Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0lQVTRZN3O5eWI8OK5WmlBULATE.roa
File: 0lQVTRZN3O5eWI8OK5WmlBULATE.roa (raw, json)
Hash identifier: GNRN3+C5rCGlDeW/By5NIi0JsONQ5JdEE3mGh8C1aCY=
Subject key identifier: D2:54:15:4D:16:4D:DC:EE:5E:58:8F:0E:2B:95:A6:94:15:0B:01:31
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B875BB524ADACC6136A6D185DFE6902F5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0lQVTRZN3O5eWI8OK5WmlBULATE.roa
Signing time: Tue 31 Oct 2023 20:10:16 +0000
ROA not before: Tue 31 Oct 2023 20:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:87:5b:b5:24:ad:ac:c6:13:6a:6d:18:5d:fe:69:02:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 20:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d254154d164ddcee5e588f0e2b95a694150b0131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:2b:ad:76:ab:15:32:ae:53:d3:0a:3a:0e:
0f:cd:52:76:c5:f5:ea:09:87:0a:ab:f0:e1:5d:1c:
ee:31:08:d1:ef:a6:58:23:de:33:9c:6e:c7:e8:01:
11:49:d4:66:2b:f9:89:69:5f:c9:a7:60:71:f8:fe:
6b:3b:8c:30:34:50:e4:54:c3:c2:c2:59:7c:a2:85:
4f:d6:99:03:fc:66:e8:6e:7b:a8:58:a8:44:d4:c4:
e7:50:b6:e3:c1:c8:92:a6:2e:e4:42:9b:51:c9:1e:
76:e5:35:8b:56:fd:20:31:b0:5d:2b:2c:79:c8:1a:
6c:14:e5:40:ed:09:ec:3a:f3:43:a6:26:74:50:64:
9e:65:05:ed:48:98:71:d4:1f:cb:0c:1f:46:27:d6:
bd:23:93:02:c5:f3:d9:3b:e2:ff:29:c4:b5:92:01:
e2:6d:a6:b0:e7:38:db:ce:3b:0d:d3:82:8f:53:b1:
b0:b1:2d:44:2a:45:13:0f:62:59:8f:2b:f4:00:97:
f1:94:6c:be:c8:98:9a:72:78:e1:8a:ca:fe:6d:0f:
b5:5a:ff:53:dc:31:60:ab:50:e2:67:e4:79:57:04:
e9:c4:38:5b:21:c1:02:f1:ed:6a:3b:27:5a:79:5b:
8a:8a:df:4f:7c:94:6b:cd:b5:53:cd:04:c0:93:5d:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:54:15:4D:16:4D:DC:EE:5E:58:8F:0E:2B:95:A6:94:15:0B:01:31
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0lQVTRZN3O5eWI8OK5WmlBULATE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:46:00:4e:9b:f4:8d:92:ef:9f:26:50:e5:56:d3:e6:0a:a4:
e4:29:4d:9a:75:7b:bc:09:b1:06:9d:fa:8a:a2:5e:3b:7a:f2:
14:b2:de:1e:20:66:fe:08:f9:c6:a9:a1:98:e8:cf:ff:16:a9:
0a:00:4d:db:3f:a8:0b:c5:40:bd:d5:39:a8:13:5b:f3:33:eb:
73:12:ba:62:99:d2:28:b6:89:c6:fd:a3:57:1d:ed:15:5f:d3:
66:41:a9:36:bd:5c:ef:a0:27:e8:04:55:b9:91:e1:b4:12:40:
0e:10:ac:e2:70:ee:7c:2a:af:d1:79:68:3a:3f:e4:7f:a9:0f:
54:cb:8c:63:6b:4c:d2:64:e8:a1:6d:1b:bc:bf:25:b1:db:5d:
5f:d1:3d:c2:70:d6:0f:67:c5:f3:e5:4a:e1:c4:3a:3a:8b:cb:
62:07:3b:a4:66:50:d7:56:38:58:33:80:36:17:ff:5f:a1:cf:
4b:c5:e1:b7:0d:67:bf:93:25:4c:e2:c2:f6:35:d7:8b:8c:17:
7d:03:d3:1f:01:62:06:18:c9:b6:be:8a:ac:7c:f4:ac:d5:06:
8a:63:a0:ab:28:3f:6e:9e:12:2e:07:87:0b:cf:17:83:ca:2e:
d4:d8:06:00:cc:45:37:84:ec:5d:90:ae:ff:83:dc:a7:92:0d:
18:8b:54:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:30:41 2025 by rpki-client