Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3V8QqeBKH40mvHQq2ubDc-oZhMc.roa
File: 3V8QqeBKH40mvHQq2ubDc-oZhMc.roa (raw, json)
Hash identifier: 5W1jmXwxWVdCTfjndy33PH7CmJz0hithYrsW4fUyhAM=
Subject key identifier: DD:5F:10:A9:E0:4A:1F:8D:26:BC:74:2A:DA:E6:C3:73:EA:19:84:C7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C74E7A08CAB75675FC4578106698EFA13
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3V8QqeBKH40mvHQq2ubDc-oZhMc.roa
Signing time: Sat 16 Dec 2023 23:13:06 +0000
ROA not before: Sat 16 Dec 2023 23:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:74:e7:a0:8c:ab:75:67:5f:c4:57:81:06:69:8e:fa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 23:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd5f10a9e04a1f8d26bc742adae6c373ea1984c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:b4:41:62:00:fa:3b:3f:b3:4c:2e:6c:e4:
b4:99:46:dc:66:4d:04:5a:31:c3:d2:43:ab:cb:fa:
f2:16:b8:ce:25:d3:57:c9:ab:11:39:b3:a9:a2:22:
a5:16:10:cd:54:5d:a5:58:10:d5:71:ac:4c:26:1a:
4a:f0:18:54:24:4c:70:f9:4f:ea:58:df:57:73:dd:
08:7c:21:a4:14:ff:17:31:e7:23:f5:ea:cb:2e:f6:
82:98:77:6a:7b:4f:df:9d:15:a0:90:d2:0c:c4:b6:
d2:c9:10:8a:74:62:91:44:eb:30:3f:be:6e:6f:35:
3d:42:83:6d:36:43:41:53:54:48:24:7f:ea:88:c4:
fc:1f:2a:a6:b2:26:68:6c:07:80:7a:0f:ee:d6:32:
70:2e:06:65:a4:d7:2b:d8:26:99:7d:0f:7a:11:29:
ce:62:1c:54:b9:3e:9d:ca:92:53:68:94:cc:aa:32:
b3:17:bc:c8:af:19:05:34:fd:b3:b4:d9:5b:69:9e:
1e:a0:8b:c0:50:f7:2b:3e:12:b5:02:54:51:93:27:
f4:92:38:a6:83:34:e2:61:86:a1:31:d0:52:c6:bf:
f6:5e:5e:a2:04:c5:8b:34:3c:b3:02:c3:8c:ab:59:
03:01:4b:55:af:37:f2:4b:de:e3:57:2b:05:ad:87:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5F:10:A9:E0:4A:1F:8D:26:BC:74:2A:DA:E6:C3:73:EA:19:84:C7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3V8QqeBKH40mvHQq2ubDc-oZhMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:71:a1:ef:94:40:a1:9b:44:f0:f6:5c:e6:62:08:41:39:92:
47:b7:9b:1c:88:f9:05:ee:ba:1d:72:30:77:f6:9f:a4:53:3a:
8e:a9:e5:da:07:bc:c0:58:41:da:0d:7a:f8:42:10:ab:47:68:
42:4e:a0:5a:d1:46:1d:2a:e5:78:6f:a6:4c:9a:5b:f1:ee:b3:
88:20:4b:61:85:14:31:dc:26:31:0f:4e:a8:20:f8:76:bc:eb:
c7:d4:34:a3:61:ab:24:11:ce:92:26:26:95:9d:c3:d5:20:30:
31:ed:87:34:c9:bc:e7:37:dc:e3:84:49:00:a4:70:54:55:17:
e6:e2:63:25:bf:a9:22:56:83:d4:b1:4b:8f:4e:df:71:ec:92:
b4:7e:ed:33:56:33:8a:72:04:ea:3e:ee:0d:d6:f3:fc:10:07:
0c:d1:1a:31:ea:ab:59:88:65:41:8d:c3:28:4e:9f:ef:db:67:
8a:9a:45:3a:c8:66:6c:ba:27:74:8a:97:73:44:66:17:ff:36:
30:02:83:47:36:13:90:38:d7:55:bf:71:dc:a6:de:88:04:c7:
45:55:0f:ad:a5:8f:4e:f1:19:e2:54:f6:3b:cf:6b:83:42:6b:
69:90:74:d4:0d:8e:75:ca:6b:23:2b:7a:ea:01:27:12:f6:f9:
5d:fc:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:54:48 2025 by rpki-client