Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iSEdO8HECERYlCuiTqd5BOO1so4.roa
File: iSEdO8HECERYlCuiTqd5BOO1so4.roa (raw, json)
Hash identifier: jPCnDM2D9zNHIzqWfyOl7YQZgmCvvJ3gglsNkJp88BE=
Subject key identifier: 89:21:1D:3B:C1:C4:08:44:58:94:2B:A2:4E:A7:79:04:E3:B5:B2:8E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C66BE23D7621E0846AE5BDA2A189FE304
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iSEdO8HECERYlCuiTqd5BOO1so4.roa
Signing time: Thu 14 Dec 2023 05:13:06 +0000
ROA not before: Thu 14 Dec 2023 05:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:66:be:23:d7:62:1e:08:46:ae:5b:da:2a:18:9f:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 05:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89211d3bc1c4084458942ba24ea77904e3b5b28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:e4:a4:71:f5:f8:83:78:fd:2a:1b:38:53:
f3:4a:c3:be:5a:c1:62:69:09:5f:f3:63:28:ad:f8:
3a:a8:44:6a:43:d5:a0:91:6d:4c:5c:d1:e3:67:41:
9c:0f:9b:32:ce:20:d9:a1:23:77:d4:a3:10:44:ca:
a3:75:79:2d:1a:86:85:b5:79:33:03:63:72:a2:4e:
6b:54:df:42:1a:71:69:ba:9e:3c:44:04:a0:da:0a:
a6:24:2f:74:46:ca:64:fa:eb:9a:c3:49:f1:e6:76:
27:a5:d0:51:26:50:35:3d:d3:14:d7:32:77:3f:ca:
d0:c6:ef:40:5d:b1:0c:35:1e:77:2e:45:65:fb:1e:
15:11:63:af:61:b1:2e:00:de:e4:8e:c1:d4:d5:3a:
d3:0d:e3:a5:86:0c:b6:c6:bb:ec:9c:f9:f3:bb:4b:
13:f0:82:29:cd:fa:3d:10:89:9c:b8:99:e8:91:da:
77:35:58:e3:f2:3a:df:14:f3:04:dc:10:d2:07:97:
3f:42:01:80:90:16:40:9f:65:56:b8:7d:d5:a0:83:
d7:12:ce:bd:4a:5d:03:d9:ac:8f:82:fb:7c:00:de:
35:09:57:03:3c:a7:45:9c:90:f5:be:d8:6b:f3:e4:
3e:e9:7c:c2:90:c1:ce:de:07:29:1c:8c:83:86:ab:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:1D:3B:C1:C4:08:44:58:94:2B:A2:4E:A7:79:04:E3:B5:B2:8E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/iSEdO8HECERYlCuiTqd5BOO1so4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:80:1f:46:c2:1d:12:f6:86:ae:b5:b3:7b:8b:5e:24:2c:fe:
62:eb:07:80:3d:52:56:2a:b6:92:4a:35:ef:50:5c:00:d8:3a:
9f:fd:5f:3c:65:5b:f9:1e:7a:33:69:33:92:1e:44:8c:92:c9:
45:4e:c8:2f:4b:0c:22:2d:3e:67:8e:d7:8c:62:eb:0e:2e:b2:
c4:02:50:1c:db:de:39:94:0f:68:12:5b:2c:78:7c:44:77:4a:
74:5c:a9:23:77:65:09:48:00:6e:2e:e9:82:db:78:67:2c:bf:
6d:52:2c:3e:50:82:06:b7:8f:0d:8f:59:3a:71:48:3e:48:f3:
0b:1e:14:22:82:17:ce:e9:7e:d7:34:25:72:e9:cf:60:f3:4d:
30:35:57:2d:22:8b:fb:25:6d:fd:70:ce:a6:2e:9f:a4:f0:00:
4f:f4:0c:3f:16:64:a9:fa:9e:7e:83:e2:a3:d5:8b:b1:9b:74:
0e:67:9f:bc:cc:8c:98:3d:a6:8e:5a:14:58:e6:71:e1:40:5b:
ff:ed:32:39:f8:d8:cc:ee:ee:0d:c3:45:ae:ec:cc:16:e6:de:
84:6a:25:5c:98:07:15:58:1e:1c:c8:28:c3:42:47:89:f6:56:
77:59:3e:96:de:fc:90:78:67:7b:1c:df:4c:1d:37:4d:c5:8d:
2a:07:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:03:58 2025 by rpki-client