Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3U0V2I4zQaaYW-UvYdl5Kb_X4mQ.roa
File: 3U0V2I4zQaaYW-UvYdl5Kb_X4mQ.roa (raw, json)
Hash identifier: U91E0iFpgF6n3gKiQJQDLgn68l2jmgtNxEE2VetisKs=
Subject key identifier: DD:4D:15:D8:8E:33:41:A6:98:5B:E5:2F:61:D9:79:29:BF:D7:E2:64
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C75C52FA789F891632D46A94A0222325B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3U0V2I4zQaaYW-UvYdl5Kb_X4mQ.roa
Signing time: Sun 17 Dec 2023 03:15:06 +0000
ROA not before: Sun 17 Dec 2023 03:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:75:c5:2f:a7:89:f8:91:63:2d:46:a9:4a:02:22:32:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 17 03:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd4d15d88e3341a6985be52f61d97929bfd7e264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:ab:6e:08:ab:26:3e:34:fd:ae:91:27:43:
5c:c8:6b:32:aa:12:b1:4e:d3:6b:09:95:f8:60:12:
c4:4f:b3:58:ad:44:5e:4f:36:a8:da:67:80:3b:68:
02:0a:3c:49:fa:e3:18:e5:62:2e:7e:0d:3d:51:cf:
53:67:b2:6a:13:62:0a:06:c3:4c:0a:c6:39:93:25:
84:bb:31:e0:e5:66:19:6c:55:0d:f4:b9:1d:f1:aa:
c2:91:25:83:b7:c5:b0:b0:8e:92:25:b2:58:a2:61:
b5:07:1e:83:cd:11:8f:f3:ef:8c:a3:64:f8:83:a1:
82:c9:c0:24:3f:bc:2f:d7:69:bb:98:44:22:e1:d7:
a5:37:1e:93:12:dc:2c:12:f5:13:30:1a:d1:75:ee:
4d:8e:99:fc:22:23:ac:36:fc:8d:42:5c:58:8c:55:
57:11:e6:e5:09:47:44:cf:81:6b:d5:33:ff:a9:f4:
98:3a:da:0e:72:af:e0:9e:ad:a8:61:4c:0d:64:7e:
e5:94:22:78:58:e6:1e:a3:70:37:c6:dc:8d:c2:3f:
d2:53:81:05:0c:25:a0:df:02:9a:0a:01:fa:d2:54:
84:f6:d0:21:0f:c7:e0:4e:8b:0f:f0:e2:70:25:26:
ec:3b:98:0c:cf:2d:77:54:b4:86:02:73:92:40:33:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:15:D8:8E:33:41:A6:98:5B:E5:2F:61:D9:79:29:BF:D7:E2:64
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3U0V2I4zQaaYW-UvYdl5Kb_X4mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:11:d1:41:45:41:57:45:e6:3c:a9:0b:13:99:0c:ec:bc:9c:
11:45:25:f1:c3:09:ad:a5:72:ca:19:cb:78:18:af:b4:bd:cc:
d3:83:b8:c8:da:be:70:9b:89:75:bd:33:ae:de:79:22:3e:d2:
ee:bd:82:4d:bc:76:89:e9:76:bc:3f:2e:35:e3:b7:a4:5d:7b:
c8:78:17:75:3b:db:2f:99:ee:c1:58:01:f2:15:3e:b0:4e:95:
e7:28:11:49:54:06:00:0f:bf:81:40:ca:ab:38:1c:d5:13:88:
dc:4d:48:e0:97:f6:3b:d0:b3:72:ae:71:dd:75:21:e0:78:21:
d1:f1:6e:1b:bb:71:a7:7a:48:ca:4d:d6:a5:fe:51:38:fe:22:
a5:99:12:c0:02:fc:7c:db:48:22:c1:8f:97:47:bd:0a:fc:e0:
17:f0:91:6c:d0:f9:93:a0:a3:0a:4f:a4:5f:1b:8b:00:93:85:
6b:a7:dc:2d:ba:8f:74:ed:9e:16:e8:b4:c8:ea:7b:00:27:cf:
1e:42:62:fb:e8:be:f6:82:f7:be:4a:fb:a6:e9:6c:e2:25:3f:
75:62:b1:10:cb:eb:b7:63:a0:e3:b8:70:f1:6e:aa:f7:c2:c5:
e9:bc:13:b9:11:4f:f8:3c:55:c9:54:d4:d3:ee:12:c0:ed:d1:
1f:de:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:42 2025 by rpki-client