Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v1Miuw3yGTprFDYqSaDruNCeHmI.roa
File: v1Miuw3yGTprFDYqSaDruNCeHmI.roa (raw, json)
Hash identifier: /wiPM9McXMm1xWEBFtsDIE0dZHhMM0bxQgt6gO6HUls=
Subject key identifier: BF:53:22:BB:0D:F2:19:3A:6B:14:36:2A:49:A0:EB:B8:D0:9E:1E:62
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C06D6F14CFAC6932F5AA0F77CE6F4C8BE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v1Miuw3yGTprFDYqSaDruNCeHmI.roa
Signing time: Sat 25 Nov 2023 14:16:38 +0000
ROA not before: Sat 25 Nov 2023 14:16:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:06:d6:f1:4c:fa:c6:93:2f:5a:a0:f7:7c:e6:f4:c8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 14:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf5322bb0df2193a6b14362a49a0ebb8d09e1e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:df:4e:e6:e8:86:7e:dc:c4:72:64:66:85:69:
ea:9d:8f:35:e1:65:dc:05:c6:1d:fc:be:b5:75:2b:
eb:36:72:ab:48:25:7c:74:01:9e:22:62:6e:80:ea:
3f:71:29:3b:7c:27:b7:78:9f:28:78:ba:95:94:bd:
f9:d0:88:d2:93:00:2e:a6:06:3e:65:6c:50:e0:15:
28:88:d7:61:b8:fe:2b:1c:04:a4:55:a8:aa:c2:f4:
5a:ee:6a:9a:08:53:9a:1b:ea:35:c5:3e:cc:5c:17:
73:f3:95:d8:45:a0:63:b2:32:aa:05:5c:52:bd:9b:
4b:ed:f7:02:4a:f4:58:a1:d0:49:4c:95:3c:17:3b:
2f:78:47:c1:9e:b7:55:e5:85:e4:8a:ad:8d:8d:7e:
9d:ac:7b:95:4f:f4:f3:a2:6e:e7:ff:8a:dd:66:a7:
9c:c5:d6:7f:7e:82:72:15:70:b8:6f:d0:66:fa:2d:
ea:c7:25:83:8d:e6:b1:19:d1:c9:d1:4c:6c:b8:a4:
24:e0:b6:9b:d2:1d:72:70:13:c8:f7:1c:d8:db:71:
d7:e2:7c:69:8b:99:98:d8:ee:79:70:48:e0:58:84:
34:a5:1f:4f:e1:a1:6e:d6:03:d8:5f:24:3b:cc:68:
b5:e6:ab:48:4e:0b:73:28:10:0c:6d:31:b4:2a:86:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:53:22:BB:0D:F2:19:3A:6B:14:36:2A:49:A0:EB:B8:D0:9E:1E:62
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/v1Miuw3yGTprFDYqSaDruNCeHmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:f0:8c:78:d0:2d:10:d5:f5:6a:10:69:59:e4:6e:32:d7:85:
a7:e0:9a:a8:a0:31:44:dd:59:3b:0e:e3:91:b7:55:f2:a3:8c:
25:86:ac:8e:d4:18:3a:34:6d:16:b4:93:a3:4a:fd:be:6a:e7:
07:92:e8:18:b1:50:5b:94:5e:71:29:9f:b3:8b:72:44:28:ec:
7e:20:d6:76:85:98:ff:fa:fd:f9:5d:86:78:3a:28:b7:f5:61:
16:b4:1e:a1:cf:30:27:31:d3:29:3b:b1:42:be:88:c5:5a:5a:
f3:85:8b:26:2c:d5:9c:22:85:50:60:59:ca:94:db:f3:1e:de:
dc:bc:59:10:08:ad:d5:62:88:4a:46:0f:e1:2e:07:8d:77:dd:
44:5f:95:47:d1:f0:9f:c2:51:b5:29:eb:cd:56:56:68:f5:d2:
15:b6:bb:04:a4:9e:7b:1c:38:4a:32:10:d1:03:59:89:4e:cc:
0d:b0:81:62:c9:82:28:21:1d:cf:c7:0f:2e:6e:93:61:f2:dc:
ef:0d:c4:26:53:5c:05:fa:7c:a4:dc:00:8b:5c:ac:ef:79:db:
58:24:29:35:63:3b:5c:d6:f3:51:17:53:9b:6b:b0:8b:ac:d2:
f9:f5:48:27:a5:67:cf:0b:69:45:76:89:a0:70:83:b8:5a:ee:
7c:b1:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:13:25 2025 by rpki-client