Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0rbbpoqLOVgJsILEhnvm5dERPfk.roa
File: 0rbbpoqLOVgJsILEhnvm5dERPfk.roa (raw, json)
Hash identifier: gTsIEywcHme+flIIqyKxzyS6lbR1UpJjWM7uoBOjwxY=
Subject key identifier: D2:B6:DB:A6:8A:8B:39:58:09:B0:82:C4:86:7B:E6:E5:D1:11:3D:F9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2EB4F9B7AD8864DEF48A3B9D03F67EB0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0rbbpoqLOVgJsILEhnvm5dERPfk.roa
Signing time: Sun 03 Dec 2023 08:04:21 +0000
ROA not before: Sun 03 Dec 2023 08:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:2eb4:ea0f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2e:b4:f9:b7:ad:88:64:de:f4:8a:3b:9d:03:f6:7e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 08:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2b6dba68a8b395809b082c4867be6e5d1113df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:70:bc:19:81:ae:17:60:a1:1c:8c:19:d6:
67:b5:62:3e:56:21:9d:a0:39:2a:a0:e3:86:05:63:
1a:8e:ef:5e:44:0b:9b:40:17:81:0d:c9:80:9e:13:
45:82:56:79:ee:e0:60:9b:56:37:81:72:d0:78:f1:
a2:99:80:91:25:f3:52:88:17:c6:66:4b:90:4e:98:
e5:8c:6e:9a:c7:41:65:d6:65:3d:7c:3e:76:bd:d1:
12:12:11:b4:0a:d4:47:fc:ac:31:ff:aa:f8:65:af:
cf:e7:03:fe:8d:b9:55:93:0a:ab:71:1b:27:eb:e2:
43:1e:92:91:d9:ee:36:b4:90:fd:eb:9b:d8:c1:31:
de:bc:1b:6b:9a:d7:87:b6:37:54:a9:ee:55:40:0a:
40:46:54:b9:61:e6:de:74:a5:28:16:a3:34:aa:64:
4d:2c:b2:c8:fa:1f:b0:d6:73:62:96:50:3a:8f:fa:
8a:25:d5:6c:fd:71:e9:95:da:43:70:b5:9e:df:60:
f4:44:7c:65:90:bc:71:84:ba:37:ed:b3:04:69:0a:
e9:ba:0d:c2:5b:1e:8b:0b:60:49:4d:ce:24:83:2c:
96:ad:f4:cc:63:e4:73:64:cf:43:96:29:08:c3:7d:
5b:77:fe:01:66:76:86:8b:3a:41:2e:e7:a8:d5:ef:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B6:DB:A6:8A:8B:39:58:09:B0:82:C4:86:7B:E6:E5:D1:11:3D:F9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0rbbpoqLOVgJsILEhnvm5dERPfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:f5:b6:18:1b:2c:1c:b7:ee:ef:1c:af:90:d3:ba:52:80:fa:
8e:7d:e5:c8:2e:a7:ad:6f:f9:dd:24:f8:a2:63:b3:e0:0f:2e:
3d:57:f0:22:c3:14:63:07:5d:4f:73:ee:36:0b:22:8c:00:ef:
7d:f9:95:b5:34:db:b0:3d:5a:cb:b0:2d:eb:2d:0b:56:60:67:
d8:b8:88:21:05:b3:10:06:0c:37:0d:d5:31:fd:31:d1:ee:e8:
fc:ce:ee:5c:35:46:94:29:24:48:e6:da:93:86:ae:b5:df:a7:
62:36:19:eb:6b:62:36:3f:78:4e:05:e9:6d:3d:bf:ec:a0:8b:
cd:ce:6f:0d:41:e3:0a:51:f0:ed:a6:9d:47:90:1d:3e:71:4b:
cf:03:60:5e:d3:31:0a:3b:15:66:1a:9f:bb:c5:cb:35:61:db:
21:07:76:5c:9b:35:b9:69:c1:b1:65:af:5e:27:76:69:55:df:
e9:01:17:3a:90:8a:cb:a3:7d:5c:25:fc:5c:03:28:72:c0:1f:
aa:70:5c:27:51:b7:78:af:13:d2:6d:c7:48:aa:6f:66:98:72:
cf:9e:e6:8d:92:0b:5c:e9:75:6b:1a:3c:e4:83:21:6b:23:a8:
95:d1:f2:16:15:00:d8:50:f5:c0:89:ed:e7:df:a2:f1:87:73:
8e:89:aa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:45:09 2025 by rpki-client