Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8O48jTcV37uPPTOl2qdnmUnQL2s.roa
File: 8O48jTcV37uPPTOl2qdnmUnQL2s.roa (raw, json)
Hash identifier: 0bdG3gPkil+E/R32M3KTQQmWU/spQ/t0jODZUmvLj0o=
Subject key identifier: F0:EE:3C:8D:37:15:DF:BB:8F:3D:33:A5:DA:A7:67:99:49:D0:2F:6B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD50996B45CCB25B87FAA59FF5EF9ED52
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8O48jTcV37uPPTOl2qdnmUnQL2s.roa
Signing time: Wed 15 Nov 2023 22:10:57 +0000
ROA not before: Wed 15 Nov 2023 22:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d5:09:96:b4:5c:cb:25:b8:7f:aa:59:ff:5e:f9:ed:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 22:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0ee3c8d3715dfbb8f3d33a5daa7679949d02f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:a9:c8:66:59:73:b0:60:2f:65:ef:20:8f:
a7:45:1a:dc:4f:ba:23:df:54:fc:96:df:69:87:69:
7c:2b:29:78:f8:5b:97:a8:85:fb:97:03:b0:3d:2b:
d6:5d:f4:f8:73:e0:3f:c9:33:03:d7:3f:41:b0:db:
84:36:d4:9b:58:88:d7:5c:4f:cf:8d:a4:b5:34:d0:
b7:67:94:ed:d1:50:69:ae:f2:34:fc:9e:a0:9c:35:
f8:23:38:c4:4f:20:07:71:7f:cc:df:89:3c:35:d9:
6a:73:dc:aa:d9:3f:21:69:28:f2:d0:6b:13:8d:92:
0d:b8:a6:de:97:ce:60:c6:65:5a:36:4d:14:33:d2:
85:51:32:83:41:8f:bc:22:54:82:23:bc:1a:b4:c1:
3b:85:5f:38:9a:d5:a7:66:cd:fc:af:95:cf:8b:bd:
2f:6b:38:d0:aa:ac:7c:6e:23:99:0a:26:e0:3f:b1:
3f:dd:35:7c:d6:af:d0:10:ac:5a:d4:61:14:5e:26:
b8:f4:2b:33:45:96:fd:1f:81:97:a2:4e:c2:bf:7e:
1f:7b:f1:06:e2:73:e2:07:4e:af:9b:07:a8:88:ed:
21:aa:74:a0:bd:36:49:15:f2:09:26:00:d1:d9:dd:
db:1f:4c:38:87:c9:85:ae:85:22:d0:82:ba:78:5b:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:3C:8D:37:15:DF:BB:8F:3D:33:A5:DA:A7:67:99:49:D0:2F:6B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8O48jTcV37uPPTOl2qdnmUnQL2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:7a:57:37:5b:f7:21:b7:16:e9:21:f8:23:c3:91:f2:b3:ba:
65:ce:cc:20:99:07:28:9a:b9:e6:69:f2:ed:84:fa:0c:86:a4:
7f:ee:0b:67:01:06:72:53:86:92:bb:11:30:4d:30:e5:4f:27:
ce:42:54:43:7b:9f:83:d7:63:43:5f:c2:8e:84:f4:f0:c9:84:
30:85:d9:da:52:b7:02:a0:bc:a5:2e:a0:eb:94:8a:d4:cc:db:
5a:f0:4a:5d:11:8e:5a:81:f4:09:0c:36:79:88:4d:a1:27:37:
65:85:24:36:f6:13:2d:28:d0:3d:d0:76:9c:f5:34:ab:80:02:
03:b3:9b:f8:84:79:df:f7:5d:02:c3:01:c6:03:f6:b0:38:a6:
f4:ee:49:1c:d4:d3:1e:cd:15:1b:51:5a:24:07:eb:bd:c0:4c:
83:fc:63:79:68:53:aa:1b:86:78:1a:92:82:5a:2f:43:0f:b3:
fe:16:95:00:55:86:f1:7f:5c:3f:7b:e2:f7:7c:8f:69:0c:7d:
bd:8a:11:8d:d0:c0:d2:e1:0b:89:ee:49:ed:de:e1:73:7b:ec:
1e:24:b8:0e:13:8c:7b:05:f4:b4:4c:d6:27:8b:09:3f:66:dd:
20:71:06:68:1c:63:c7:db:cd:77:aa:8b:68:dc:44:6c:d0:07:
39:87:74:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:17:22 2025 by rpki-client