Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3e9rkouWEc8tcP5wTXMgmOMH46Y.roa
File: 3e9rkouWEc8tcP5wTXMgmOMH46Y.roa (raw, json)
Hash identifier: u8r0aZ8ZuRDwMPLsLTCiAPqV0ot5F7ld+xzYfR3JO6U=
Subject key identifier: DD:EF:6B:92:8B:96:11:CF:2D:70:FE:70:4D:73:20:98:E3:07:E3:A6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD3200AF90F440DDA204DAD62901A9D75
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3e9rkouWEc8tcP5wTXMgmOMH46Y.roa
Signing time: Tue 26 Sep 2023 20:13:27 +0000
ROA not before: Tue 26 Sep 2023 20:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d3:20:0a:f9:0f:44:0d:da:20:4d:ad:62:90:1a:9d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 20:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddef6b928b9611cf2d70fe704d732098e307e3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:3d:c1:97:04:43:1b:9c:41:3f:e6:6e:a0:
9e:a6:7a:da:63:05:02:80:84:a3:a1:6f:ea:ab:a5:
9f:2f:7c:7d:81:b4:56:2c:75:71:20:d0:5c:28:c9:
bc:d1:9b:bc:da:61:8e:b0:41:86:a8:62:c3:26:fa:
6e:9c:bf:4a:66:d8:42:0a:5b:bb:61:39:30:05:b7:
e9:00:da:30:6c:9c:85:78:d5:89:72:97:20:0a:9c:
43:6d:f2:4a:98:56:83:88:45:65:e2:f9:5b:ef:7b:
5d:ee:2c:1a:db:1a:05:2d:77:17:96:db:91:13:21:
43:4d:2e:1c:97:bc:d7:a7:77:3a:4e:ca:92:5a:3e:
ad:43:37:ba:0e:c3:7f:62:a2:fb:2d:02:d8:87:ea:
ab:c0:54:6a:f3:70:30:52:aa:0b:b3:34:63:48:63:
d8:ee:ff:f4:4a:15:1b:44:40:5d:ee:bf:9b:2a:16:
ea:95:cd:05:74:37:09:83:c9:1a:0c:15:c7:18:b5:
7b:d8:1f:cf:53:95:81:70:31:ce:8e:65:1c:ef:b3:
48:8c:41:56:dc:79:d9:72:a9:2a:af:b7:27:f2:ed:
5a:b3:bb:51:9b:6c:f0:92:b6:ac:73:82:e2:11:a3:
1b:4a:a0:b9:1f:3a:c7:6f:87:a3:f3:85:9c:61:f2:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:6B:92:8B:96:11:CF:2D:70:FE:70:4D:73:20:98:E3:07:E3:A6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3e9rkouWEc8tcP5wTXMgmOMH46Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:6a:92:35:d4:43:8f:83:a6:06:12:89:2d:32:10:30:73:7a:
4c:fd:66:7f:e6:42:f0:9f:e2:88:82:fe:67:ea:e3:9a:b5:8b:
e7:b8:d2:d8:e9:09:52:ee:a6:8c:14:a6:7a:9c:c0:3e:bd:d9:
52:b0:c0:52:6b:10:16:16:45:94:df:82:68:8f:19:03:cc:d7:
98:5b:27:20:05:0d:76:63:ee:dc:3a:c5:bf:6c:c9:78:0f:0c:
ae:8d:13:bc:66:33:85:fd:17:d1:99:cd:ba:ce:ba:73:5f:5b:
cd:24:16:47:d5:54:b0:c4:4d:6d:ed:a2:22:92:00:2b:d4:37:
23:f2:20:3e:42:85:1c:89:88:f7:22:ab:5a:f9:26:69:df:61:
74:09:3e:ed:b0:d7:f9:95:fa:99:79:b1:b1:e2:08:12:f0:9e:
81:f1:e5:89:57:1c:59:e7:5e:a4:4e:68:0b:f7:31:0e:3e:41:
93:e1:33:33:77:db:5d:ad:45:80:b7:e5:eb:5d:1b:5c:aa:cc:
52:53:0c:e0:1b:f8:44:0e:a1:a6:e0:f9:a7:15:df:62:31:2b:
19:75:db:5b:a8:8c:74:4a:4d:36:ca:f2:e6:11:54:41:0e:7f:
0c:7b:d2:8c:21:c2:a4:97:e4:ef:ac:fe:8c:85:a8:fb:e0:79:
83:a8:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:43:57 2025 by rpki-client