Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8OoPqBwQvzfZFg0Ean0fT-ayekQ.roa
File: 8OoPqBwQvzfZFg0Ean0fT-ayekQ.roa (raw, json)
Hash identifier: qFJS1K7/K+YgDxQwzugj6xSMy3B3VSLAV1SlgfrRA5M=
Subject key identifier: F0:EA:0F:A8:1C:10:BF:37:D9:16:0D:04:6A:7D:1F:4F:E6:B2:7A:44
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C265DF777B960245CACCE88AB82EFFFE5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8OoPqBwQvzfZFg0Ean0fT-ayekQ.roa
Signing time: Fri 01 Dec 2023 17:12:21 +0000
ROA not before: Fri 01 Dec 2023 17:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:5d:f7:77:b9:60:24:5c:ac:ce:88:ab:82:ef:ff:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 17:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0ea0fa81c10bf37d9160d046a7d1f4fe6b27a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:36:34:34:51:58:e0:30:fd:0a:6e:7e:ba:
a5:51:f8:f3:83:73:6c:b4:62:f4:17:00:10:b4:13:
aa:37:26:ca:d9:a5:af:27:b3:30:78:56:9e:24:9d:
31:aa:94:10:3f:6a:73:d5:dd:06:fa:b4:8d:b1:7d:
56:e9:67:fd:09:e2:5c:7a:78:6d:1c:55:53:03:18:
61:e1:07:59:90:d1:fb:72:37:b3:68:d3:a2:ca:49:
a4:93:68:e5:ff:78:e9:f1:3a:6e:75:6c:29:72:3a:
c2:d7:4b:99:33:3c:39:35:58:44:10:ad:c1:ce:98:
84:24:b2:a7:04:14:5c:af:17:07:5d:c4:5a:e9:54:
da:d1:4b:4f:57:d1:ba:8c:9a:4d:40:4e:06:76:eb:
ec:6d:21:55:76:7c:bc:3c:0b:05:c7:75:d0:e8:f8:
19:9a:c3:4e:0d:ec:3e:11:7f:71:f7:b6:79:2b:35:
c1:b2:c0:fb:da:6b:4e:6f:49:bb:59:c9:94:9f:1d:
34:e3:fc:c8:28:9e:ae:14:dd:af:a6:af:63:f6:22:
b4:43:37:06:19:3e:54:c8:cf:70:af:f5:83:3e:2a:
f6:f3:08:b0:08:48:48:a1:04:9d:bb:74:af:01:31:
ab:b0:04:93:7f:d3:2f:80:2e:79:1b:6c:4f:80:57:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EA:0F:A8:1C:10:BF:37:D9:16:0D:04:6A:7D:1F:4F:E6:B2:7A:44
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8OoPqBwQvzfZFg0Ean0fT-ayekQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:f7:f1:e6:88:c5:ff:ab:17:42:25:e1:c5:24:17:94:29:38:
f9:b7:e4:e3:4a:25:a9:33:b8:c5:1d:f9:08:fb:d2:0b:8e:71:
4f:87:d6:ce:fe:48:ea:f1:84:fb:77:53:c8:41:20:ee:8e:9b:
e5:c0:e7:a1:5d:6b:90:5e:8d:f8:57:d4:d4:ef:14:54:fd:04:
5c:47:4e:52:7f:04:05:8f:42:bc:53:87:cb:7a:b4:e6:58:13:
e6:6e:a4:5b:71:70:51:90:d1:0f:15:d8:c2:2f:4b:a2:99:f4:
85:ea:83:6e:9b:6c:42:e5:f8:30:e6:fa:f8:6e:f1:5d:36:d4:
e8:6b:59:d3:83:d6:48:a2:4e:d8:e0:09:34:62:99:45:bf:d0:
44:2d:da:f6:29:43:4b:62:8d:19:75:92:71:15:6e:42:54:40:
72:fb:c5:0a:88:d0:0e:e1:39:8c:bc:8a:70:20:87:19:28:b8:
d9:38:0b:4b:db:80:cc:99:44:6e:b0:98:2f:a1:74:d2:42:dc:
1d:95:56:ee:15:f8:d2:a2:92:d8:b2:39:16:da:0e:98:0f:f0:
43:19:ea:62:e8:fb:d6:7a:18:4f:cd:30:06:ae:33:fb:ad:69:
98:da:00:40:af:d0:b8:49:8d:bc:d5:0e:51:2c:d5:a3:ce:23:
91:85:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:49 2025 by rpki-client