Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3JclDsuwM_ps7F17zSs9wpS_xUs.roa
File: 3JclDsuwM_ps7F17zSs9wpS_xUs.roa (raw, json)
Hash identifier: KbqKZzvg3JYAUvnpjLS5EMlBQoE8VxSWWy6fLxuMhp8=
Subject key identifier: DC:97:25:0E:CB:B0:33:FA:6C:EC:5D:7B:CD:2B:3D:C2:94:BF:C5:4B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C33E6EFB9E5455D1C7F3B467C28BBB12E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3JclDsuwM_ps7F17zSs9wpS_xUs.roa
Signing time: Mon 04 Dec 2023 08:17:01 +0000
ROA not before: Mon 04 Dec 2023 08:17:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:e6:ef:b9:e5:45:5d:1c:7f:3b:46:7c:28:bb:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 4 08:17:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc97250ecbb033fa6cec5d7bcd2b3dc294bfc54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:79:01:1e:6d:1e:9a:de:63:05:66:25:2e:
f1:07:40:52:96:5e:5b:8c:f7:d7:70:8c:86:d6:3e:
1a:39:c3:f2:d5:6c:ae:03:90:34:48:8e:99:24:38:
f4:cf:ec:62:be:da:dd:30:4b:15:22:0b:3f:87:7a:
a9:00:92:4d:cb:a8:45:a3:76:5c:7e:c6:ff:fa:1a:
6a:b8:20:53:9c:87:51:1c:40:25:ff:7b:2d:c0:e2:
42:45:28:ba:9f:8e:77:0e:3f:eb:85:f1:92:09:de:
95:0b:e1:0c:f3:61:24:04:40:e0:1b:3e:60:36:f3:
6a:c7:4d:02:f5:c7:79:88:ec:71:e4:67:e7:ec:ff:
e6:26:71:fc:3e:e1:85:0e:51:95:ea:01:36:76:57:
c8:10:12:6b:36:2f:30:f6:60:5c:8b:00:00:34:bb:
b0:a7:3c:8f:74:e0:8d:f0:dc:31:c0:ba:cd:67:39:
da:be:53:cc:ef:ac:3e:5a:0d:27:c6:43:55:e7:5c:
42:bb:12:be:f3:81:13:1a:1b:70:fc:05:82:c2:1c:
fa:09:95:b4:b6:66:e8:97:d1:41:3e:95:f5:58:d7:
5d:5e:4d:91:6b:86:e6:44:7b:f1:f8:d0:8b:1b:01:
c5:d5:2e:51:0e:29:9c:15:35:05:10:f7:3e:1c:eb:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:97:25:0E:CB:B0:33:FA:6C:EC:5D:7B:CD:2B:3D:C2:94:BF:C5:4B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3JclDsuwM_ps7F17zSs9wpS_xUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:f2:1f:86:09:76:0b:69:8d:fe:32:15:ec:37:67:5e:a9:10:
fa:34:32:4e:0e:8d:cf:82:cd:13:c4:99:6e:a8:19:32:3d:f1:
95:d8:83:8d:a8:a1:8f:d2:3e:9f:34:2a:c9:13:b2:dd:27:8d:
a0:d8:ed:2f:12:22:ed:6e:b9:a1:db:e7:bd:87:59:32:53:62:
d5:3b:5a:8b:2c:fc:fd:8a:30:db:e7:a0:57:04:59:a1:f7:7a:
cf:9c:0b:2d:16:26:b0:17:8e:76:8b:95:17:61:aa:31:f3:ad:
fd:0d:c7:d5:ee:30:c9:9f:f0:5a:40:87:76:e7:ab:fd:22:82:
c3:b7:85:ea:03:57:6c:50:41:f6:3b:db:ec:38:2a:dc:c0:92:
87:89:7a:c8:8d:c7:f1:f9:3e:c0:95:db:04:87:d9:af:23:9a:
f6:a2:6f:24:55:a4:ed:ac:5b:64:7c:8a:1c:88:f0:53:20:b5:
a7:34:d7:4c:9f:22:24:a7:b9:4b:6f:c2:ce:8a:a1:6a:6a:7c:
b8:8c:56:cb:d7:80:08:31:45:ef:ed:97:b5:2b:bb:21:3f:3a:
99:1c:bc:34:9b:36:ac:71:b6:0a:7b:79:ba:25:51:1d:79:f5:
24:51:d5:ad:bb:a7:5b:59:69:78:f7:bd:f2:52:ca:c1:94:30:
74:86:58:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:27:57 2025 by rpki-client