1b85442dc4d74c4bd7af726456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:c7:1f:da:0a:bc:37:15:3e:54:ec:66:0e:
17:81:5b:cd:92:3f:51:26:3e:50:bb:e1:72:ca:9c:
33:b4:97:43:c3:9e:50:5a:cf:d7:86:a8:c1:fb:7f:
80:a4:74:32:1f:74:36:5c:12:63:6d:89:06:c4:37:
1b:97:cb:dd:88:4b:9b:75:dc:91:d9:d6:29:30:b9:
2c:fa:c4:91:16:8a:ba:5f:6e:4d:51:9b:fe:d5:ff:
1a:cb:c8:14:05:7d:b7:e8:8d:26:dc:5c:99:f8:59:
55:5d:2d:31:46:aa:53:1d:e4:62:15:ad:90:a9:4a:
3c:25:d7:3a:72:e8:8c:85:39:e9:4c:d9:b2:09:86:
bb:79:fe:8f:98:bc:e2:fc:c8:91:50:59:93:bf:76:
b9:1d:7b:b7:0b:fb:74:db:54:28:91:16:49:25:10:
95:1e:9e:89:74:97:7d:40:b4:d2:b1:05:67:14:87:
f8:aa:8f:5f:01:97:86:6a:3a:a9:05:84:be:8b:ee:
d0:ff:bc:54:4d:1a:5a:5e:f7:3e:dd:78:76:b5:1f:
bf:15:3e:b5:73:4a:29:70:1c:52:08:8b:e1:03:8e:
ad:2f:5a:e6:cf:a6:9a:6b:e4:e4:2d:f6:e3:76:90:
75:88:b6:2c:c3:60:53:58:80:31:6e:0f:87:be:ba:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:15:9B:DE:8B:C1:D1:B8:54:42:DC:4D:74:C4:BD:7A:F7:26:45:6C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gRWb3ovB0bhUQtxNdMS9evcmRWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:02:27:eb:c3:16:00:b3:bc:92:a7:2b:06:f1:ab:70:73:c9:
d0:8e:1f:68:ae:54:7e:ef:7c:ba:3b:35:53:27:24:5e:e2:0c:
d5:6b:fe:a4:99:c0:4f:e8:6d:fe:3f:cd:56:0d:a6:be:a6:dd:
53:2f:6b:0d:60:78:a1:61:e3:6a:eb:a9:b0:0b:a0:44:97:85:
63:d2:fe:1a:d9:0c:14:1d:a0:60:a5:69:fa:ff:50:13:57:22:
93:a4:0c:20:8f:e0:9b:6e:54:24:b4:75:77:ae:95:4a:88:3a:
f2:da:a7:04:17:e0:d6:8b:cf:c8:a6:fd:62:4c:86:93:67:e1:
2b:b3:f1:b0:3e:27:f3:c3:4d:28:d4:e6:e6:c5:86:46:e1:b5:
bd:33:ce:9f:d4:6c:64:d9:ba:b1:4e:37:6a:14:c5:d0:41:28:
2d:ae:bb:8c:d3:f0:4c:74:49:4a:2a:26:df:98:bb:48:90:3a:
45:d9:17:29:bf:ff:ec:2a:04:c5:e3:f6:58:f2:7f:3f:6f:d5:
08:49:1a:b3:3b:12:5b:23:36:e0:47:26:4d:94:9c:b8:b0:49:
eb:1b:15:39:f7:c4:16:dc:98:da:66:1f:21:16:f7:f8:19:95:
28:bf:b4:39:6c:f1:36:1e:d8:67:ed:1f:c1:0c:e3:58:c0:48:
d6:7f:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:50:03 2025 by rpki-client