Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kb20slsZf1qN0kdGqiS3akjznsM.roa
File: kb20slsZf1qN0kdGqiS3akjznsM.roa (raw, json)
Hash identifier: 6Kw2Ppk4S6OvoLQPrFfHoDcXrW8o08dlCjCljRlP1zY=
Subject key identifier: 91:BD:B4:B2:5B:19:7F:5A:8D:D2:47:46:AA:24:B7:6A:48:F3:9E:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B98185FAF616F306ED61144E783D6C3EF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kb20slsZf1qN0kdGqiS3akjznsM.roa
Signing time: Sat 04 Nov 2023 02:10:16 +0000
ROA not before: Sat 04 Nov 2023 02:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:98:18:5f:af:61:6f:30:6e:d6:11:44:e7:83:d6:c3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 02:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91bdb4b25b197f5a8dd24746aa24b76a48f39ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:67:90:e4:6d:6b:9c:8a:f5:7b:4e:7a:7f:
e8:63:76:e8:f6:7b:ec:d9:cd:2e:4a:ff:e3:11:25:
ef:97:60:36:c4:ec:24:93:ff:90:56:56:9e:97:e6:
0a:6d:07:7d:8f:09:70:d7:99:0a:34:ed:d8:2a:fc:
bf:13:d2:bb:2e:2a:14:e9:57:34:75:9d:43:d2:d8:
c3:0e:1a:91:cc:f1:1e:9f:5d:6d:87:46:3b:08:a1:
f1:4e:37:15:3b:b1:27:ca:27:ee:03:a8:2a:9d:38:
28:ed:e2:f8:8e:af:a7:cd:34:6e:ac:13:e9:43:3a:
be:fa:91:f2:24:43:63:c5:91:5a:66:cd:a4:61:4f:
2f:64:98:df:97:56:d3:9e:7b:eb:15:fe:6e:5d:c4:
e3:2c:af:46:a2:bc:13:58:a9:63:5a:47:f0:27:54:
d7:de:bc:c2:1f:f5:59:6c:d7:b2:cb:01:31:b2:51:
c6:31:3e:5a:92:93:76:b3:67:7e:51:a7:47:8a:eb:
f2:d4:a7:71:34:a8:67:d6:d0:58:fe:4f:e7:85:76:
e3:5b:b8:98:ec:e5:cd:7c:20:a7:90:27:bb:55:11:
9c:5e:3b:49:e2:c0:92:8f:53:c2:46:08:06:1b:ab:
0c:44:43:6b:72:0a:69:9f:0a:28:97:88:fd:18:ff:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BD:B4:B2:5B:19:7F:5A:8D:D2:47:46:AA:24:B7:6A:48:F3:9E:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kb20slsZf1qN0kdGqiS3akjznsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:34:1f:9e:f4:9f:59:15:ab:02:46:b2:fa:32:7e:f6:93:c5:
1d:7a:85:6f:85:96:e3:3f:d9:8a:dd:0b:cf:89:10:de:d7:db:
1c:07:e4:1f:09:7f:cd:74:08:a2:a8:9c:21:15:da:31:60:66:
2d:d2:67:40:f5:79:c3:45:79:b6:c0:a0:c5:fe:cc:64:c1:58:
e5:05:18:00:3f:24:ca:f3:7c:f6:a3:82:e7:88:53:bb:50:a0:
27:12:2d:46:ac:70:8b:27:87:52:15:a5:cf:2d:7b:84:1e:69:
11:05:63:ec:23:3d:68:b9:88:3d:75:9b:d3:f3:e3:61:b2:95:
00:6c:9b:bd:62:00:50:c3:f0:42:a5:e4:a5:f0:96:b7:22:a2:
f2:af:5b:c1:68:34:52:2b:ad:5b:a8:6b:06:69:e3:63:ae:92:
51:14:04:8c:f7:37:7d:01:45:bb:42:0d:2b:d2:4f:12:e4:f2:
96:9f:d4:15:f9:71:a7:4a:32:81:c7:ba:c5:96:f5:7b:08:c1:
b8:4a:1b:ae:9f:c8:be:71:c4:fb:c2:22:34:26:c7:51:75:70:
b2:24:ac:c7:56:82:d1:d9:3d:09:6f:f2:89:af:c0:96:db:1a:
40:cc:a7:44:5d:16:bf:3a:6d:77:8c:5b:5a:9e:4f:80:f0:e0:
5a:ff:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:17:21 2025 by rpki-client