Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iFYN8Eg7_CbjamXcEMRZeLsXEEg.roa
File: iFYN8Eg7_CbjamXcEMRZeLsXEEg.roa (raw, json)
Hash identifier: rcoItlg52TAb3WcQlVX/AKxJNPMwpbvSyYWV9n4UoOQ=
Subject key identifier: 88:56:0D:F0:48:3B:FC:26:E3:6A:65:DC:10:C4:59:78:BB:17:10:48
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0472568A0B2566F2797FC7B8E8733F80
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iFYN8Eg7_CbjamXcEMRZeLsXEEg.roa
Signing time: Fri 06 Oct 2023 10:04:43 +0000
ROA not before: Fri 06 Oct 2023 10:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:472:1d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:72:56:8a:0b:25:66:f2:79:7f:c7:b8:e8:73:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 10:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88560df0483bfc26e36a65dc10c45978bb171048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:b6:d5:78:76:d0:b5:2a:e7:fc:97:40:89:
54:37:6d:4c:65:16:c6:1a:94:1d:3a:c7:ae:7a:87:
97:2d:43:11:e6:c5:d5:b8:24:15:de:34:d5:3a:4a:
f5:3c:4f:89:aa:9c:45:3b:ad:3b:53:09:22:e7:3d:
21:6e:11:9e:e9:6d:e7:a1:67:b1:15:48:1b:45:5e:
2d:3f:10:f1:c0:5d:73:d1:a8:7e:cc:25:1d:8a:55:
35:b8:d0:51:36:cf:2d:e6:b5:6b:5b:d8:da:57:28:
32:0b:3c:3a:e5:bd:db:76:32:df:8a:f6:4c:24:03:
64:9b:d2:f6:42:f3:cd:e5:ef:4a:22:df:66:81:1d:
9d:8f:ab:1c:d1:e1:2c:fa:a9:69:35:9b:92:96:51:
b0:89:23:71:b9:5f:8a:f8:f2:d4:c9:8b:a0:5a:ca:
01:e8:eb:fb:4b:23:09:8f:c3:dc:6c:9a:49:ac:7d:
7d:3e:4d:be:01:d4:d8:8b:cd:06:9c:c6:fc:36:81:
bb:34:a2:4d:9a:f5:d9:9c:d4:c3:4b:70:38:a5:93:
25:bc:3d:77:78:46:98:d5:2c:66:92:bf:8a:79:8f:
d6:4d:31:c2:2b:80:2c:71:5e:1b:80:f0:80:72:55:
27:30:38:88:eb:19:4e:73:f0:6a:2d:40:1a:04:46:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:0D:F0:48:3B:FC:26:E3:6A:65:DC:10:C4:59:78:BB:17:10:48
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iFYN8Eg7_CbjamXcEMRZeLsXEEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:1a:b6:46:35:4a:03:c4:e7:94:f5:b6:35:d6:85:ea:e0:85:
bc:48:4e:a6:88:e6:01:78:d0:98:7a:ef:20:67:15:f3:1c:e9:
7e:03:7e:a7:42:04:86:a8:33:fd:0e:b7:65:4a:4e:73:3a:66:
82:7c:27:97:c8:8e:ad:3f:15:f8:a2:aa:7c:8e:fa:02:d0:0e:
a3:e3:9d:29:fe:e4:9b:c3:bc:dd:ce:51:3e:27:d8:e8:2f:46:
2e:ab:e8:54:06:5a:62:44:f5:22:b7:46:b5:0e:f6:c6:c5:47:
95:4c:2f:01:91:1a:07:41:d9:79:10:c7:52:98:a0:de:ac:60:
67:d5:50:76:ef:9b:7b:76:35:5f:b0:71:8e:7a:bf:17:bd:fa:
93:a2:ae:ba:2c:b7:0d:1b:9d:02:94:34:5c:2a:7d:52:44:ea:
28:de:86:1b:b6:b1:06:53:43:39:08:8a:22:19:42:b6:f9:e8:
0e:eb:0e:48:49:ba:f1:7d:0b:4d:0e:87:d0:8b:96:ad:e9:16:
4d:a5:ca:09:d1:19:63:dd:00:41:f7:2b:4f:96:72:90:19:33:
ba:7d:5f:ec:cc:02:9b:92:14:a8:bc:b6:a0:c3:b5:46:2d:e5:
7c:c6:7b:e0:56:0d:ca:c0:58:7a:57:a2:f8:4c:c1:4e:be:d9:
04:f9:a7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:04:11 2025 by rpki-client