Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3-x7WzRBEpI459KrNBFDJckyNWQ.roa
File: 3-x7WzRBEpI459KrNBFDJckyNWQ.roa (raw, json)
Hash identifier: FU2kB8ATvRUWA6Ro/9S8YqKboYePYM8gXi5d4RRfdVo=
Subject key identifier: DF:EC:7B:5B:34:41:12:92:38:E7:D2:AB:34:11:43:25:C9:32:35:64
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B781FE3271B58FE7885C1EE09D223A7FC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3-x7WzRBEpI459KrNBFDJckyNWQ.roa
Signing time: Sat 28 Oct 2023 21:10:37 +0000
ROA not before: Sat 28 Oct 2023 21:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:781b:4d66/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:78:1f:e3:27:1b:58:fe:78:85:c1:ee:09:d2:23:a7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 28 21:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfec7b5b3441129238e7d2ab34114325c9323564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:53:bd:da:a6:b2:00:72:4e:7a:95:1f:2d:
18:dd:33:03:c4:ce:7e:1f:aa:62:c7:eb:8e:97:19:
e7:c8:f9:ac:83:77:3a:22:32:42:2c:32:e5:19:fe:
39:cb:9c:fe:b1:ad:cd:4f:ab:e8:27:b5:08:81:cb:
2a:e9:24:82:6b:fa:c0:12:ec:43:fb:f2:0e:e3:25:
01:7c:8c:49:27:87:a4:1e:8c:53:b2:d3:59:11:6b:
82:c7:5a:ea:19:02:75:14:b3:ea:fa:9b:7c:e8:83:
4d:db:a2:2d:65:1f:5a:d8:fc:84:4b:c2:40:9c:d5:
5c:fd:30:78:0f:f3:63:1f:52:46:35:c4:e5:6d:72:
4e:1d:82:54:bc:13:65:96:bc:a1:71:99:38:41:8a:
d2:0a:ee:8c:5e:f7:68:a5:77:75:e8:95:91:0b:14:
9c:82:e4:19:b4:06:f2:f1:b5:30:1a:dd:59:04:29:
0d:a2:cd:f0:6f:b5:5b:5b:05:de:60:ea:37:a9:81:
c0:ba:ea:c1:01:2e:e3:d4:1b:c3:58:1d:cf:9d:53:
db:b0:15:15:96:44:e7:5d:ce:46:af:9b:6d:a9:5e:
c6:b2:af:8c:d7:3d:94:75:fe:87:ff:24:d0:98:ae:
2b:ea:77:d4:c5:05:0f:48:c9:2f:bc:d4:3c:4e:94:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EC:7B:5B:34:41:12:92:38:E7:D2:AB:34:11:43:25:C9:32:35:64
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3-x7WzRBEpI459KrNBFDJckyNWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:92:21:a7:bb:f1:63:5e:45:4c:1f:3f:3c:88:df:48:5f:9e:
4c:d1:10:6d:08:6a:e9:95:46:52:9d:82:26:5d:52:bd:cf:f3:
67:3c:e7:c0:0e:4b:7f:d6:ce:21:5d:39:fb:e5:f3:65:8f:d3:
81:ee:b8:0c:22:2a:64:ab:43:90:5b:18:3c:95:20:e1:0d:45:
65:0c:fe:42:d6:b1:a2:06:01:15:16:e8:57:f5:3f:ef:dd:bd:
55:0b:dc:9e:02:34:59:b0:11:e2:02:a6:a9:c7:34:1a:dc:f4:
cd:bb:54:ba:12:41:1f:7d:ed:ea:f7:86:86:e8:fe:38:6a:02:
b5:04:56:a9:1a:b3:c7:cb:13:03:ba:b7:41:50:44:96:a5:37:
35:c9:b1:d1:c6:59:7b:13:8a:87:45:bf:70:15:71:8e:f9:4e:
b4:31:50:e7:0f:45:ee:72:8d:f9:83:a7:25:16:94:71:ea:20:
37:e2:25:b9:9b:19:e0:0a:f5:91:27:0d:18:80:c6:1a:fe:dc:
84:d1:04:e7:df:da:94:9c:9a:2b:e8:4a:7c:bc:fc:3e:c0:3c:
b7:7d:af:c0:b5:fa:1f:46:b2:86:62:3c:fa:10:91:6e:dc:6a:
6a:e1:e0:1c:84:3d:71:ae:cd:5c:81:2e:c3:17:35:ed:b1:d0:
67:75:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:59 2025 by rpki-client