Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8oxOjdS3PfC7AFvOckmlujXse8I.roa
File: 8oxOjdS3PfC7AFvOckmlujXse8I.roa (raw, json)
Hash identifier: LCsngIX8E1Qu5vXCLDfAwHc94LXEQj1c0pp/3Y3Jibs=
Subject key identifier: F2:8C:4E:8D:D4:B7:3D:F0:BB:00:5B:CE:72:49:A5:BA:35:EC:7B:C2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE479C3EDFADA38D9E8A32637559AB6DA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8oxOjdS3PfC7AFvOckmlujXse8I.roa
Signing time: Sat 30 Sep 2023 05:04:59 +0000
ROA not before: Sat 30 Sep 2023 05:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:e479:8ab/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e4:79:c3:ed:fa:da:38:d9:e8:a3:26:37:55:9a:b6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 05:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f28c4e8dd4b73df0bb005bce7249a5ba35ec7bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:cb:db:00:91:25:19:70:70:3a:ba:e6:d2:
ae:c7:f1:59:c3:a3:1f:51:e0:30:e6:e6:20:5f:ea:
1e:ba:b9:8d:21:3c:00:8c:59:4a:08:13:fd:83:6c:
70:af:2f:22:6f:89:da:b5:cb:cf:2a:fb:70:f9:84:
4d:46:5d:40:02:4c:4d:64:e6:41:f1:e2:b7:75:f2:
84:ec:6a:7e:49:51:da:1b:42:c9:6d:00:f2:2f:77:
61:a7:c2:16:0a:4f:67:09:6d:e2:83:3d:cc:0c:a1:
e4:8c:f1:f7:88:ad:c6:cf:27:92:e9:f7:d5:ff:aa:
95:e0:ef:76:7a:2a:a2:95:04:6d:6f:db:53:e6:3a:
f4:05:7a:1d:90:e4:c2:d5:de:d1:11:9a:47:1b:2c:
63:5d:cb:8b:9b:f3:fa:cf:ed:05:98:c0:ca:05:c8:
33:0a:fe:14:5f:a5:0b:f3:9e:68:86:6f:1c:46:11:
a3:34:5c:4f:8a:9a:e0:86:15:0f:9c:f0:fa:80:56:
42:18:3b:b6:fe:e7:2a:1c:59:d4:0f:fd:31:fc:0b:
90:97:00:3f:5a:11:90:d5:c5:17:f9:90:24:8a:13:
00:10:c4:30:41:3c:43:a8:b4:8a:57:13:c9:7b:a1:
35:b5:bb:11:25:f8:b3:94:a4:28:a4:c7:19:67:34:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8C:4E:8D:D4:B7:3D:F0:BB:00:5B:CE:72:49:A5:BA:35:EC:7B:C2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/8oxOjdS3PfC7AFvOckmlujXse8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:9b:c1:79:cb:a0:d2:e2:aa:9e:b9:eb:ed:f7:15:61:36:72:
bc:67:c4:b6:cb:77:9d:59:75:91:06:07:bd:7d:f0:1f:b6:6a:
33:ed:c8:b9:2c:97:54:21:00:05:a0:e2:08:61:be:5d:59:9e:
ba:01:26:6b:c2:bb:1a:93:a4:1b:4f:3e:fb:e3:f4:c1:bd:65:
38:91:62:ad:9f:2c:fc:83:e3:82:89:8e:ab:39:b4:40:41:6b:
47:7a:3f:d5:fb:ef:c4:69:e1:ae:33:93:7f:4e:30:0e:cc:da:
eb:dd:08:cf:bd:e6:e7:b0:4b:54:04:ba:cd:40:8a:af:9d:a4:
ea:5e:34:b8:4e:57:b6:7e:4b:45:47:ae:5e:10:c4:f2:62:6b:
7d:0d:1d:db:4e:f8:e6:65:37:16:23:e7:1b:3a:73:a6:af:cd:
50:0f:62:99:2f:7d:6f:fc:54:cf:8c:ea:12:5f:95:07:a4:ef:
2a:ef:c5:fe:93:e3:39:ae:f9:c0:5c:a9:30:79:d2:f8:f8:5a:
8d:99:52:d2:6b:6f:0e:85:70:9c:6b:71:e5:c0:ca:95:66:03:
b6:24:20:58:98:42:e2:5d:1e:a8:af:51:94:d4:26:ee:0d:ef:
d2:15:b1:a6:2c:3a:02:93:0e:a4:ff:68:51:c7:be:37:fa:8e:
4d:45:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:36:53 2025 by rpki-client