Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/klku6i6_eyBdmHH5tddTJ3p3qac.roa
File: klku6i6_eyBdmHH5tddTJ3p3qac.roa (raw, json)
Hash identifier: QZy+TubIEIM8NGb0FlfO6MJKTPmoRI2NCV56XNdF41Y=
Subject key identifier: 92:59:2E:EA:2E:BF:7B:20:5D:98:71:F9:B5:D7:53:27:7A:77:A9:A7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4E7F536150F7F4E46ADA7DAB81B2B1B5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/klku6i6_eyBdmHH5tddTJ3p3qac.roa
Signing time: Fri 20 Oct 2023 19:10:49 +0000
ROA not before: Fri 20 Oct 2023 19:10:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:4e79:729f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4e:7f:53:61:50:f7:f4:e4:6a:da:7d:ab:81:b2:b1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 20 19:10:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92592eea2ebf7b205d9871f9b5d753277a77a9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:4e:f0:03:d0:3d:39:5c:69:f9:24:af:1a:
8f:36:81:42:ce:08:60:ee:5e:57:25:54:15:e4:6d:
95:0d:d0:00:f3:ef:70:dc:14:9f:63:8c:e4:28:1f:
ba:d3:83:73:67:ac:20:18:a3:1b:20:39:eb:ac:77:
bf:00:6e:b8:31:21:92:1e:69:e3:aa:f4:5d:ba:c5:
27:1a:bd:47:d6:6e:f3:ac:6b:14:0c:c5:38:6f:c2:
82:fe:79:b0:36:d9:e6:bb:6a:6a:e1:04:d7:9e:b2:
94:fe:57:f8:ed:27:0c:e7:04:57:d0:e3:d1:26:e7:
06:3a:0b:e0:d4:32:b0:c1:59:00:a3:e2:39:e5:fb:
e3:02:02:00:3d:1c:ad:22:6b:6e:df:44:ab:ed:69:
2a:f5:a4:6c:56:ba:af:02:10:64:f2:58:68:bd:2f:
37:5f:59:3f:92:f8:1e:56:60:2d:b0:f6:6f:2f:5e:
53:db:d8:b0:32:57:c5:d5:3b:2b:7e:74:ba:68:bf:
4a:d7:0d:f4:b9:5f:83:10:b7:d2:5e:9a:9f:57:7f:
3f:df:dd:c9:6e:eb:a3:2e:c4:70:b2:01:ce:30:87:
48:33:85:63:40:41:9e:a7:b4:a0:7d:fb:a1:79:e2:
57:77:77:1a:de:aa:56:19:e5:67:cf:c1:56:e3:53:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:59:2E:EA:2E:BF:7B:20:5D:98:71:F9:B5:D7:53:27:7A:77:A9:A7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/klku6i6_eyBdmHH5tddTJ3p3qac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:b8:48:5a:11:3b:f5:03:00:90:0f:04:e0:15:16:30:e6:80:
e4:00:4b:10:b8:d9:13:cb:96:f0:1b:ac:7d:2e:65:80:7c:c7:
45:6a:40:6a:9f:a5:d6:0f:80:ac:66:57:b6:c8:96:d4:c6:6d:
71:4c:fe:57:bd:52:94:49:bf:c8:9b:0b:f8:a7:89:88:09:10:
5b:65:17:f1:97:ed:58:67:ea:5e:54:42:77:5e:39:22:e5:5b:
f7:64:dc:50:88:a7:e6:fa:58:14:42:9f:f8:2f:3b:35:09:24:
39:06:8b:ef:2f:d4:b2:f3:dd:8d:4b:c9:f9:d1:24:5d:06:4d:
97:a4:ad:99:4a:b5:88:7a:60:1f:9a:a7:56:2c:8a:08:5b:6c:
22:de:db:b2:9f:ee:9f:e9:cc:ac:33:47:e6:3f:da:ce:5a:fb:
ad:f2:11:3c:9f:f1:cb:6a:d5:0f:e5:1e:ec:12:69:1b:00:6d:
5e:61:14:05:60:c6:b8:62:3e:6f:a0:b9:9e:41:7d:c6:63:8a:
d1:ef:c7:db:fe:6c:02:da:93:a6:69:32:c9:02:c4:27:7d:da:
36:54:a0:d8:67:a9:a2:29:59:bd:d4:8d:6e:5d:51:76:4e:cb:
8f:6d:a4:72:94:44:4c:54:4f:80:25:8a:a7:93:d1:e6:e7:68:
5a:28:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:55:01 2025 by rpki-client