Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iB8x1KcOx8s-T_HHkqtXp67g704.roa
File: iB8x1KcOx8s-T_HHkqtXp67g704.roa (raw, json)
Hash identifier: 71zbRyR1ad/CaKHMn/KhFwWfQ+jFOW/Ct/RMrlDT0jM=
Subject key identifier: 88:1F:31:D4:A7:0E:C7:CB:3E:4F:F1:C7:92:AB:57:A7:AE:E0:EF:4E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B58958649C044D9F4219D57EB31EAFF9B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iB8x1KcOx8s-T_HHkqtXp67g704.roa
Signing time: Sun 22 Oct 2023 18:11:16 +0000
ROA not before: Sun 22 Oct 2023 18:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:58:95:86:49:c0:44:d9:f4:21:9d:57:eb:31:ea:ff:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 18:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=881f31d4a70ec7cb3e4ff1c792ab57a7aee0ef4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:be:1b:6d:3a:2d:0b:79:73:ca:a7:cd:d1:
47:c3:8d:66:c9:cc:b6:f9:57:c9:72:e9:98:d8:d3:
06:40:ac:41:11:65:b3:11:88:73:98:21:97:5e:32:
eb:4c:d9:b4:2a:fa:7f:02:7a:66:75:21:71:2d:42:
4a:e6:d4:16:17:59:3b:01:7f:95:67:d1:b0:46:5c:
ca:8f:1d:a4:1e:ac:39:db:10:98:d5:b8:a7:1d:f2:
97:19:0b:42:e3:14:52:d5:51:6a:cb:37:4a:2c:60:
5d:90:89:a8:91:94:b9:47:7d:ca:af:51:f7:ff:61:
64:13:3c:d4:f3:ea:e6:d3:b4:1b:7d:cb:07:ee:8b:
d7:05:a4:3a:72:02:79:c2:5e:32:cc:a6:0a:98:42:
ab:f2:2e:ad:5c:2c:d8:ad:d5:54:a3:08:38:8b:db:
cf:dc:c8:cd:78:0c:d6:a6:39:50:86:95:be:a5:19:
29:be:d8:5b:50:48:4d:a3:1d:ec:9f:0a:1b:ae:b9:
d1:fe:c7:c6:a1:f8:52:27:e7:e5:f3:a3:6f:ab:60:
24:13:e6:17:01:47:02:d2:07:fa:43:49:80:b1:4a:
f0:53:e6:62:6a:96:70:21:3c:72:d5:d5:6f:a1:96:
94:43:6b:18:ec:b7:e6:eb:ee:a6:cb:d8:bd:85:40:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:31:D4:A7:0E:C7:CB:3E:4F:F1:C7:92:AB:57:A7:AE:E0:EF:4E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iB8x1KcOx8s-T_HHkqtXp67g704.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:36:d9:87:f9:ae:df:8d:d8:30:18:ed:3f:af:c6:5b:67:f4:
61:15:2f:9f:76:5b:61:4b:4e:e3:b4:35:80:a3:3e:6f:95:d3:
cc:5e:f9:dd:c6:ae:15:5f:1b:27:a6:64:5b:77:f0:22:98:42:
38:21:84:20:01:5b:e9:61:0f:ab:7e:fe:2b:2f:1d:d4:1f:ce:
bc:d5:28:d6:02:7e:29:b9:cf:c0:e6:ef:d0:39:a1:5a:ff:cb:
7a:79:65:86:a4:50:0c:5f:e3:8f:f9:91:e5:59:a9:96:96:31:
2a:f3:8d:26:64:f1:35:c7:77:98:e0:33:cf:e4:d8:09:90:5b:
84:6c:cd:56:1c:bb:52:e8:3a:7b:ef:3c:b5:6e:7c:4e:27:19:
82:f6:78:af:14:e1:08:43:a0:b5:00:eb:9a:54:db:93:33:8c:
f6:3b:33:95:59:a6:41:8e:2d:72:c1:cf:8c:a2:93:fb:67:c5:
59:5f:67:0e:6f:5c:2a:dc:3d:a7:9e:fb:eb:88:c9:99:a9:eb:
39:6a:27:ac:a2:06:88:c9:d6:fe:82:f9:63:47:1a:d6:25:b5:
6d:9a:af:df:6f:a9:c7:71:cd:7a:09:7c:45:09:9e:d7:2d:b9:
30:de:48:1b:75:04:8c:33:b2:e0:75:bd:31:41:8f:9f:50:d2:
77:a0:d1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:00:45 2025 by rpki-client