Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0cgzTkNRwADV_4j-hB5cHDsBorA.roa
File: 0cgzTkNRwADV_4j-hB5cHDsBorA.roa (raw, json)
Hash identifier: yaKS/3uPdJLo2HGoyL3GacR4z3BtNDiMm9wVtcnnQTA=
Subject key identifier: D1:C8:33:4E:43:51:C0:00:D5:FF:88:FE:84:1E:5C:1C:3B:01:A2:B0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B01446E9DDFEA4B15C0CC90BCED1639BD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0cgzTkNRwADV_4j-hB5cHDsBorA.roa
Signing time: Thu 05 Oct 2023 19:15:43 +0000
ROA not before: Thu 05 Oct 2023 19:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:44:6e:9d:df:ea:4b:15:c0:cc:90:bc:ed:16:39:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 5 19:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1c8334e4351c000d5ff88fe841e5c1c3b01a2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:0e:96:a9:bb:19:fd:76:4c:1e:f4:46:0b:
1e:30:34:8f:4b:ef:0d:a4:64:f1:de:3c:98:fd:ce:
8c:11:45:c6:07:5f:32:ff:9e:68:e3:9a:dc:20:a9:
96:0d:f3:da:f2:95:af:22:30:85:1c:66:2c:b6:fa:
40:c4:02:8d:3d:28:47:84:e2:46:75:7a:44:e1:81:
12:1c:18:87:6c:a5:f9:46:1d:4c:52:8d:2e:e4:6f:
dd:5b:1c:f4:4e:ca:75:5a:a6:04:21:6e:5a:f9:e9:
28:0f:e9:43:26:8e:5a:df:6b:cf:7b:43:33:20:9d:
73:dd:db:e6:65:29:e2:d1:0b:31:0e:0d:2a:2b:4f:
e7:1a:65:9b:b4:20:8d:64:7a:73:68:e0:76:32:1f:
96:90:9b:bc:a0:43:08:03:82:58:57:ab:ec:66:37:
c1:cf:98:d7:3d:ad:09:fc:ff:77:73:1f:7c:f2:78:
c3:2b:49:f9:75:2e:6d:42:48:b2:11:1e:20:8e:12:
e8:3a:d3:d2:4a:a5:36:c3:cd:7d:78:4d:59:6a:7b:
c5:50:85:62:90:fb:7a:2b:d6:92:c7:f7:c8:ef:e3:
63:88:b1:19:b8:88:f0:90:6c:2c:06:25:df:65:c1:
df:3d:89:2e:80:2d:53:51:1e:25:21:13:57:ff:1a:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C8:33:4E:43:51:C0:00:D5:FF:88:FE:84:1E:5C:1C:3B:01:A2:B0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0cgzTkNRwADV_4j-hB5cHDsBorA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:ce:5c:30:33:ff:27:49:39:c3:4b:90:5b:4c:ed:6d:d9:06:
42:51:7b:18:bc:9b:d9:f6:76:70:67:b5:85:8f:86:9b:b1:97:
89:65:eb:ba:09:08:26:5b:66:d4:20:6a:7f:77:bd:78:24:99:
df:33:b8:40:1a:82:25:7c:88:b6:f5:8a:74:df:d2:9b:2c:59:
40:8d:de:6e:d4:ef:90:a1:b1:e1:d9:e6:79:4d:2b:d5:10:01:
00:e2:93:a5:fb:0a:f6:5c:30:01:b7:e6:4a:11:a5:df:94:69:
15:6b:f5:04:32:cb:dc:91:50:fe:6b:2e:2c:1e:1c:56:62:bf:
9f:44:61:02:19:59:56:15:90:0b:d2:d1:46:aa:e2:4a:31:c7:
04:06:de:98:22:ec:bf:be:a6:be:c1:4f:e7:c3:52:3e:fe:2d:
5c:3d:6b:ce:ed:1f:59:e1:56:e3:00:b9:8f:81:70:c9:b8:b6:
6a:3b:93:f8:ba:16:df:05:15:d1:96:9c:ea:a8:3e:5c:87:6a:
f8:10:2f:fa:10:94:e9:b6:0a:10:17:8d:50:c4:81:11:50:a8:
a1:65:f6:af:74:20:59:f1:04:5c:d5:54:3d:05:20:b1:46:d6:
02:67:43:c4:7c:c3:f0:07:4b:c3:c0:8b:fc:12:b1:f7:28:23:
31:54:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:07:49 2025 by rpki-client