Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3bWksKqaZrK4a5_N3Q4Nxyif5nM.roa
File: 3bWksKqaZrK4a5_N3Q4Nxyif5nM.roa (raw, json)
Hash identifier: /W2gySX+rueaPNToQal98Yiira9vENkMmobbCw8utpg=
Subject key identifier: DD:B5:A4:B0:AA:9A:66:B2:B8:6B:9F:CD:DD:0E:0D:C7:28:9F:E6:73
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1A270FDA4EED5E90A9876D18851745BA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3bWksKqaZrK4a5_N3Q4Nxyif5nM.roa
Signing time: Wed 29 Nov 2023 08:16:56 +0000
ROA not before: Wed 29 Nov 2023 08:16:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:27:0f:da:4e:ed:5e:90:a9:87:6d:18:85:17:45:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 08:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddb5a4b0aa9a66b2b86b9fcddd0e0dc7289fe673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:a9:2d:6b:cc:02:7c:e0:29:8e:26:2e:04:
b1:2d:8a:c9:ed:ef:01:d3:1d:04:ac:84:fb:8c:c9:
e0:d9:af:a2:74:bb:35:99:8a:4c:27:7a:4b:61:c9:
3e:e2:ea:a0:3c:fc:eb:f8:89:1e:7d:35:17:f8:59:
94:4d:8b:00:a4:65:bc:6e:d2:2e:10:25:07:c5:f3:
cd:34:a4:2b:d0:de:b2:6a:3c:44:2e:e7:c2:d3:b2:
9e:d7:fd:95:1f:79:ce:35:98:ed:18:c0:36:3b:87:
e8:4b:70:b4:1f:7f:24:7f:ce:3b:4c:d2:17:60:35:
0d:34:fd:71:8d:43:0e:46:89:d4:2d:b9:dd:72:db:
8d:47:87:57:69:95:a0:c7:37:c2:d9:05:bd:1a:30:
13:53:68:ae:9d:4f:38:d2:6b:de:18:a9:ce:ff:6a:
10:53:a2:a6:76:cf:ba:da:f9:fd:6f:3b:02:42:32:
dc:3d:38:42:bd:af:d4:36:3e:0b:76:60:7a:50:e1:
c0:04:2c:ad:b4:88:73:49:99:92:59:19:35:1b:45:
b5:d5:91:2b:d9:dd:12:2d:28:32:d1:88:32:ad:2f:
08:db:be:82:5e:7c:90:07:91:fa:a7:63:bd:ab:26:
c3:17:6e:90:96:5e:8f:8a:ec:02:a5:f9:88:7a:87:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B5:A4:B0:AA:9A:66:B2:B8:6B:9F:CD:DD:0E:0D:C7:28:9F:E6:73
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3bWksKqaZrK4a5_N3Q4Nxyif5nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:0d:eb:53:6b:8e:66:10:69:d3:44:89:5e:7d:50:32:70:f3:
27:2b:57:4f:97:86:88:7a:7a:4e:72:4d:a1:f9:6d:b3:3a:74:
66:7e:a6:67:c2:b8:a2:37:5a:4d:84:a3:52:b5:f5:d7:b8:0a:
50:38:85:66:76:dc:4b:c0:63:e5:07:c0:c5:24:ea:13:af:d1:
45:51:79:1c:0a:20:8c:79:92:72:54:7a:29:b8:11:c1:0f:e7:
c7:10:27:6d:c3:22:0b:61:bc:b5:3c:33:65:b8:ef:41:74:4d:
53:4b:6c:0e:13:6a:08:83:9e:5e:a9:a9:d2:3a:ec:e4:6e:59:
38:03:5c:76:6f:26:0e:98:26:f5:5e:3b:42:ff:43:f6:27:67:
d8:be:21:50:94:92:58:bb:b2:9b:2a:ab:b5:e1:b2:ac:10:ff:
3b:9d:cf:30:fd:d2:ab:9d:26:ba:65:03:83:ff:1e:de:d2:0b:
5b:22:24:cc:fb:c1:48:b2:42:c4:10:e4:39:ec:57:b3:97:66:
6a:6c:8d:a9:d7:28:ef:09:85:1d:c5:9b:d2:a6:b6:b9:02:b9:
73:eb:2a:29:48:39:74:ed:c2:b9:a2:37:ec:ae:3a:b9:1f:dc:
41:3b:62:10:e7:f6:83:b1:92:1d:bc:f6:71:05:8d:4f:d2:6b:
69:19:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:25 2025 by rpki-client