Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/08XUqdJr_rePmJy7YzKDnE_wRS0.roa
File: 08XUqdJr_rePmJy7YzKDnE_wRS0.roa (raw, json)
Hash identifier: VtnvV0AyxV351g5TEjlQMLEk5kTUnW+35UuNM2QTWKI=
Subject key identifier: D3:C5:D4:A9:D2:6B:FE:B7:8F:98:9C:BB:63:32:83:9C:4F:F0:45:2D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5A887C08EF644E819CA9DA62E77D787D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/08XUqdJr_rePmJy7YzKDnE_wRS0.roa
Signing time: Mon 23 Oct 2023 03:16:15 +0000
ROA not before: Mon 23 Oct 2023 03:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5a:88:7c:08:ef:64:4e:81:9c:a9:da:62:e7:7d:78:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 03:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3c5d4a9d26bfeb78f989cbb6332839c4ff0452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:fa:17:a3:37:4b:e1:8b:20:6e:f8:e6:01:
60:1d:ef:c7:e5:a0:3f:98:16:bf:57:c7:24:6f:58:
22:3c:8e:ab:6f:d0:71:06:a1:b1:ab:f3:41:ce:5d:
7b:cb:71:60:dc:0a:65:60:14:c9:1f:0b:31:a4:69:
31:6b:c6:67:7d:f7:fa:fa:47:e2:9a:7a:fb:c8:04:
35:fb:7c:63:14:14:93:21:b5:c3:84:51:36:80:a2:
27:ac:cb:15:23:53:2b:c9:a8:bc:30:6d:81:27:b4:
48:da:64:82:06:bd:0c:11:07:b7:fb:16:99:c2:3b:
e1:97:9c:97:01:dc:ea:c3:1a:04:08:30:b4:5d:b5:
08:02:66:28:f1:1c:d8:f1:18:e3:ee:72:6f:c5:3b:
42:81:fe:2e:6a:50:0a:30:e4:56:4e:83:95:50:5f:
82:57:f0:fb:b1:ef:c1:fb:b5:2c:56:da:fe:9e:29:
92:ff:27:7a:fa:40:4c:b5:df:7f:43:7a:79:cd:cb:
41:01:a0:89:e0:6f:a8:71:5f:dc:35:db:3b:f9:6c:
8a:b6:f8:d6:cb:b8:94:13:a8:ef:85:38:0c:2e:d0:
d4:60:e0:76:b9:8c:25:08:6e:8b:ed:2b:65:7b:f0:
e1:03:8c:18:d6:dd:19:1f:69:20:fe:a9:16:a1:c2:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:D4:A9:D2:6B:FE:B7:8F:98:9C:BB:63:32:83:9C:4F:F0:45:2D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/08XUqdJr_rePmJy7YzKDnE_wRS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:1f:99:9e:1f:79:ba:67:60:49:33:b4:cd:61:56:a1:f8:c1:
41:01:c1:d9:92:6c:64:79:90:5a:d5:36:c8:95:da:c8:3d:38:
77:06:11:b0:3d:ba:b7:02:b7:2e:bf:78:d8:32:0d:17:c1:61:
4e:d0:24:98:6c:a1:b5:fe:e5:55:79:1a:19:17:55:84:a3:74:
ad:e1:51:c6:12:18:85:99:27:19:73:c8:0b:bf:34:13:00:41:
cb:c2:74:18:08:b7:c0:cf:5a:92:12:ea:b2:78:e4:44:b2:c2:
d2:55:7d:f2:d3:c9:07:76:f1:2b:66:a0:79:75:36:46:e8:14:
1d:09:db:e9:18:93:e9:19:39:6f:af:ec:f5:c6:f0:47:e5:a5:
80:5e:73:7d:dd:d0:27:6d:83:d4:f9:6a:f4:3a:d8:fb:29:32:
24:58:f5:89:d4:7d:93:58:18:5f:08:c0:55:1e:47:12:f1:22:
7a:a3:1e:d6:38:c5:df:16:1f:f3:c8:f8:2d:fb:af:e2:d5:35:
cf:0a:16:6d:30:07:c2:70:52:60:12:0e:8e:ef:be:0b:c5:76:
96:30:71:5d:eb:a2:9f:e3:21:5c:b1:d4:1e:6c:5a:ae:ad:4f:
10:10:48:a6:2a:aa:28:f0:74:01:1b:f0:e8:a6:d5:3f:bc:46:
c7:60:92:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:06 2025 by rpki-client