Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kKnGEv7QRYU32U7d05Mo83t5NCc.roa
File: kKnGEv7QRYU32U7d05Mo83t5NCc.roa (raw, json)
Hash identifier: +JpmJm7oUKcAO1nbDY4XLlJJUo2cXN4ubNj7MBOgFW8=
Subject key identifier: 90:A9:C6:12:FE:D0:45:85:37:D9:4E:DD:D3:93:28:F3:7B:79:34:27
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C12DB3F8B839A19A8B96AF33C297E94CC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kKnGEv7QRYU32U7d05Mo83t5NCc.roa
Signing time: Mon 27 Nov 2023 22:16:47 +0000
ROA not before: Mon 27 Nov 2023 22:16:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:12:db:3f:8b:83:9a:19:a8:b9:6a:f3:3c:29:7e:94:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 22:16:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90a9c612fed0458537d94eddd39328f37b793427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:f4:7c:50:b5:e7:af:6f:05:c8:4e:59:b9:
f2:52:89:96:49:14:9e:43:7a:ce:88:29:34:aa:46:
1b:90:18:0c:58:bf:e7:56:dc:fd:8a:40:9d:ef:3e:
0a:f8:40:42:89:5b:76:6b:7c:e1:38:ee:14:cc:e9:
f5:81:1d:26:57:4c:ac:d1:1d:b7:15:aa:ed:9c:06:
fc:e7:d7:7e:ea:52:ec:bb:ad:d6:77:d2:d9:40:34:
69:cc:f1:65:27:3e:00:87:be:f2:82:c5:89:69:a0:
03:1a:7e:3b:f6:e2:9f:9a:4a:db:7a:20:a0:a7:03:
91:15:61:c0:b7:bf:ba:08:dd:d3:bb:95:fb:06:8e:
49:ad:ea:d1:1a:ca:58:94:9b:12:a7:4f:cd:e6:b6:
54:a7:7b:15:36:16:c3:7d:dd:1b:07:4c:d9:58:27:
91:fb:21:df:8b:43:b9:04:cf:66:05:d2:99:c3:57:
8a:38:3e:9a:68:44:2c:bf:9c:68:70:b1:db:14:84:
16:34:f6:95:74:91:5f:aa:0a:fd:42:4d:71:34:b4:
a6:92:05:0d:d3:c3:45:1b:5e:49:74:17:71:a0:3d:
eb:d8:3c:35:0e:7c:74:a5:a4:e0:d2:3d:5f:7d:dc:
39:4b:ee:86:39:4d:71:bc:27:42:1d:e0:de:93:76:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A9:C6:12:FE:D0:45:85:37:D9:4E:DD:D3:93:28:F3:7B:79:34:27
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kKnGEv7QRYU32U7d05Mo83t5NCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:ac:4e:40:89:5b:aa:31:38:78:7b:72:15:0f:62:1a:b5:3d:
91:88:01:c6:cb:e9:a3:ee:e3:1f:61:42:6b:78:d9:33:d9:4a:
2c:a4:fb:4d:88:d1:56:01:ff:9e:f6:70:5b:47:04:b4:35:75:
9f:d0:db:6d:93:19:7c:a3:fb:79:5b:27:fe:df:6b:23:3b:da:
60:b1:25:78:89:7a:44:80:e5:31:cc:c8:87:97:f3:84:37:ea:
b5:18:66:c3:80:5f:11:32:6d:7c:62:01:e3:f2:bd:bc:2c:5c:
f4:15:2a:53:6b:a8:53:23:4f:c3:88:2e:9c:80:68:ea:39:34:
b7:95:86:f7:6a:6e:40:db:40:9d:28:03:1c:a9:e9:1a:22:e3:
87:a1:f0:13:75:a2:6e:24:d6:a5:88:69:3c:f3:21:92:51:cc:
f8:ab:6d:f3:e9:73:4d:d0:ad:66:7e:0c:3f:f5:57:0a:2b:ff:
1e:4f:0e:0c:2b:aa:9c:21:c0:ba:cb:c3:ac:aa:c4:a3:f7:79:
f0:df:5d:30:7a:3c:99:a6:67:8c:ff:bf:05:d6:3e:4f:77:ec:
e8:df:98:3e:36:13:51:ab:52:d8:7d:55:f0:48:80:0e:37:a3:
53:c8:f8:45:42:86:69:ff:50:dc:4d:ab:04:2d:5e:15:cd:c4:
a9:97:8b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:01:02 2025 by rpki-client