Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0gs6YWKY1pkm9eM2ytNPXL9WeMQ.roa
File: 0gs6YWKY1pkm9eM2ytNPXL9WeMQ.roa (raw, json)
Hash identifier: lZ51iY+rc2XJseNfTX2uqnlmLStEXmrjPjpfUcL0Zag=
Subject key identifier: D2:0B:3A:61:62:98:D6:99:26:F5:E3:36:CA:D3:4F:5C:BF:56:78:C4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE44705025CA826AD95783F5F4B010E08
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0gs6YWKY1pkm9eM2ytNPXL9WeMQ.roa
Signing time: Sat 18 Nov 2023 21:12:21 +0000
ROA not before: Sat 18 Nov 2023 21:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e4:47:05:02:5c:a8:26:ad:95:78:3f:5f:4b:01:0e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 21:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d20b3a616298d69926f5e336cad34f5cbf5678c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:6e:e8:4a:c6:b1:b5:55:44:b0:35:3a:b5:
00:16:87:a2:48:ce:3b:6b:9b:08:2c:43:39:d1:c1:
8f:6a:3e:c5:7a:33:ae:db:2b:0b:7e:03:a8:76:74:
18:60:36:99:0a:fe:98:0a:52:91:c8:b5:e8:99:3b:
b4:48:cb:f1:38:7d:67:02:d0:20:36:a0:b3:4d:4f:
6a:e3:8f:8f:c2:3b:ae:4b:9b:99:0a:f8:b8:de:ee:
fd:e2:00:e0:43:d1:17:6f:a9:19:bd:d8:d6:75:21:
14:c8:81:22:5a:d9:2c:76:4c:c9:b4:c7:1a:a8:58:
a2:ee:9b:f9:43:59:83:6b:da:54:ee:25:26:29:97:
9d:82:db:54:9d:b7:4d:77:9b:99:e5:bd:0e:87:24:
ef:99:54:0e:3b:73:4d:7c:df:3f:30:bd:c1:cd:c0:
25:db:a4:ab:59:25:0e:ca:4c:ff:71:76:aa:fc:92:
7b:00:2a:b0:94:61:1b:de:e6:8e:2b:23:23:f3:9a:
e1:38:44:1f:22:7f:85:05:e0:7b:ef:b2:31:d7:3b:
85:02:b3:ed:1d:97:2c:25:6d:0c:b9:7b:e6:a7:a9:
7e:02:2d:00:8c:a1:0e:91:57:5b:15:9e:cb:ec:ae:
82:58:c1:2f:a9:30:1c:76:04:50:20:d2:1f:04:c9:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0B:3A:61:62:98:D6:99:26:F5:E3:36:CA:D3:4F:5C:BF:56:78:C4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0gs6YWKY1pkm9eM2ytNPXL9WeMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:00:0c:d2:ec:db:26:cd:f8:98:92:bc:c4:1c:41:65:65:10:
53:72:ce:13:ee:c5:e0:31:15:54:75:7c:d6:9c:93:2c:79:05:
d4:61:1a:ac:6a:ac:4f:7a:21:45:d3:b5:d9:e6:31:4c:8a:81:
c1:67:59:56:96:4f:15:45:44:15:57:5e:b7:be:70:b3:ca:fe:
c5:64:65:7d:0e:cd:b9:12:af:f3:ea:66:71:cd:79:03:30:e8:
48:20:77:09:e8:c5:62:4a:87:81:73:30:40:3c:3c:78:c0:34:
d8:79:fc:a0:f5:fc:39:e7:ca:26:ac:82:08:88:b3:60:76:05:
3f:56:21:33:0b:74:49:ff:e7:42:79:00:d4:4c:28:9e:6d:c0:
72:37:46:f3:bb:39:d7:b7:8d:0a:d8:c6:56:c8:af:c3:90:de:
c5:74:57:c4:73:ad:9e:f5:7f:a8:22:78:26:74:7e:ed:15:e5:
aa:30:be:55:c2:09:92:78:28:cc:78:21:84:48:6d:44:9d:9f:
dc:34:32:75:da:d3:f3:15:f9:c6:2d:10:da:47:f7:aa:ac:d5:
e1:e8:5d:b2:cf:df:9f:09:99:8d:9b:a5:b0:dd:ed:fe:b0:62:
9e:a4:6a:42:c8:dc:c9:5d:55:0d:4c:cc:87:20:48:e2:44:39:
89:70:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:59:19 2025 by rpki-client