Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/izkjeHSLwbqKaSD0_IsXTkAhGxw.roa
File: izkjeHSLwbqKaSD0_IsXTkAhGxw.roa (raw, json)
Hash identifier: 73fs1VjtfJP58n73PMbIJ+dEIfs9O82k06Po7Pa9Xjs=
Subject key identifier: 8B:39:23:78:74:8B:C1:BA:8A:69:20:F4:FC:8B:17:4E:40:21:1B:1C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB69649C0A3690148BE8B4822A45BB91F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/izkjeHSLwbqKaSD0_IsXTkAhGxw.roa
Signing time: Thu 21 Sep 2023 07:13:37 +0000
ROA not before: Thu 21 Sep 2023 07:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:96:49:c0:a3:69:01:48:be:8b:48:22:a4:5b:b9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 07:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b392378748bc1ba8a6920f4fc8b174e40211b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:c5:f3:66:47:17:7d:0f:75:b3:8f:af:52:
ac:2b:1a:26:42:53:7c:f2:49:1e:de:ef:ec:b8:83:
41:ea:d2:f1:61:03:52:06:b9:fa:cd:78:0c:3e:1e:
d7:07:93:ca:fb:dc:df:62:65:f8:37:a6:22:38:27:
8f:6f:a3:ca:d1:ff:74:17:1c:6c:22:95:ab:b7:73:
87:08:c7:f0:78:a9:0a:4b:fb:70:d6:92:3e:28:56:
a3:25:ae:af:db:88:fd:94:dd:9f:ab:4c:6f:2a:02:
90:4b:6d:09:b6:8d:66:67:0b:dd:98:cc:92:f1:e2:
bc:96:51:64:6e:f1:2c:d4:a8:95:c0:fc:ca:88:22:
13:33:3d:0c:dd:8e:45:ee:af:65:38:cd:f1:68:dc:
f5:d3:98:45:87:25:36:f7:ba:cd:c8:9f:e2:a2:f0:
29:95:0d:bc:5d:cf:5e:21:a4:17:a7:ed:29:d3:54:
d9:3b:56:aa:b6:3c:4f:38:40:ef:bd:ca:d9:5b:6e:
6e:31:57:a6:24:2e:f8:f1:b5:07:c2:5f:b1:b8:4e:
2b:2a:97:ad:c8:df:2b:ee:93:2f:46:e7:93:a9:59:
75:4b:f6:18:1b:aa:86:6d:e5:df:a8:7c:b7:4d:91:
63:dd:15:52:db:f0:6e:4e:68:9f:e1:30:7c:19:6e:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:39:23:78:74:8B:C1:BA:8A:69:20:F4:FC:8B:17:4E:40:21:1B:1C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/izkjeHSLwbqKaSD0_IsXTkAhGxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:62:f0:42:40:93:26:c0:ee:9a:25:c6:6a:1e:18:f8:b0:7e:
7d:e9:dd:5b:87:80:12:c4:e8:26:dc:e3:c2:7c:35:d1:e5:ca:
85:8c:86:f1:b4:77:b1:d0:e2:ad:e6:43:e8:78:da:fe:e1:47:
60:aa:9b:d5:54:3b:04:c2:14:51:8e:c3:39:43:6c:70:86:e3:
da:b2:46:61:33:44:cb:04:77:9f:e0:22:ea:ea:57:91:55:39:
49:b9:67:c9:15:eb:1c:6f:ae:6b:71:92:be:72:5a:50:d9:b1:
22:0b:6c:3a:33:be:0a:f4:64:64:1c:b2:ec:30:ab:8f:7a:6b:
c8:8f:a8:1a:de:a8:4c:6d:c4:0b:5c:c2:aa:64:eb:4e:3b:aa:
1c:85:75:40:4c:9d:25:88:fb:9a:af:6d:f6:0f:2e:02:63:a4:
69:af:bd:70:6b:2c:39:a6:57:a7:47:5f:de:37:e0:66:a1:28:
9e:79:44:40:37:5b:9e:c4:03:33:92:7b:61:ec:aa:ab:1d:c9:
27:b1:3a:97:ba:c5:19:f0:f5:44:72:cf:8b:3e:8f:c2:8e:cd:
73:f7:ae:8f:23:74:ff:a2:3d:51:27:e0:83:da:ff:7c:cc:37:
2e:0e:3d:be:30:c5:ce:06:b3:f4:65:b6:39:ba:86:17:08:29:
e3:c5:6a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:19:22 2025 by rpki-client