Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0P2ksTHDBEaCCy6-0LI7wJ5Rw3A.roa
File: 0P2ksTHDBEaCCy6-0LI7wJ5Rw3A.roa (raw, json)
Hash identifier: 8SMSdUC4MG2n6br/XFZwHXo8XuUWN5tx+B00eWSVVwo=
Subject key identifier: D0:FD:A4:B1:31:C3:04:46:82:0B:2E:BE:D0:B2:3B:C0:9E:51:C3:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE36E6EBFF44AD44A05A14600A3A4C350
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0P2ksTHDBEaCCy6-0LI7wJ5Rw3A.roa
Signing time: Sat 30 Sep 2023 00:12:59 +0000
ROA not before: Sat 30 Sep 2023 00:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e3:6e:6e:bf:f4:4a:d4:4a:05:a1:46:00:a3:a4:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 00:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0fda4b131c30446820b2ebed0b23bc09e51c370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:43:86:93:17:4c:59:13:85:b6:e8:54:4b:
eb:80:56:e0:02:93:14:00:00:52:5b:35:98:22:32:
4d:71:dc:7e:be:83:f8:9d:9c:4e:04:91:0c:d5:5e:
b9:7a:97:50:d0:d4:7d:62:cf:bf:66:93:09:3b:85:
e5:b0:b6:bf:50:39:3b:a7:c0:a6:1a:40:d9:0b:80:
18:43:6e:df:3d:da:71:72:d1:4b:36:a6:d5:2b:26:
9f:90:ad:ca:0f:89:ac:c6:58:bf:2b:7d:6b:f0:61:
b0:df:13:b9:2d:ed:18:f4:ed:f4:39:01:d6:53:55:
40:68:bf:88:d8:b1:b2:9a:75:8c:f5:09:26:1f:a5:
e7:35:75:4d:e3:d0:4e:e3:b4:28:e0:38:fa:da:03:
f8:0a:c9:68:9b:16:e2:35:03:cb:35:76:e4:99:7e:
f2:50:d2:8a:5c:a1:d7:54:b1:13:b3:75:9e:8e:eb:
55:15:5c:be:34:1a:65:30:43:07:34:8d:d2:1f:d8:
bc:aa:b6:5e:83:1f:50:f7:74:a4:1a:7b:72:ec:d1:
86:3b:30:80:56:f4:86:22:0e:bc:e3:07:0c:c5:1f:
16:9f:bc:03:88:d1:31:2b:94:7a:74:01:f0:e5:1b:
6b:6f:ec:68:71:db:8c:a7:a1:4e:20:0a:4a:c3:d2:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FD:A4:B1:31:C3:04:46:82:0B:2E:BE:D0:B2:3B:C0:9E:51:C3:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0P2ksTHDBEaCCy6-0LI7wJ5Rw3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:1a:0e:22:7c:94:e0:61:9c:c3:31:0c:9e:01:99:52:12:7b:
dd:ec:b7:54:ef:66:87:d0:ca:5d:05:0a:e1:da:81:5d:c1:23:
b1:a0:74:66:02:d4:de:98:9d:81:30:8a:ed:36:0f:7a:1a:7e:
ff:a8:88:d2:27:cf:7a:17:bf:40:b7:30:c3:c5:64:7a:ce:a0:
7f:3b:b0:b3:6d:90:ec:8b:4a:2e:fc:96:c7:51:ef:b6:63:6e:
8d:d4:f7:6f:55:5a:27:84:18:2a:d6:6f:47:f1:c0:13:0e:28:
d9:f5:5b:3d:d5:63:55:7a:2c:1f:5e:9f:c4:a7:4f:2c:1b:c6:
ad:bf:7a:7b:03:e4:a7:d8:07:7a:b0:66:cc:ad:6c:84:62:93:
a0:1b:31:e7:57:b0:37:c9:09:13:7a:bd:89:ea:a1:18:2c:07:
41:9d:65:c4:70:1a:a7:d8:2b:7f:ae:49:a8:8c:3d:fc:08:b4:
5b:9c:ee:86:06:86:c4:8b:0d:31:04:a1:0b:b3:38:f3:c3:bf:
9e:82:12:62:e4:cf:00:83:66:96:a1:6d:07:ca:e0:ac:15:a0:
f0:63:70:8e:41:ed:09:75:5f:8f:35:1c:98:81:27:b3:c5:f3:
25:bc:55:d5:ea:1f:0b:05:b7:1d:a8:2d:43:7d:5c:fa:78:8f:
89:df:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:37 2025 by rpki-client