Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rpfCfYBjDHRTffxBfW6dAkwcsws.roa
File: rpfCfYBjDHRTffxBfW6dAkwcsws.roa (raw, json)
Hash identifier: A8GYoXb7FZMcbCugOr1L2wHVNB6XgWceFZHqQ5kdP4Q=
Subject key identifier: AE:97:C2:7D:80:63:0C:74:53:7D:FC:41:7D:6E:9D:02:4C:1C:B3:0B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5A4C0FCA69B24EF0CD82F406E7B4F309
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rpfCfYBjDHRTffxBfW6dAkwcsws.roa
Signing time: Mon 23 Oct 2023 02:10:16 +0000
ROA not before: Mon 23 Oct 2023 02:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5a:4c:0f:ca:69:b2:4e:f0:cd:82:f4:06:e7:b4:f3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 02:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae97c27d80630c74537dfc417d6e9d024c1cb30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:f5:de:23:31:45:98:94:8d:5a:00:97:51:
df:e1:22:38:e4:aa:b9:87:f7:cb:97:99:73:35:99:
e8:09:45:8e:9f:e8:52:5e:e9:4b:d3:46:85:c4:b5:
fa:20:99:8b:dc:67:91:3c:47:7b:38:0c:27:24:fd:
5c:ee:81:aa:23:cc:2e:68:f6:5f:ce:68:16:d9:e1:
97:69:cc:04:ba:f6:10:0c:da:0f:3e:b5:5c:5f:87:
0b:39:d4:98:c5:92:32:45:12:bf:b0:79:5d:46:7f:
25:67:53:5e:f0:29:ac:6d:57:dd:d2:d6:a1:4d:40:
ee:da:1e:70:33:dc:12:75:2d:c1:dd:44:76:e8:c5:
96:64:c4:7a:f2:f1:68:55:11:c8:24:dd:59:b8:9a:
7d:57:fb:6e:0f:70:8b:36:1c:ee:8d:b4:b8:38:3a:
f7:48:f7:7c:68:07:f2:6c:6d:72:7d:15:1c:ab:23:
a8:33:18:78:5e:e2:10:81:b4:9c:1f:2e:55:c7:51:
6f:18:82:ec:2d:4f:24:75:78:ca:e2:04:a7:e1:2b:
7e:73:d6:95:5d:36:25:d0:66:82:0c:d8:36:7f:50:
e6:39:76:a0:a4:5c:06:8f:14:77:8c:2a:5b:d5:d2:
53:d5:6b:11:2d:83:78:12:06:84:ed:72:95:16:b7:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:97:C2:7D:80:63:0C:74:53:7D:FC:41:7D:6E:9D:02:4C:1C:B3:0B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/rpfCfYBjDHRTffxBfW6dAkwcsws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:55:41:4f:f6:53:87:61:4c:cf:56:89:06:8f:b0:79:f3:36:
54:95:2d:02:84:f8:63:92:7b:fe:9e:ab:e2:52:af:13:56:e0:
47:a3:3c:01:68:4c:9f:57:59:32:57:68:2a:72:36:e5:aa:0e:
54:5c:b8:dd:85:13:ec:6f:c1:70:9d:1a:de:89:cf:53:91:9f:
aa:3a:8a:20:8e:44:8b:96:a8:fb:53:f1:59:6b:87:c5:63:ce:
11:47:e3:91:95:5b:3e:c4:6f:c9:06:31:97:b5:6c:c2:5e:25:
e6:4d:c9:dd:da:b2:98:24:2c:f8:9f:b4:a7:7c:df:2f:16:ab:
fe:ff:2e:b1:d9:e5:a0:2c:d6:07:b6:7c:0a:98:00:de:62:c4:
49:30:78:34:31:f2:ad:ee:c9:a3:73:81:67:4e:22:88:25:95:
0f:d6:4d:f5:61:75:67:91:7a:77:c1:fc:1f:e2:f5:19:16:9f:
8e:39:36:83:e7:9d:ca:ce:b0:e1:57:d2:52:e4:6a:e6:ee:f1:
25:51:b6:da:e5:a3:f4:61:17:ac:24:cc:88:d6:ee:10:2b:ac:
ef:9f:d6:5c:a6:e6:0f:3f:ed:80:26:c6:9c:c1:a7:d8:9a:d5:
73:1e:c1:ad:62:cf:e6:11:e6:17:ae:22:29:bc:b1:5b:e6:13:
ce:eb:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:59:02 2025 by rpki-client