Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iCDpcXEtZlyzc1f9UPveBIL00UU.roa
File: iCDpcXEtZlyzc1f9UPveBIL00UU.roa (raw, json)
Hash identifier: B+iQwoL+o6b1u1FrOiQsbiLMnZMq/uBoAwBVqzEAS/c=
Subject key identifier: 88:20:E9:71:71:2D:66:5C:B3:73:57:FD:50:FB:DE:04:82:F4:D1:45
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2B876656562F17F6C4020B31BFEE5140
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iCDpcXEtZlyzc1f9UPveBIL00UU.roa
Signing time: Sat 14 Oct 2023 00:12:55 +0000
ROA not before: Sat 14 Oct 2023 00:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2b:87:66:56:56:2f:17:f6:c4:02:0b:31:bf:ee:51:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 00:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8820e971712d665cb37357fd50fbde0482f4d145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:3b:a6:69:53:29:f9:23:18:d1:4a:c0:9a:
4a:c5:65:bf:4c:83:0d:0e:dd:a7:e0:28:1d:5c:c6:
f7:48:68:2a:e6:2e:c6:eb:7a:3f:23:16:76:4f:f5:
9e:74:b3:50:4b:6f:90:75:ce:f9:9d:5c:28:3f:13:
43:e0:8b:ba:3a:69:5c:f5:a7:64:0d:bf:39:7a:25:
37:d3:cc:79:65:e3:57:62:44:04:63:01:1f:1a:09:
b1:ca:fe:2f:23:42:8b:98:3c:d6:e9:da:16:a5:2c:
65:7f:7b:5e:65:03:61:02:5b:af:4f:69:58:4b:44:
54:20:9a:18:66:a7:6c:b3:93:c2:4b:62:8f:57:a4:
d2:cc:7b:46:b2:59:25:35:2a:c3:45:c6:ef:5c:ef:
7b:6b:aa:fd:a0:f8:4f:37:98:e3:a7:35:4c:ac:32:
3c:e2:d3:66:55:28:a7:de:43:7f:ff:97:14:92:4b:
e0:37:a2:10:3e:86:e0:78:f5:55:63:8c:f8:b0:d6:
da:17:d2:9d:9f:a5:9e:eb:ba:5b:19:98:3a:01:c4:
04:a5:43:51:dd:4a:4f:b7:f2:a2:56:a5:86:82:3d:
5a:41:ed:0c:03:e7:ba:b9:ee:07:d4:28:55:61:66:
c8:5d:1f:b9:ce:a2:ae:14:ab:5f:90:c4:30:1f:fa:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:E9:71:71:2D:66:5C:B3:73:57:FD:50:FB:DE:04:82:F4:D1:45
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iCDpcXEtZlyzc1f9UPveBIL00UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:c1:52:f0:72:77:0c:17:61:b2:f1:76:a3:4c:c2:5a:3b:8d:
8a:5f:86:83:9a:53:ba:de:e1:1a:03:24:38:a7:f9:85:4d:3f:
33:25:4e:98:d0:a4:77:80:3f:87:50:74:21:b8:90:77:dd:79:
1c:f5:52:13:a7:0a:8a:55:db:85:f4:5d:68:71:a3:25:b3:b4:
2c:67:4d:6c:76:ff:79:48:39:7e:aa:e2:d8:8b:2f:6a:71:1b:
52:ca:51:16:a5:c1:0e:75:eb:a2:ce:5a:f4:33:d3:d6:1e:7f:
4a:5e:dc:cb:21:f3:6d:eb:97:80:90:91:dc:66:67:a4:e4:21:
a8:21:81:bf:ee:f9:52:c5:7a:5a:6c:08:66:36:7b:83:f8:a9:
19:2f:33:19:ff:57:da:d7:19:e0:24:88:0c:8b:f5:bb:4b:41:
48:61:82:5c:e6:06:40:67:4c:ab:55:73:0f:7c:9d:38:91:c5:
f5:14:34:4a:f4:e0:93:eb:85:a8:33:73:22:42:63:44:35:ab:
45:57:1c:e4:9f:b9:68:97:51:f3:90:53:ae:87:2e:29:26:df:
a2:1e:81:8b:76:dd:52:87:1c:86:21:e2:19:7b:32:f8:99:c9:
d6:d9:b9:4a:88:a5:a0:0b:67:63:b6:2c:27:d2:c9:67:ae:e1:
40:9a:f7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:41 2025 by rpki-client