Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/61WO0o2MnFqd_aRRcMcDbQzg8Kw.roa
File: 61WO0o2MnFqd_aRRcMcDbQzg8Kw.roa (raw, json)
Hash identifier: FU0gnlxfObvxHTfCA8M58NOY2QEMlfM8UJdQVuOxsoo=
Subject key identifier: EB:55:8E:D2:8D:8C:9C:5A:9D:FD:A4:51:70:C7:03:6D:0C:E0:F0:AC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4BBAC59BBF89BB56C6289285DDB1B7C9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/61WO0o2MnFqd_aRRcMcDbQzg8Kw.roa
Signing time: Fri 08 Dec 2023 23:19:40 +0000
ROA not before: Fri 08 Dec 2023 23:19:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4b:ba:c5:9b:bf:89:bb:56:c6:28:92:85:dd:b1:b7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 23:19:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb558ed28d8c9c5a9dfda45170c7036d0ce0f0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:9f:37:00:db:81:1b:93:7d:70:13:5c:b5:
f2:bc:c8:26:cc:a7:d2:79:64:42:3a:7c:62:d7:fc:
16:2a:b1:e9:22:bc:cd:64:cd:39:c9:ae:2a:93:8e:
9a:c2:bd:dc:dd:ee:e0:42:c9:6a:88:32:bb:b4:06:
23:3e:0f:1f:c2:d1:0c:5c:28:7d:6e:23:69:6f:e4:
c9:40:7f:d1:3d:64:92:1f:62:96:b6:80:74:55:b7:
16:91:29:0f:ae:ab:7b:09:d9:38:c5:35:91:59:a1:
ce:03:94:0d:70:ee:b8:98:d0:54:3a:a2:d0:05:10:
05:cf:17:39:c9:6e:6f:84:b6:39:ea:16:20:c8:ae:
e5:35:c7:a5:af:6d:dd:b2:3b:05:cd:0d:d3:52:4a:
98:8d:96:10:40:d8:ab:5a:5c:37:79:cb:55:c6:94:
2f:4a:5d:16:46:23:51:bf:23:ce:23:4e:95:d0:65:
ad:a4:d8:34:57:fe:8b:77:f4:66:36:31:2f:60:1a:
69:44:e6:cb:3a:c3:e8:e4:4b:1c:92:62:eb:ed:21:
fe:95:71:e4:17:f8:40:6f:38:63:5f:03:d4:f5:f5:
02:d7:25:8e:e9:1f:8d:c4:4e:80:11:a9:d3:bc:22:
b9:e2:fd:a1:db:6d:af:1c:51:8b:11:83:62:6a:0f:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:8E:D2:8D:8C:9C:5A:9D:FD:A4:51:70:C7:03:6D:0C:E0:F0:AC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/61WO0o2MnFqd_aRRcMcDbQzg8Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:c9:9f:6a:a0:e2:02:32:f6:18:5e:13:58:6b:d4:4a:f5:0f:
8c:58:77:e5:08:e3:13:86:5e:ad:10:42:ce:fb:2f:57:fa:aa:
19:c0:e8:86:db:41:82:11:67:a8:cc:ec:b8:d6:ad:ce:b9:55:
a4:e4:8e:10:61:17:3d:cb:ea:c7:42:e3:d2:be:0c:c8:61:f7:
a9:d1:7e:89:b4:bd:37:d7:ba:04:0b:c3:cd:09:13:ef:61:da:
b7:f0:24:65:52:2b:f7:2a:3c:59:03:f7:f0:aa:dd:80:37:d2:
3a:70:63:1a:00:46:be:21:c6:10:0b:1e:fe:4e:32:60:d6:70:
c8:aa:8d:5a:1c:25:67:09:75:38:f8:d4:ee:7a:52:6b:f7:6d:
1a:36:0f:a5:97:45:d8:34:86:d8:6c:82:bc:97:3b:ed:7a:45:
5f:7c:29:28:92:87:f2:6a:03:2b:fb:13:d4:a7:b3:87:2a:23:
fe:c0:d6:51:fe:58:40:c1:55:51:26:a8:7d:13:27:f0:f1:15:
96:bc:92:f2:d0:ff:da:80:f7:6c:47:4b:66:29:60:78:74:03:
53:b5:4d:e6:69:b0:2c:d7:31:18:1f:f2:54:25:14:ba:63:a6:
02:a4:16:7b:13:4b:92:77:82:c7:51:e7:49:8f:85:0a:f8:25:
5e:44:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:52:34 2025 by rpki-client